Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: tuLZ55tGhMXBp0wD3sUuQ1LKfN5+4Yau/zbpUfGF/No=
Subject key identifier: 1D:B0:1F:45:38:82:13:4F:A7:84:A2:93:93:73:62:F5:A1:CE:08:13
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019D284DC2046D50FB8D1981DC94796E051A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 04D6
Signing time: Thu 26 Mar 2026 04:01:17 +0000
Manifest this update: Thu 26 Mar 2026 04:01:17 +0000
Manifest next update: Fri 27 Mar 2026 04:01:17 +0000
Files and hashes: 1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
2: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: cMwlP/yYFhmsdqu0NeJvKJkcgtbB9/McJJgnINz7qC8=)
3: SzDjXmkPc81OxUH-J5X5s68f_Jg.roa (hash: uY/BmEoUTgPIr21DkbWh/gHnXF9vEuYAHGIFIehB+YQ=)
4: _yxMDdNQJ6Gep4Y5SiebkN9OZOc.roa (hash: ngJbG5m3YmsYx5tKmvort95IPotFGSUX55NRo92YHuQ=)
5: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
6: uev_Cdm4I3bqHHs8NJV7cbJIl5Q.roa (hash: s4Q03IYP8nRfMJZytfhhkdjuwRkc+JRlSu6SQVdvSw4=)
7: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c2:04:6d:50:fb:8d:19:81:dc:94:79:6e:05:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Mar 26 04:01:17 2026 GMT
Not After : Mar 27 04:01:17 2026 GMT
Subject: CN=1db01f453882134fa784a293937362f5a1ce0813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:8d:6e:e5:e7:07:f8:10:2e:44:70:b5:2e:
1d:85:69:21:be:d6:47:eb:a8:74:ad:13:b9:fd:3f:
2b:0e:b0:9c:49:9e:81:d7:e3:8b:24:31:70:4b:e0:
5a:14:ff:02:ae:2f:c4:9f:36:a2:7a:a7:9d:81:af:
72:fc:74:a5:bf:6a:62:ba:60:3a:e6:9f:a8:9b:0b:
a4:b6:df:aa:74:48:ea:88:a0:ba:fc:31:d2:ca:3b:
54:90:52:fc:de:a6:d1:44:43:cc:20:b8:f7:12:87:
4d:fa:d6:0b:f5:4b:74:07:d7:1c:d8:2b:64:57:28:
d8:f2:10:64:7c:ef:7b:2f:f8:16:64:e5:e8:51:14:
81:93:19:ef:97:9d:91:96:ce:85:12:cf:af:38:56:
b9:af:f6:58:15:01:3f:b0:34:dd:b0:9f:0b:cf:95:
84:a3:f8:25:ac:11:5c:67:ac:65:0b:9a:8e:e1:c4:
2d:ff:fc:20:f9:70:82:69:16:a8:ad:f8:d0:c3:73:
8b:33:fb:78:a0:09:e7:d2:3c:5d:2f:df:5b:2f:99:
68:85:a4:6b:b9:24:67:c8:db:b8:7c:67:42:44:fa:
ea:f4:92:95:09:df:ed:33:eb:20:f2:75:66:57:ed:
e7:c1:d4:36:e1:d2:e4:8e:4f:f7:d3:9b:a7:2c:25:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:1F:45:38:82:13:4F:A7:84:A2:93:93:73:62:F5:A1:CE:08:13
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ac:5a:5b:8f:9d:a6:69:a6:ce:7c:93:54:0c:9f:34:7b:98:
4f:cc:eb:f9:a0:b4:e1:bc:da:58:f4:dc:d0:5c:d3:71:46:73:
da:5a:5e:b6:95:6f:51:70:fa:95:e9:3c:70:8b:46:1f:92:43:
3a:48:a4:bd:3d:1c:ea:f3:1d:2a:13:17:28:73:42:c3:4c:2e:
a4:67:79:8c:07:cc:33:e9:ae:0a:e7:84:2b:5d:41:96:7e:9f:
75:2a:59:c6:44:8c:e3:74:db:60:9c:c9:02:f0:77:d2:7b:97:
de:2e:4e:ef:c8:fb:47:70:c6:eb:68:f4:03:55:60:f3:dd:ad:
36:b9:7e:06:62:9e:4d:01:8d:52:87:7a:42:a0:a9:91:cd:04:
7e:f8:50:2a:a7:ef:02:64:1b:2e:d9:86:6b:dd:29:bf:d7:f0:
d2:16:56:0f:80:cb:b2:e0:82:3e:0d:5b:57:ee:6d:89:d3:77:
71:ff:ec:74:6d:9f:23:90:57:fc:bd:20:51:91:12:7d:31:fd:
72:49:f1:93:3d:55:4f:aa:dd:92:85:bf:45:e7:f8:af:b8:20:
be:b3:a4:e1:9d:73:c0:9c:4c:90:2e:2e:21:b1:0d:23:3a:85:
e9:06:af:6d:7e:51:47:ef:d5:39:4e:1a:8d:9d:a8:1e:3d:b7:
32:d9:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:25 2026 by rpki-client