Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: AHlRxsiXbmyY3UtDHrovJWFuQHQAnT0ppYAvbsjc8rE=
Subject key identifier: 23:8C:88:B8:9D:33:C5:E6:EE:AE:54:6E:2D:C3:72:82:CD:64:5C:BD
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019EBFC8D0196A7E55400F5A022644951718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 18C8
Signing time: Sat 13 Jun 2026 07:01:09 +0000
Manifest this update: Sat 13 Jun 2026 07:01:09 +0000
Manifest next update: Sun 14 Jun 2026 07:01:09 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: CbPNwg+iIG1PgE42oRb6NWUFCXZi2/WcbglQe2QnUjc=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:d0:19:6a:7e:55:40:0f:5a:02:26:44:95:17:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Jun 13 07:01:09 2026 GMT
Not After : Jun 14 07:01:09 2026 GMT
Subject: CN=238c88b89d33c5e6eeae546e2dc37282cd645cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:7c:d1:2e:d2:9f:4f:c6:c2:6a:8e:65:bd:
72:ec:93:fc:e7:87:25:93:b4:73:a3:fe:98:14:d7:
cb:fc:b7:81:c4:e2:9d:61:4a:a1:47:93:4c:3f:69:
2e:cf:78:c3:e8:d4:69:c3:ac:a2:c9:cf:37:9f:06:
a1:e0:81:a5:bf:0a:ff:d5:35:b2:81:a9:e6:d0:be:
20:fd:c1:10:f6:97:20:87:21:d4:f5:7c:84:c5:a6:
10:e4:01:54:e9:00:90:43:54:59:98:e2:73:2a:2a:
0d:ee:84:d0:9e:f8:c0:bb:05:59:1c:63:4c:41:85:
aa:ac:81:80:bc:4b:fd:55:91:e7:a7:ba:8b:04:8f:
2c:b4:bc:e9:8f:05:95:ce:62:8d:c5:f8:dc:eb:91:
d2:aa:f5:ca:ef:a4:94:9b:0d:70:da:9f:d0:27:83:
21:af:03:b9:df:13:f3:56:33:e9:83:86:1a:0b:b3:
99:db:e6:3f:6b:09:c5:10:f0:75:ef:f2:55:41:57:
eb:14:4e:6a:88:9d:e0:34:77:8d:39:dd:61:cb:d8:
0f:e8:fa:75:1b:41:54:9b:88:bd:a2:1b:ff:84:e9:
85:f2:cc:fd:f6:71:1a:75:a1:3f:2c:68:83:f1:80:
67:db:0b:de:76:b1:b2:1b:c5:87:ce:be:97:e8:e7:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:88:B8:9D:33:C5:E6:EE:AE:54:6E:2D:C3:72:82:CD:64:5C:BD
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:51:61:cd:a8:a2:5e:95:44:52:f9:9c:ad:97:f3:8c:e5:
12:94:76:34:e2:8b:29:98:5e:15:1f:b8:86:88:32:9a:5d:8c:
7a:20:13:a9:da:ca:c6:d6:b6:18:22:31:85:07:92:94:9c:44:
39:54:3c:64:84:1e:52:89:be:ed:f2:0e:dc:c5:b5:ff:29:53:
e0:b2:da:08:62:0c:87:e4:c7:1d:0a:d7:ac:4f:e2:ef:2d:73:
2d:a9:22:28:14:5a:0f:73:b4:f9:16:f2:93:7b:b7:99:1f:90:
f2:f8:bc:91:1f:3e:46:d6:ae:81:4b:35:6c:ad:84:19:b1:a3:
2a:a2:50:ac:d5:fd:24:94:28:9d:de:af:ed:f9:84:fb:c1:47:
cb:e0:55:ed:8b:b8:4b:96:dd:92:1e:3d:8a:18:80:1d:65:1e:
5b:4f:e3:94:07:90:ba:54:e0:61:71:1c:d8:2a:67:4f:8f:26:
68:b8:f1:a7:bf:0d:ee:e1:ae:2c:c4:45:cd:b1:c7:92:60:ae:
b9:0b:af:8e:dd:82:81:05:1e:ce:81:d9:2e:8f:5d:4f:a6:4f:
34:aa:87:75:d6:a2:cb:02:88:b1:c9:93:40:b7:53:a1:6d:0e:
a3:94:8e:5e:06:1c:86:f8:d8:9b:94:61:67:e3:59:9a:61:2e:
6b:e1:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:24 2026 by rpki-client