Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: bL/19VDODjHsqH5R6krsyn/J95MbT0to+EWvAapDRqA=
Subject key identifier: A1:4A:84:14:2C:63:36:E1:12:7B:A3:C5:D5:6B:28:E6:B9:A8:B6:B1
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019E1EDA36829840AAC9151B2AEB1C7376D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 0556
Signing time: Wed 13 May 2026 01:01:17 +0000
Manifest this update: Wed 13 May 2026 01:01:17 +0000
Manifest next update: Thu 14 May 2026 01:01:17 +0000
Files and hashes: 1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
2: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: KJoBVCB1TaPEICopUDkfD8KNj3ZbDru0ScsNUOIglT8=)
3: SzDjXmkPc81OxUH-J5X5s68f_Jg.roa (hash: uY/BmEoUTgPIr21DkbWh/gHnXF9vEuYAHGIFIehB+YQ=)
4: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (hash: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=)
5: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
6: uev_Cdm4I3bqHHs8NJV7cbJIl5Q.roa (hash: s4Q03IYP8nRfMJZytfhhkdjuwRkc+JRlSu6SQVdvSw4=)
7: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:36:82:98:40:aa:c9:15:1b:2a:eb:1c:73:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: May 13 01:01:17 2026 GMT
Not After : May 14 01:01:17 2026 GMT
Subject: CN=a14a84142c6336e1127ba3c5d56b28e6b9a8b6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:12:ba:b9:b6:a5:13:b8:cd:de:0a:98:e3:
64:11:a7:6b:c9:ac:82:1b:86:d6:41:a8:fa:63:ff:
60:4f:65:a5:54:47:9a:c9:95:54:08:4e:5c:56:6d:
9a:4a:99:d7:ba:e6:26:c1:82:5c:65:fd:f0:63:94:
3a:b6:a4:55:14:ca:58:84:c0:84:d6:af:06:a7:91:
73:28:9d:de:3d:9e:22:64:34:dc:7b:7d:24:1e:e7:
af:19:5e:b9:f1:4e:31:52:16:13:85:0b:7e:c6:c0:
26:53:45:14:1d:40:16:55:1c:32:79:61:d0:a0:d8:
da:72:df:3d:b0:9b:5f:30:09:bc:fe:87:96:a6:2d:
e5:c3:f3:ff:dd:4b:60:ac:de:a7:08:c7:6c:be:b4:
d4:07:ff:84:ee:4e:9d:0f:d3:4c:99:28:70:10:e1:
8e:bc:68:3c:cc:a9:15:7e:4c:e3:e3:5d:0c:54:5b:
a8:58:6e:e8:ed:0a:bc:aa:f9:d0:a2:91:63:78:87:
df:19:ba:68:21:74:b7:4e:02:39:27:3c:43:7b:ee:
8b:0a:57:7c:88:35:d8:82:34:48:c3:7e:b2:a0:b2:
ee:6f:3a:71:d1:3e:81:e5:75:53:a4:e5:e8:5c:0a:
3e:0e:d8:86:fd:63:44:61:cf:fa:72:8a:81:05:cc:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4A:84:14:2C:63:36:E1:12:7B:A3:C5:D5:6B:28:E6:B9:A8:B6:B1
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:21:d8:ff:c8:25:9f:a9:c3:9e:c8:f6:d0:e0:01:e7:fe:1e:
fc:21:3a:b7:4e:ce:72:52:01:65:5f:62:d0:30:f2:5f:6f:16:
30:ef:48:c9:2e:10:38:52:cd:32:fc:36:62:4a:55:f3:d7:f2:
18:ec:4f:91:a2:97:b9:cd:2d:05:21:f7:3a:8f:1e:b5:e3:9d:
0c:9a:05:a8:b0:99:d7:5a:af:52:37:17:21:e7:97:01:6f:9b:
96:92:fc:ba:19:3a:b1:6d:ac:9b:40:5c:69:15:63:de:87:ce:
ba:a3:0d:9b:80:f0:2b:63:ea:8e:2c:8a:13:a5:63:62:d5:ec:
fc:3a:d5:e9:87:35:65:f5:00:e9:ae:4a:97:8b:aa:3e:6c:64:
f9:93:e4:b0:02:2a:7c:6f:c2:61:74:17:2d:dc:c4:3f:48:0f:
a3:a2:cb:f5:21:ad:4f:7e:46:07:f5:3a:1e:a0:31:86:8a:fa:
05:87:68:1a:34:83:c7:75:61:7d:cc:0e:d1:36:77:73:95:af:
4a:6d:bc:c2:11:8f:66:08:84:1d:53:df:e3:b6:58:cd:d4:95:
71:92:b6:21:ae:c6:9c:4f:1d:eb:9f:97:35:87:62:10:40:08:
a8:d9:d1:3d:18:29:6c:b0:7d:d0:95:3c:9c:a1:64:fa:a2:15:
2f:7e:ea:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2jaCmECqyRUbKuscc3bTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx
ZDlkNjQwHhcNMjYwNTEzMDEwMTE3WhcNMjYwNTE0MDEwMTE3WjAzMTEwLwYDVQQD
EyhhMTRhODQxNDJjNjMzNmUxMTI3YmEzYzVkNTZiMjhlNmI5YThiNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW0Surm2pRO4zd4KmONkEadryayC
G4bWQaj6Y/9gT2WlVEeayZVUCE5cVm2aSpnXuuYmwYJcZf3wY5Q6tqRVFMpYhMCE
1q8Gp5FzKJ3ePZ4iZDTce30kHuevGV658U4xUhYThQt+xsAmU0UUHUAWVRwyeWHQ
oNjact89sJtfMAm8/oeWpi3lw/P/3UtgrN6nCMdsvrTUB/+E7k6dD9NMmShwEOGO
vGg8zKkVfkzj410MVFuoWG7o7Qq8qvnQopFjeIffGbpoIXS3TgI5JzxDe+6LCld8
iDXYgjRIw36yoLLubzpx0T6B5XVTpOXoXAo+DtiG/WNEYc/6coqBBcx+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFKhBQsYzbhEnujxdVrKOa5qLaxMB8GA1UdIwQY
MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut
NDIyNTIzYzRlNjhiLzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi
LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniHY/8gl
n6nDnsj20OAB5/4e/CE6t07OclIBZV9i0DDyX28WMO9IyS4QOFLNMvw2YkpV89fy
GOxPkaKXuc0tBSH3Oo8eteOdDJoFqLCZ11qvUjcXIeeXAW+blpL8uhk6sW2sm0Bc
aRVj3ofOuqMNm4DwK2PqjiyKE6VjYtXs/DrV6Yc1ZfUA6a5Kl4uqPmxk+ZPksAIq
fG/CYXQXLdzEP0gPo6LL9SGtT35GB/U6HqAxhor6BYdoGjSDx3VhfcwO0TZ3c5Wv
Sm28whGPZgiEHVPf47ZYzdSVcZK2Ia7GnE8d65+XNYdiEEAIqNnRPRgpbLB90JU8
nKFk+qIVL37qoA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:32:38 2026 by rpki-client