Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: 8wJGBOxeg0bz3Z36w3UirG9UIslnbC8Bf4gVyUYovwo=
Subject key identifier: 7D:DF:E8:2A:DC:E1:F8:42:F8:B4:B3:EC:9C:A9:72:E1:90:94:75:32
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019E1D9097C213357D0049B8D1826862887E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1874
Signing time: Tue 12 May 2026 19:01:15 +0000
Manifest this update: Tue 12 May 2026 19:01:15 +0000
Manifest next update: Wed 13 May 2026 19:01:15 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: MZ1cyDx+BzqZJYrT06bLdctiIQ8WFSIYC5KAZWQ8hmI=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:97:c2:13:35:7d:00:49:b8:d1:82:68:62:88:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: May 12 19:01:15 2026 GMT
Not After : May 13 19:01:15 2026 GMT
Subject: CN=7ddfe82adce1f842f8b4b3ec9ca972e190947532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:18:95:06:da:70:de:9b:17:4c:86:b1:4c:
e9:d4:1f:da:81:e7:e8:01:36:3f:e4:12:2a:93:fe:
66:c2:b8:4e:e4:63:37:47:b5:6c:12:a0:ef:36:b2:
fd:a9:96:6d:df:55:4e:11:ef:ff:f4:bf:c9:cd:e8:
01:37:e7:08:38:7b:ea:be:c1:2e:47:e7:8d:c5:51:
83:a3:b1:03:84:57:79:70:1c:1a:bf:3b:5b:8d:3b:
4e:0b:7d:8e:30:78:51:39:95:17:9e:50:b0:7d:5a:
36:09:8f:07:ca:f5:9e:bd:de:e7:69:27:ef:7e:28:
fb:b1:40:58:4f:12:34:ce:9d:e9:d7:e3:0b:44:ce:
3d:d3:88:15:b8:72:a1:6e:b3:af:52:64:72:3b:4e:
1e:c2:e2:13:c6:bc:6b:33:ae:ae:81:28:d6:9d:5d:
21:22:f4:96:59:0e:17:cf:47:76:18:86:c7:a8:7c:
b2:f1:9c:87:28:cc:0a:b9:6b:35:ed:2c:bc:ce:01:
41:7a:3a:af:b4:f5:b1:ab:fa:35:e2:a4:a7:80:b6:
2b:cd:61:46:5a:59:69:7e:6e:92:69:a9:39:a4:bb:
ba:8b:4d:1b:d5:90:2b:2e:01:ea:27:f1:eb:d9:82:
96:7b:8d:d7:db:39:e8:88:44:cf:35:e8:f2:59:74:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DF:E8:2A:DC:E1:F8:42:F8:B4:B3:EC:9C:A9:72:E1:90:94:75:32
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:44:11:e5:da:3c:39:e2:a1:32:18:b8:84:41:03:cd:d4:78:
f1:ea:03:60:c7:d8:14:69:b4:8b:86:da:50:f2:ad:a6:19:38:
8a:c5:73:87:d3:e0:29:0d:aa:e9:1d:f3:cd:40:30:3a:a5:ca:
e5:70:6d:99:64:55:6e:e1:7d:f4:3c:f5:59:52:c2:7f:bd:75:
61:ca:b5:93:8a:59:04:fc:89:fe:0d:ac:cc:44:f8:ef:46:21:
35:67:3f:ac:0f:cd:58:84:02:7d:f0:7f:c2:f6:1f:a0:9f:31:
f5:3f:49:5a:34:51:b2:ac:bb:9a:c3:99:52:24:c5:f1:9c:6e:
f3:1d:2b:ee:8d:d2:93:2d:3e:86:82:28:3f:59:9c:92:70:83:
c2:19:68:59:ae:b8:48:60:82:09:59:5d:35:85:f9:f2:e2:07:
fe:5d:c8:01:f0:88:cd:53:76:1b:ef:02:48:0b:02:45:a8:64:
95:38:32:c8:57:89:a5:e6:80:1c:98:d2:93:6c:a2:8a:b3:e1:
d9:be:ea:78:27:c1:ef:02:d7:34:a0:08:a1:d3:fa:85:65:7a:
00:df:c1:e3:3a:39:f4:55:8b:32:a8:31:89:48:3e:6a:a3:3f:
e4:68:4b:a6:4e:68:31:37:81:68:3e:70:a8:ca:f0:7a:3f:11:
a7:f0:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:18 2026 by rpki-client