Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: 43Vuit16xnS4/C9ZElCiuRS85nxCx+Pecwtg82hjTII=
Subject key identifier: 10:B9:5D:B9:54:1D:81:A2:8B:D6:72:CD:2D:3D:2A:87:55:A3:07:AD
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019D985069E5428375FD0710C9B738BD9F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 182F
Signing time: Thu 16 Apr 2026 22:01:39 +0000
Manifest this update: Thu 16 Apr 2026 22:01:39 +0000
Manifest next update: Fri 17 Apr 2026 22:01:39 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: 5XvGEsDqRt9xQQ9MaMJsh/PUeV5+BdmChYstfEUWX2A=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:69:e5:42:83:75:fd:07:10:c9:b7:38:bd:9f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Apr 16 22:01:39 2026 GMT
Not After : Apr 17 22:01:39 2026 GMT
Subject: CN=10b95db9541d81a28bd672cd2d3d2a8755a307ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:4d:75:e9:53:55:7f:b1:83:f4:8a:41:8f:
10:7e:6e:2d:95:1c:7f:2d:7d:b1:86:68:e0:37:45:
0a:ac:65:8f:ee:6e:ee:2e:18:08:c5:b1:b5:a6:80:
86:78:23:d5:05:c2:aa:3d:aa:01:54:77:ae:89:8c:
60:7e:3e:db:14:ca:bd:47:c1:b8:8b:bf:cd:ac:55:
40:68:1e:71:ed:c2:68:78:c3:a5:47:ac:af:7a:c4:
99:91:d6:b1:35:fd:f4:77:39:f9:e3:9a:64:75:fb:
b3:b9:33:92:81:1f:af:c5:a8:d0:3a:56:3e:99:d0:
a4:4e:cd:bc:23:c0:3c:91:2d:fe:a9:20:1d:42:7d:
21:52:b3:32:5d:10:c3:b9:d4:cc:7d:f9:ec:1a:7f:
34:bc:36:85:d7:70:2d:03:bc:12:6b:e2:8c:d4:26:
8b:9f:9d:37:f9:53:e7:e0:86:fa:0c:02:46:54:21:
01:c4:be:d2:dd:61:47:ce:fb:d5:0e:71:9a:a8:8c:
38:e3:5b:42:6f:51:be:a1:e5:f3:5f:7a:13:c0:be:
3e:84:88:0b:3f:ba:ac:c2:74:b8:75:48:75:df:37:
bd:3b:37:cf:0e:a1:93:5c:19:66:0a:18:cf:6a:4a:
b8:c0:7e:7a:dc:16:14:41:b5:f0:1b:2d:c8:c9:0b:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:5D:B9:54:1D:81:A2:8B:D6:72:CD:2D:3D:2A:87:55:A3:07:AD
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3c:5b:57:00:c1:2e:c2:4e:c1:aa:2a:b5:52:49:14:b6:04:
70:5d:95:8d:f4:ea:44:75:33:f6:b3:49:8b:c0:42:4f:d6:f4:
6b:1a:5e:2f:77:bb:33:f1:22:57:db:1c:d9:63:d5:f7:d1:07:
5f:3f:d1:4c:af:6c:44:8e:20:d2:cf:95:c8:59:23:66:6d:e0:
9c:3f:a4:fa:e5:43:7b:b1:40:c6:e7:d0:b9:5a:6e:3d:5c:38:
f5:fa:57:d9:a2:03:d8:de:3f:41:37:e5:87:b9:38:ba:b2:49:
c2:3c:54:43:e9:8d:42:4f:03:f3:67:8b:db:e6:4b:9a:8d:ce:
62:cd:3a:67:de:b8:d3:12:23:dd:b3:09:0a:b6:cd:8b:b9:66:
55:9e:30:56:82:1d:98:02:13:cc:47:e7:1b:ea:f1:84:f4:1c:
e6:b1:c1:7a:59:d0:9e:a2:68:d3:70:3d:64:b4:7c:dc:c5:92:
2b:9a:c7:b5:d0:2a:92:ee:27:b1:72:43:ad:d0:84:d5:7b:8c:
c2:10:8c:ac:69:3a:f3:9f:3c:bf:ce:7e:bd:83:3f:72:4d:1a:
51:40:1c:0a:7e:a2:e0:2b:3e:24:a0:01:21:01:d2:b1:65:08:
7f:9c:4f:8b:13:2f:c0:b7:76:80:75:88:51:eb:c9:e9:6b:b3:
29:68:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:40 2026 by rpki-client