Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: TTAOKb9use5BqImwi8rXkAbrSMmUFGS/rMZoRbchWo4=
Subject key identifier: EE:7D:53:CD:AF:8E:4F:13:42:58:7D:71:0C:AF:52:29:8E:1F:74:C8
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 01A0D34AEB9A276E18E2A33D22B1468F709F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 06C1
Signing time: Thu 24 Sep 2026 12:01:37 +0000
Manifest this update: Thu 24 Sep 2026 12:01:37 +0000
Manifest next update: Fri 25 Sep 2026 12:01:37 +0000
Files and hashes: 1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
2: PJqQOsiLgJpBTNtEIXIzADvxDUY.roa (hash: BexP3j7XfBxWmDzuyrg//sFpVDsAMkl0xxF/49mSdTQ=)
3: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: GL4tF+fcUl7/8gw5lDJLDp/wMlEb/xWVf2Xr56GX+5E=)
4: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (hash: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=)
5: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
6: htlNfPXeOM_NDL0vMYFjvU5Mm-E.roa (hash: YFlq6LKizZ68CiU9V3egi4UmhmdAdZaBPdKX3CR59h8=)
7: jUmexGFaoOAw3tBMp-lAl_uGguM.roa (hash: H359l1rebuuO42B7kkI63dGIEaR0UjiEOl9VIPFGCCg=)
8: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:eb:9a:27:6e:18:e2:a3:3d:22:b1:46:8f:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Sep 24 12:01:37 2026 GMT
Not After : Sep 25 12:01:37 2026 GMT
Subject: CN=ee7d53cdaf8e4f1342587d710caf52298e1f74c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:88:d1:81:5d:1f:19:99:c1:21:ed:ba:64:
4b:9e:a4:93:37:89:b3:77:a5:d2:34:cf:c0:da:0c:
af:8a:2a:f9:ba:32:23:56:a0:21:74:d8:14:bd:de:
b0:c9:c2:48:02:9e:d8:49:38:28:28:2f:6d:61:a4:
29:42:1f:03:20:8f:04:3d:9c:43:93:b2:04:97:9d:
f1:b5:e7:8e:a3:97:62:99:4c:9d:97:31:cf:bf:9f:
ff:5d:e0:53:d7:8c:81:f1:cd:21:b9:97:05:8e:3e:
da:ef:e5:2e:3e:4d:e2:b1:1e:29:c5:6c:4c:27:88:
20:19:f1:aa:3a:52:a7:ba:e9:c6:b1:5d:03:3c:11:
4b:61:08:18:cd:f4:91:5a:39:7e:cc:29:e3:a0:df:
d8:1e:7d:30:d0:62:a5:ff:0b:88:24:33:89:9e:8f:
0a:83:a2:b7:2e:db:d9:e0:be:a8:26:48:59:06:8c:
d1:89:ab:30:66:e0:4b:ec:3f:4a:81:6e:84:29:fc:
e8:1d:c2:58:31:dd:5f:5f:b4:13:b2:36:2a:15:66:
eb:46:51:4b:b0:83:49:84:af:64:87:8b:ca:16:2b:
af:78:26:63:29:ab:a9:ba:3a:a2:23:fc:6d:cb:b2:
1b:f8:4b:33:e6:25:08:c0:66:d2:d4:6a:02:09:d8:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:53:CD:AF:8E:4F:13:42:58:7D:71:0C:AF:52:29:8E:1F:74:C8
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:59:02:31:9c:dc:bb:d3:46:d2:1e:d1:82:cd:77:a4:ee:
f8:97:9e:0e:0f:de:bf:e2:e5:8c:92:20:fe:8d:bf:11:bd:54:
a8:13:3a:ff:6e:d8:7f:37:e9:49:a7:be:bb:8f:6d:e5:04:24:
35:d5:57:1c:ef:21:35:4b:24:dc:94:98:41:6d:e8:02:0a:3d:
62:db:ec:7b:8a:4b:72:b2:78:94:d3:de:b9:8a:35:43:5e:78:
03:16:9d:26:65:e7:dd:4b:36:54:c1:29:ae:dc:04:26:ff:98:
a8:79:63:94:99:86:8c:a8:09:ff:e2:31:40:36:11:92:3b:7e:
62:ee:91:61:3e:36:20:94:d1:cc:50:5e:b9:79:71:7c:3b:56:
68:8b:2a:a1:29:13:06:30:d4:18:38:76:55:53:a5:92:16:65:
52:b8:39:d2:aa:c5:f6:2f:90:42:3d:24:0e:18:2a:91:9c:23:
2e:fe:2e:00:72:78:58:4b:2c:7a:6d:fa:0b:92:46:24:51:91:
fd:81:a7:66:00:21:f8:06:5a:79:76:f5:61:9a:6c:46:ef:50:
54:ef:55:73:7a:dd:c6:eb:16:58:6d:12:6a:42:56:e3:7f:c1:
84:79:78:d6:df:27:f0:d4:a3:6a:07:1b:71:66:96:8c:19:b2:
0e:8f:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:56:53 2026 by rpki-client