Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: aUf1i/I18+AJpLU8CNk+4Vo0B4ovCUUkYw4QPVBy1zk=
Subject key identifier: F1:60:FA:F7:1F:A0:4D:7C:74:D4:D1:D2:2B:46:42:D8:D7:39:AA:29
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019F9248500F4C170EB99055828306038197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1935
Signing time: Fri 24 Jul 2026 04:00:40 +0000
Manifest this update: Fri 24 Jul 2026 04:00:40 +0000
Manifest next update: Sat 25 Jul 2026 04:00:40 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: g2MUvn+YoVaINEBo2evhDxcVV9Q9I0jBDCWLYWKwJGI=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:50:0f:4c:17:0e:b9:90:55:82:83:06:03:81:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Jul 24 04:00:40 2026 GMT
Not After : Jul 25 04:00:40 2026 GMT
Subject: CN=f160faf71fa04d7c74d4d1d22b4642d8d739aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:e1:48:1e:b3:26:d2:52:be:d1:3c:5b:cf:
e5:6b:65:37:68:ac:65:7d:f8:05:7e:df:7c:2a:34:
de:d5:9f:73:1b:78:dc:ea:d2:09:85:44:4f:84:1f:
13:23:16:81:52:a3:0b:89:e0:a6:a7:64:6d:5c:9a:
2b:05:b2:dd:d2:96:79:22:5f:ba:77:eb:8c:d0:30:
80:40:bb:b9:ec:43:66:b0:62:38:20:ee:96:60:1d:
25:29:f6:2c:a2:95:40:77:ea:b1:69:2d:25:be:eb:
e6:a0:3f:91:83:6b:fe:dc:12:08:4b:e4:1e:74:b2:
87:18:4d:b0:a8:b2:53:91:e0:e3:e1:d4:99:4b:c7:
39:64:3a:a3:11:dd:88:b5:b9:52:5b:fd:2c:25:04:
4f:c1:82:18:db:ea:0d:43:a4:5f:3e:1b:d7:cb:f5:
98:1b:9a:48:b5:f1:7f:07:96:4d:87:00:3f:19:b3:
f0:1c:eb:c6:3f:0e:f9:16:ac:7b:48:8e:04:d0:c2:
17:22:55:e2:f1:6b:34:37:da:06:bc:9d:a6:4a:d8:
33:fe:24:18:5d:9f:52:eb:f4:a2:e9:75:3b:5d:b1:
b2:c3:b0:f0:dc:72:9b:6d:c1:db:15:b2:69:06:32:
84:7c:45:95:a6:2a:55:84:81:91:9b:e3:94:b2:fe:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:60:FA:F7:1F:A0:4D:7C:74:D4:D1:D2:2B:46:42:D8:D7:39:AA:29
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:36:02:0d:80:e2:71:39:9c:51:8f:13:93:c3:eb:4d:95:
47:d8:78:d6:a5:78:cc:6c:5f:4d:a7:49:ef:57:60:54:4b:34:
f4:d5:0d:32:e6:19:9a:49:16:68:61:55:3b:7f:b6:0a:87:7a:
4f:38:22:21:d9:e2:6d:58:b0:f4:54:2b:dd:28:99:cd:88:ab:
1e:47:3a:76:ad:c7:4a:2a:4b:73:6f:fe:53:0f:4b:67:34:fd:
0b:c4:f6:56:76:e0:7e:94:5e:98:c2:b4:73:1e:72:86:bf:4f:
cc:dd:7b:85:80:d7:5f:2d:f0:f6:eb:e5:c0:08:a4:0a:ee:6d:
ef:d4:ba:92:13:65:bf:e6:7d:a6:49:c5:db:cc:76:b4:7e:49:
cf:c8:14:71:b4:44:8c:30:91:68:72:d8:77:ce:69:83:90:00:
b5:a2:70:53:77:1e:55:c5:17:01:4b:49:67:ff:17:c6:7e:3c:
7d:f8:57:5b:e3:15:cd:2a:5a:b5:ac:45:58:ef:ee:54:c7:c4:
83:5a:2c:f8:ae:ff:ab:6b:41:c4:5c:b1:79:22:8d:89:3a:06:
51:f5:de:d9:a4:27:f6:37:39:9f:ed:59:1f:67:05:a4:be:2b:
39:13:21:45:37:48:67:77:ff:e6:6b:77:5a:03:fe:52:5d:1e:
32:aa:9a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:39 2026 by rpki-client