Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: Gx/hO8ZTzxsfScWjwopa+Jkwn81a2sfOzraiQw76QKA=
Subject key identifier: 23:5E:95:B6:3A:98:04:B6:69:1A:3D:6A:85:5C:2C:0D:23:B7:80:49
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 01A0F78E51BDD0B37E43401DF911802FD746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 19EE
Signing time: Thu 01 Oct 2026 13:01:34 +0000
Manifest this update: Thu 01 Oct 2026 13:01:34 +0000
Manifest next update: Fri 02 Oct 2026 13:01:34 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: Rv9Wjifu/6KKHWCe903GV8caYA/BmA/Ap7WMjgs88wk=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8e:51:bd:d0:b3:7e:43:40:1d:f9:11:80:2f:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Oct 1 13:01:34 2026 GMT
Not After : Oct 2 13:01:34 2026 GMT
Subject: CN=235e95b63a9804b6691a3d6a855c2c0d23b78049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:79:4d:50:1a:53:82:7c:ab:42:b9:71:41:
e6:70:5d:9f:3a:30:bb:61:e2:de:60:c1:5f:5f:0c:
cf:84:09:5b:e3:38:e9:ee:82:d8:7e:4b:23:26:b7:
07:47:f0:48:ce:57:08:65:b7:d2:f2:b7:53:d4:fe:
8c:52:ff:4c:4b:26:a5:aa:a1:dc:52:93:99:b3:00:
57:a1:8c:1e:2f:bc:73:3e:37:17:6b:5a:38:20:70:
80:dd:66:82:7b:24:28:c6:31:c6:49:c8:c3:77:77:
96:81:30:53:86:a0:c4:cb:c8:2c:10:00:29:6d:c1:
46:d2:f9:a7:9b:f5:f4:76:ee:8e:59:50:28:ca:e6:
a8:96:a8:7b:a5:36:d3:c1:0e:f4:8f:8f:b8:96:57:
c4:03:8a:13:a4:be:de:29:fa:9d:ae:78:5d:90:f5:
a7:ed:f5:6f:c9:dc:9c:14:db:77:b8:5a:d1:dc:49:
10:81:39:3f:8e:68:55:7e:30:cf:26:14:9d:c3:29:
b8:cc:07:dd:cf:33:cc:bb:4c:82:f4:b6:de:83:d8:
85:f6:57:9d:23:fc:d7:7a:a1:b3:12:fc:ac:b1:74:
4e:8b:22:0b:55:e3:23:dc:36:c1:9e:e6:54:33:b4:
41:81:19:85:b7:59:06:f3:6f:1a:a8:a1:16:47:f0:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:95:B6:3A:98:04:B6:69:1A:3D:6A:85:5C:2C:0D:23:B7:80:49
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:14:90:0e:cb:df:ef:30:f4:1d:af:6c:e0:70:22:0e:9c:c1:
c7:57:6e:d3:e2:dd:1e:09:fb:27:34:e3:b0:d5:ba:20:13:d9:
69:06:bd:cb:25:be:b5:a7:c5:a7:10:25:a0:0d:91:2f:d9:ca:
10:e0:0e:2d:4f:fe:76:0f:d1:46:20:b2:4d:32:20:26:d8:8b:
48:fa:47:42:18:02:1d:47:e0:81:14:b0:54:bd:1a:ca:56:1d:
63:46:26:0d:6d:41:c1:75:20:e5:63:cc:ef:50:d7:9c:f8:b4:
28:c4:e2:ba:f0:c0:07:08:8f:3e:86:b1:8b:16:6f:6f:5e:8d:
1b:f6:c1:78:1f:02:c0:a9:b5:33:25:63:36:0a:2b:af:1d:a0:
88:70:ca:24:44:41:02:7b:a5:cd:aa:a0:9a:e3:cc:b6:12:a6:
4a:b5:ae:a4:e2:9c:60:e2:11:d2:f0:fd:50:b2:86:43:21:6f:
29:3f:4a:39:0d:c3:83:38:67:9f:de:a1:28:d9:8f:2d:5b:3f:
e8:c0:4c:69:39:30:b8:dd:0b:4c:f6:dd:a1:25:1b:77:7b:d0:
72:84:1a:6d:39:e9:d5:14:bc:24:43:e5:3a:c1:32:6a:8f:ac:
eb:e9:60:db:5b:c6:34:8b:db:c0:b6:de:bb:05:9d:3b:50:5c:
36:ce:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:32:31 2026 by rpki-client