Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: Kj87nXiiTA/I7bI9NvytJa+8gO58q2sVCuacaFNps3g=
Subject key identifier: 4E:51:6B:70:43:9C:01:FC:D4:A8:32:FA:D8:E8:C0:60:7D:39:49:F5
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019D284DDCD7AAAE114815B237C6300E800E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 17F5
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: V0Fu3ifvWc0ppVjU269VJUPaByy5ti/DSvcqb45r6nE=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:dc:d7:aa:ae:11:48:15:b2:37:c6:30:0e:80:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=4e516b70439c01fcd4a832fad8e8c0607d3949f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:6c:88:e5:26:19:2d:d0:49:29:4d:b9:9d:
de:15:48:9b:46:7f:c8:a7:d9:3e:e6:50:b1:ab:4e:
2b:41:98:ae:42:ca:9a:7f:6b:a2:eb:8f:53:7e:b4:
c9:a6:09:c6:c7:6c:34:96:dd:ad:05:95:81:38:10:
26:84:7e:e0:a8:47:a7:70:e7:86:72:15:93:8f:20:
36:d1:2c:e6:3c:b7:53:16:9b:ff:40:81:ff:38:15:
8d:b7:0e:b5:87:58:bd:b7:77:9a:9b:53:cf:b6:e7:
c9:71:f2:56:8e:c1:c3:c5:f5:5e:b8:f8:31:c9:d8:
28:9d:a4:ab:a3:d0:e2:32:cc:e1:06:f0:ee:5e:3a:
b6:4b:87:4f:93:fb:d4:d4:30:14:b0:3b:fd:68:f3:
db:f9:36:1b:17:a8:db:cb:b8:99:0e:88:52:ce:d0:
2b:8d:ea:3e:a2:06:46:74:93:af:df:38:0c:12:f8:
cf:91:d4:8a:43:c1:d0:36:b0:13:1a:9d:f1:ef:b5:
89:e6:41:74:5f:fc:c6:b5:44:6e:b0:0f:6f:51:68:
5a:57:92:ec:47:bd:c0:42:e5:80:16:39:e1:bc:27:
87:df:a0:e2:ee:ed:f5:81:78:fc:7f:5a:bf:bd:47:
e4:d7:98:e8:63:cb:e4:48:3c:bf:5b:50:30:ab:e4:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:51:6B:70:43:9C:01:FC:D4:A8:32:FA:D8:E8:C0:60:7D:39:49:F5
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:03:6f:d6:52:db:af:db:65:9f:f4:f9:d9:ee:52:91:cf:
a9:e2:ba:0c:08:9d:d5:04:1a:24:3d:e3:cd:9b:0d:35:2d:6b:
a0:00:39:e7:c5:9d:b9:41:8b:97:ac:ea:1a:b8:18:34:ef:06:
e5:3c:d7:04:de:9d:f6:7f:c1:bc:f8:16:a0:a4:ad:0f:89:d3:
99:5b:eb:62:3e:c0:8a:e1:f5:15:17:f4:ae:ab:7e:a6:bf:27:
74:d0:17:0f:47:08:80:be:6c:cb:7e:da:ba:bf:8c:9a:3b:0a:
8f:46:7c:b8:73:04:40:98:87:ca:44:71:79:91:55:02:66:92:
da:e4:ae:dc:fe:3c:c1:22:10:ba:29:cd:5b:f6:30:1b:de:d1:
d8:1b:d2:9a:a3:a9:d5:b0:bf:78:48:8b:6a:81:e7:3c:9b:ea:
bc:6f:d6:c7:07:4e:c5:bd:29:f0:cd:9b:39:66:fd:02:33:1e:
d5:b9:a5:fa:ac:cd:fb:a5:fc:3e:c8:83:7d:10:3a:b3:c6:0a:
bc:fd:be:63:16:88:cd:1b:d7:b6:2c:5c:c0:c6:ac:84:be:0e:
4c:2e:ba:ce:f7:94:52:a0:d9:b7:89:f0:75:7c:c9:94:da:3e:
82:40:a4:ac:47:86:fc:bb:b2:62:c2:59:a9:0e:1d:19:4e:67:
6a:7c:ae:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTdzXqq4RSBWyN8YwDoAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzBmZTFkNzVmN2RhNzZkMmUzZGMzNDRmYjFmMGIwYjY5
ZGUwMDEwHhcNMjYwMzI2MDQwMTI0WhcNMjYwMzI3MDQwMTI0WjAzMTEwLwYDVQQD
Eyg0ZTUxNmI3MDQzOWMwMWZjZDRhODMyZmFkOGU4YzA2MDdkMzk0OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLtsiOUmGS3QSSlNuZ3eFUibRn/I
p9k+5lCxq04rQZiuQsqaf2ui649TfrTJpgnGx2w0lt2tBZWBOBAmhH7gqEencOeG
chWTjyA20SzmPLdTFpv/QIH/OBWNtw61h1i9t3eam1PPtufJcfJWjsHDxfVeuPgx
ydgonaSro9DiMszhBvDuXjq2S4dPk/vU1DAUsDv9aPPb+TYbF6jby7iZDohSztAr
jeo+ogZGdJOv3zgMEvjPkdSKQ8HQNrATGp3x77WJ5kF0X/zGtURusA9vUWhaV5Ls
R73AQuWAFjnhvCeH36Di7u31gXj8f1q/vUfk15joY8vkSDy/W1Awq+SGAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Ra3BDnAH81Kgy+tjowGB9OUn1MB8GA1UdIwQY
MBaAFD1w/h1199p20uPcNE+x8LC2neABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYt
Yjg1MmJkODEyM2YwLzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYtYjg1MmJkODEyM2Yw
LzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHADb9ZS
26/bZZ/0+dnuUpHPqeK6DAid1QQaJD3jzZsNNS1roAA558WduUGLl6zqGrgYNO8G
5TzXBN6d9n/BvPgWoKStD4nTmVvrYj7AiuH1FRf0rqt+pr8ndNAXD0cIgL5sy37a
ur+MmjsKj0Z8uHMEQJiHykRxeZFVAmaS2uSu3P48wSIQuinNW/YwG97R2BvSmqOp
1bC/eEiLaoHnPJvqvG/WxwdOxb0p8M2bOWb9AjMe1bml+qzN+6X8PsiDfRA6s8YK
vP2+YxaIzRvXtixcwMashL4OTC66zveUUqDZt4nwdXzJlNo+gkCkrEeG/LuyYsJZ
qQ4dGU5nanyuEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:45 2026 by rpki-client