Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: n3PTlKOfGcMQCbayAlCSW7mJHigdP8xFWud5E60Pj20=
Subject key identifier: E8:F5:EF:30:6E:6F:AA:7C:92:8F:16:43:73:F0:FF:E4:FA:68:65:11
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019CAAC6BDDD8A27FFD22E56E3D732B905C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 17B4
Signing time: Sun 01 Mar 2026 19:01:17 +0000
Manifest this update: Sun 01 Mar 2026 19:01:17 +0000
Manifest next update: Mon 02 Mar 2026 19:01:17 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: k7oIw8Lv5QCiyowC/L1U5ofWyGF4fSiZ5+LyVwJ1bKE=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bd:dd:8a:27:ff:d2:2e:56:e3:d7:32:b9:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Mar 1 19:01:17 2026 GMT
Not After : Mar 2 19:01:17 2026 GMT
Subject: CN=e8f5ef306e6faa7c928f164373f0ffe4fa686511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:5b:df:63:49:9f:26:a6:74:0b:20:df:57:
e0:a0:71:0f:aa:a3:8c:9f:a3:e1:c0:2d:67:fb:3a:
7c:79:b6:b9:cd:41:7a:5e:05:66:a8:ed:39:b0:bd:
44:e2:c2:02:4b:d1:49:b0:25:dd:fb:95:05:2e:0a:
f6:0e:9e:b9:4e:9d:8b:fd:1c:9c:be:b1:89:86:55:
fc:bc:1a:1b:d8:ab:3c:5d:5b:b4:6e:c5:70:69:bf:
93:02:49:3e:77:0e:53:96:ee:26:29:29:cf:42:20:
58:2d:80:80:9e:ee:95:76:67:ba:b5:2a:82:28:98:
2b:96:77:a8:55:b6:e4:6c:de:63:bf:57:39:e2:58:
ae:85:ac:9f:b7:77:5f:ea:60:6b:db:13:9b:66:b1:
38:81:55:1f:17:a4:4e:55:59:48:0e:91:56:05:7f:
70:86:5a:dd:e9:1c:85:d3:5f:79:c7:7e:ea:a8:93:
8d:6e:f6:87:33:7a:9e:3c:f1:1d:9b:ad:68:40:bf:
ac:57:ec:1b:0a:92:79:e5:3b:38:5c:ca:b9:a0:cb:
01:93:fb:39:93:70:2e:12:e3:3b:4f:aa:6e:c2:95:
fb:96:54:26:93:8e:95:7e:57:30:65:f6:89:40:25:
65:fc:e0:9a:84:f3:98:80:08:85:26:e4:66:ad:c5:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:EF:30:6E:6F:AA:7C:92:8F:16:43:73:F0:FF:E4:FA:68:65:11
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:56:5f:d1:f7:30:09:20:70:0d:4b:52:cb:03:56:c7:f2:a0:
1d:8e:c8:72:8d:6c:73:86:7a:e2:71:47:19:bf:5c:23:50:6f:
0b:78:fd:98:0e:44:ca:2b:2b:53:44:cc:ad:cb:2d:1e:fc:a8:
81:be:27:67:dc:de:aa:c8:6d:71:63:67:db:9c:2d:45:90:76:
cd:a0:c3:d0:bb:92:78:d5:88:bb:f5:a7:4e:78:c3:0a:d2:4d:
06:96:d7:c1:dc:9d:33:50:0c:d9:fb:f5:31:f0:07:6b:8f:fc:
09:17:dd:29:54:e4:03:5c:8e:3a:1e:7c:56:b2:48:2f:39:fb:
1d:ed:fc:e0:09:5b:28:31:2e:ec:9f:94:00:b2:a4:4c:1e:54:
ce:ef:e5:0a:a0:64:1a:ae:e2:b9:30:67:83:f3:d8:8a:d4:b8:
ff:c1:ee:fd:b7:96:df:8d:6d:e1:be:52:c0:9d:b1:47:b6:82:
e7:a4:b8:de:d4:93:90:db:2c:30:79:45:f5:e2:c4:82:ca:9c:
84:02:cf:84:d8:b0:57:ea:55:e6:e0:0c:62:d8:3a:42:11:3e:
2f:59:92:84:23:49:ab:93:00:a9:37:9f:7b:29:ed:6e:68:7b:
94:41:de:e2:9e:b2:9d:cb:dc:48:83:54:ed:d5:64:fc:75:c4:
55:d4:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:51 2026 by rpki-client