Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
File: pdjtUEgIIjS3KoK2E2ydILA27nA.mft (raw, json)
Hash identifier: /4kkG/m8UJuDT6/zhE9vo7iF1WarmTGfsYlILlxOr6M=
Subject key identifier: 2E:22:8A:04:64:1D:BB:54:5D:12:8E:AC:91:1C:97:BA:EE:20:9D:4F
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Certificate issuer: /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial: 01A0E92EC9244111F330C052949134360431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
Manifest number: F3
Signing time: Mon 28 Sep 2026 18:02:32 +0000
Manifest this update: Mon 28 Sep 2026 18:02:32 +0000
Manifest next update: Tue 29 Sep 2026 18:02:32 +0000
Files and hashes: 1: fZhsLc9WXdkHhK7mR8ERizE1kJQ.roa (hash: NrJrX0EfF2/UhROqrCTS8hvTOUzCH9tbVAPmA+CILDc=)
2: pdjtUEgIIjS3KoK2E2ydILA27nA.crl (hash: tmTegQfEZbkCweBPMaomSvs2gNKQwps205bsfKq4zsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:c9:24:41:11:f3:30:c0:52:94:91:34:36:04:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Validity
Not Before: Sep 28 18:02:32 2026 GMT
Not After : Sep 29 18:02:32 2026 GMT
Subject: CN=2e228a04641dbb545d128eac911c97baee209d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:87:db:d0:72:02:6e:50:85:71:c9:d3:db:
0b:41:06:c3:68:d9:b8:0a:38:3e:0a:e1:ff:0a:2b:
ea:91:1b:f0:81:20:84:2d:ce:51:c7:18:2e:bd:44:
83:fd:6e:74:93:ce:2f:f0:87:e6:6a:83:52:12:57:
28:52:6c:4c:e4:f0:32:de:0e:e4:4c:c2:71:30:4a:
2f:2e:af:1e:40:25:2e:6a:2e:bc:8b:fe:72:c4:42:
c9:e4:49:45:9e:db:48:e1:a0:96:f3:fa:ee:c9:21:
f7:87:75:fd:a0:fc:b0:f7:bd:63:83:0d:1e:0a:89:
d8:9c:2d:08:9e:c5:b3:c6:50:e5:8f:99:0a:54:fa:
0f:d5:82:aa:9e:cd:66:3f:14:5c:04:54:e8:f7:64:
e5:b8:af:96:ad:98:13:0b:18:1e:3f:9d:81:c6:d7:
3f:4d:11:11:c3:6b:c5:56:c5:1d:d3:aa:33:97:28:
5c:af:78:0c:1e:33:20:f4:c4:6e:f9:e5:5e:1a:3d:
c5:c2:f7:e4:4d:64:9c:7b:49:91:92:82:3a:74:a8:
8e:68:80:a5:ea:3a:24:10:dc:42:5d:ae:aa:3c:93:
63:c1:d1:c1:2c:a4:8b:81:d9:94:31:d0:19:40:24:
dd:4f:91:ee:db:4c:23:5d:42:24:ee:2e:42:35:cb:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:8A:04:64:1D:BB:54:5D:12:8E:AC:91:1C:97:BA:EE:20:9D:4F
X509v3 Authority Key Identifier:
keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:00:b7:79:20:78:f9:43:e2:d1:f0:ee:d1:a8:42:17:f2:c9:
30:a0:b6:3f:7f:d9:2c:ab:89:af:18:16:9e:0e:19:6a:91:7c:
25:08:32:e2:f5:04:c0:d0:55:f9:f5:48:b8:8f:42:55:38:b7:
6e:ec:ce:e2:74:f2:84:ef:bd:8d:b1:b7:83:b1:81:9e:9c:08:
8e:19:48:5c:0d:5f:64:8b:35:00:58:d5:22:20:57:27:a3:0f:
82:0a:b7:3c:4a:a9:64:6b:28:c2:d8:94:e3:f9:17:14:0b:b2:
89:bd:b5:e6:da:5c:51:12:ed:57:57:ad:45:ac:5f:87:37:33:
3c:ac:b5:a0:3b:b3:93:ad:f4:c4:a4:40:e7:d5:92:03:f1:ca:
f2:0a:0e:67:f3:a3:6d:d0:b1:96:e6:ea:22:f5:8b:7a:b6:e4:
2e:ed:10:a3:75:ea:9d:25:19:aa:b6:82:91:f7:52:96:e9:a5:
14:04:da:8e:ac:61:b9:ec:6f:9d:f8:2c:2e:77:13:66:b7:a9:
2a:c3:c3:88:c7:e0:bc:05:75:86:68:bd:92:3d:9c:87:81:96:
fd:4a:a3:2f:06:0b:69:b6:46:9a:33:c7:61:4f:2c:f1:1d:4f:
02:aa:53:80:26:6d:28:a9:e8:bf:7b:33:38:d1:97:21:de:f6:
2b:60:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:38:38 2026 by rpki-client