Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: 0EMwR1XH8Bx2U2FZDs5wOY3p9om8E15NPMGS6scnShQ=
Subject key identifier: 98:A4:39:3B:0D:9F:FB:FC:D9:C6:34:CD:7D:0B:92:CD:4E:4F:71:7E
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 01A0C1E82C3C26D2B25FD5CB1A6AA06964F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 06B8
Signing time: Mon 21 Sep 2026 03:00:13 +0000
Manifest this update: Mon 21 Sep 2026 03:00:13 +0000
Manifest next update: Tue 22 Sep 2026 03:00:13 +0000
Files and hashes: 1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
2: PJqQOsiLgJpBTNtEIXIzADvxDUY.roa (hash: BexP3j7XfBxWmDzuyrg//sFpVDsAMkl0xxF/49mSdTQ=)
3: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: uHUjo0pF8PSbhtPPeMe2/qpEtg1HGTV6a/HHnU3mMKs=)
4: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (hash: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=)
5: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
6: htlNfPXeOM_NDL0vMYFjvU5Mm-E.roa (hash: YFlq6LKizZ68CiU9V3egi4UmhmdAdZaBPdKX3CR59h8=)
7: jUmexGFaoOAw3tBMp-lAl_uGguM.roa (hash: H359l1rebuuO42B7kkI63dGIEaR0UjiEOl9VIPFGCCg=)
8: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:2c:3c:26:d2:b2:5f:d5:cb:1a:6a:a0:69:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Sep 21 03:00:13 2026 GMT
Not After : Sep 22 03:00:13 2026 GMT
Subject: CN=98a4393b0d9ffbfcd9c634cd7d0b92cd4e4f717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:88:9e:dd:ea:78:55:f4:ce:3e:d4:dc:16:
ee:e2:d5:43:b3:d5:c0:e5:4b:7d:dd:74:95:3c:42:
0c:d1:b6:96:83:9a:e9:9f:da:77:9c:fd:42:9d:43:
7b:8b:41:52:d8:ba:58:85:6a:c2:25:5f:fc:13:37:
15:38:b9:69:88:79:7f:73:cb:6b:f7:36:cc:b9:ba:
1b:4f:61:28:28:72:81:21:bd:8f:e7:d9:82:4f:a1:
92:f6:15:6a:6a:12:1d:06:8a:0d:dd:ca:bf:20:1f:
62:8b:e3:7c:d1:29:5f:fd:9b:5f:f4:e9:f9:c7:cc:
43:11:2c:6c:7a:77:a2:bd:8b:56:29:3a:6a:e4:b2:
27:f3:f4:0a:5b:df:41:37:05:2e:da:d3:1a:bf:02:
96:ee:ec:3f:40:7e:1b:94:72:f1:ef:40:2d:83:f2:
3a:0b:1f:eb:3d:b9:03:f9:bc:04:47:c0:ac:0b:52:
53:7e:a6:c4:e5:fc:e7:f1:73:12:11:7e:f8:ed:d1:
e4:29:1c:b5:15:a4:6d:8c:41:2d:25:f0:b2:3b:16:
20:a9:ee:e1:18:28:d6:92:35:04:db:43:c2:32:fb:
8a:9b:23:4e:97:b6:f9:5d:10:f1:35:44:5d:34:dd:
ee:3d:41:70:70:1e:7b:30:c1:71:11:82:43:29:9a:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:39:3B:0D:9F:FB:FC:D9:C6:34:CD:7D:0B:92:CD:4E:4F:71:7E
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5d:65:8a:85:7c:89:9d:dc:a5:24:3f:60:28:5d:bf:72:db:
4f:70:dd:d6:20:f8:43:4c:42:23:e9:35:5e:41:8c:dc:bf:3a:
d0:ba:36:73:47:a2:cf:2c:68:de:a6:8a:4e:e9:35:ae:22:20:
fa:d7:69:53:b0:e4:b3:20:47:b2:da:09:42:27:7e:02:8c:7d:
e1:bf:fd:5b:27:18:f7:a7:26:35:d9:63:d7:7d:dc:52:98:6a:
bb:bf:f9:4e:ea:80:d8:38:2f:c2:db:55:01:d8:b5:07:f2:90:
be:b9:1c:3a:87:85:a8:00:d3:7a:d3:0f:da:53:83:0d:d3:08:
c8:7f:e3:59:fd:40:87:e1:a4:7c:ed:00:46:10:1a:46:76:41:
4a:bb:1d:20:bd:58:e1:51:ab:d4:8d:d2:cf:fc:f6:0c:4a:0d:
5a:cf:b3:6a:ac:4b:c8:50:f4:cb:5f:30:bc:a3:53:09:2a:ac:
4a:b4:83:c0:9f:4c:fc:b6:1a:f7:72:68:2f:88:cb:b0:aa:86:
f5:78:49:aa:43:f8:29:d1:f0:de:14:ef:6a:c3:72:12:b3:9b:
4e:75:1f:8c:a1:b6:92:c6:1a:21:75:a3:a2:73:d8:7f:fa:fa:
90:93:7b:01:9a:29:9c:22:ff:29:71:27:f4:0c:53:8a:42:e8:
45:e0:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:49:13 2026 by rpki-client