Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: MmGBgJwr3/teoIW4AjEurBiGr/U9gpvldL3Aij/zAoI=
Subject key identifier: D7:A1:E2:1F:61:3B:08:70:FD:BD:B2:5B:43:A6:CE:71:9C:FF:7D:40
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 01A1201BB8E8CD3C7EB483E83A4D7F01F0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1A03
Signing time: Fri 09 Oct 2026 10:00:50 +0000
Manifest this update: Fri 09 Oct 2026 10:00:50 +0000
Manifest next update: Sat 10 Oct 2026 10:00:50 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: 1t1s00sMgJ/rYGArOsu6b/KhW7wVru8oRbT2wRITif4=)
2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1b:b8:e8:cd:3c:7e:b4:83:e8:3a:4d:7f:01:f0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Oct 9 10:00:50 2026 GMT
Not After : Oct 10 10:00:50 2026 GMT
Subject: CN=d7a1e21f613b0870fdbdb25b43a6ce719cff7d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:cb:3a:3e:54:79:f2:dc:11:a9:48:3b:58:
a9:6d:15:19:b8:31:98:ce:cf:83:5b:3b:ce:27:9f:
dc:9c:85:a8:6f:dc:61:05:5c:9b:36:44:59:41:12:
59:c7:40:56:eb:c6:0a:36:cd:cc:15:80:0b:47:f9:
4e:31:9b:90:81:7a:54:2c:2b:d2:35:67:22:5c:1a:
f4:c3:b2:64:d3:72:f4:dc:f7:08:2b:f7:da:ab:1c:
d3:ea:74:68:3d:bb:e0:e4:6b:a3:a0:04:52:f0:ee:
62:11:cc:02:84:8a:e1:55:d4:b1:6a:9f:9a:3b:14:
71:17:90:a2:46:b3:f5:93:05:f4:80:be:74:31:6e:
c6:4f:e7:c6:fd:40:9c:12:9e:4a:1e:3e:57:c5:e3:
71:aa:7b:37:13:cd:8b:0e:45:0b:14:cf:b3:6b:e1:
bb:33:ca:10:06:28:9f:e0:04:06:21:2b:ff:b0:e9:
b0:c9:f2:d9:52:cb:38:73:3c:01:e4:fc:e2:88:ea:
45:3c:70:9c:5e:0a:78:1b:96:c9:5a:5b:71:db:78:
be:48:b1:1c:8d:1f:4e:82:ba:36:6b:b2:42:24:42:
03:5e:e1:5b:25:5c:34:72:3b:22:c9:a7:24:05:e0:
f7:a1:24:71:61:71:12:87:33:9c:0d:84:91:e8:75:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A1:E2:1F:61:3B:08:70:FD:BD:B2:5B:43:A6:CE:71:9C:FF:7D:40
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:82:25:0c:18:48:05:8d:95:64:84:48:1e:7a:f8:d9:bd:37:
ab:db:f6:43:c6:e2:2b:38:2a:d7:1d:8f:73:b1:0c:c9:f6:da:
7f:a3:0c:32:61:1f:cd:84:26:f3:8d:2a:e8:eb:e6:78:51:a6:
7d:2a:e7:b9:ea:8c:b1:02:03:b8:fd:82:e5:c2:c0:38:34:bf:
1c:8f:0b:34:ef:16:b8:53:37:b0:1a:6a:8c:18:20:af:c6:6b:
f2:81:b6:46:e7:8e:eb:90:51:56:55:0d:a8:a9:65:8f:f2:0e:
5a:43:37:65:d5:d2:13:1a:76:db:92:ad:c6:ad:73:44:83:53:
bf:46:59:18:aa:0a:ca:00:54:cc:87:06:3b:9e:0c:eb:b2:c0:
b4:a0:c3:a1:9c:3d:05:2f:3c:d2:d6:df:46:eb:18:e7:a4:b1:
ad:67:6e:94:31:02:91:99:63:4d:80:ee:30:89:1e:d0:08:bf:
41:aa:f8:8f:7f:40:dc:aa:39:af:fb:2b:7c:39:2b:50:e5:bf:
bb:df:3a:2d:a3:47:ec:b9:ac:c3:f0:d3:e0:3f:b9:3f:65:a1:
e0:be:dd:7b:69:1a:25:99:5d:75:19:e7:37:e8:d9:9c:5b:8d:
29:f6:82:13:93:40:4a:f5:9e:c2:b8:ea:11:5f:4e:69:a3:11:
7c:9a:8e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgG7jozTx+tIPoOk1/AfDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzBmZTFkNzVmN2RhNzZkMmUzZGMzNDRmYjFmMGIwYjY5
ZGUwMDEwHhcNMjYxMDA5MTAwMDUwWhcNMjYxMDEwMTAwMDUwWjAzMTEwLwYDVQQD
EyhkN2ExZTIxZjYxM2IwODcwZmRiZGIyNWI0M2E2Y2U3MTljZmY3ZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2fLOj5UefLcEalIO1ipbRUZuDGY
zs+DWzvOJ5/cnIWob9xhBVybNkRZQRJZx0BW68YKNs3MFYALR/lOMZuQgXpULCvS
NWciXBr0w7Jk03L03PcIK/faqxzT6nRoPbvg5GujoARS8O5iEcwChIrhVdSxap+a
OxRxF5CiRrP1kwX0gL50MW7GT+fG/UCcEp5KHj5XxeNxqns3E82LDkULFM+za+G7
M8oQBiif4AQGISv/sOmwyfLZUss4czwB5PziiOpFPHCcXgp4G5bJWltx23i+SLEc
jR9Ogro2a7JCJEIDXuFbJVw0cjsiyackBeD3oSRxYXEShzOcDYSR6HV67QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeh4h9hOwhw/b2yW0OmznGc/31AMB8GA1UdIwQY
MBaAFD1w/h1199p20uPcNE+x8LC2neABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYt
Yjg1MmJkODEyM2YwLzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYtYjg1MmJkODEyM2Yw
LzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIIlDBhI
BY2VZIRIHnr42b03q9v2Q8biKzgq1x2Pc7EMyfbaf6MMMmEfzYQm840q6OvmeFGm
fSrnueqMsQIDuP2C5cLAODS/HI8LNO8WuFM3sBpqjBggr8Zr8oG2RueO65BRVlUN
qKllj/IOWkM3ZdXSExp225Ktxq1zRINTv0ZZGKoKygBUzIcGO54M67LAtKDDoZw9
BS880tbfRusY56SxrWdulDECkZljTYDuMIke0Ai/Qar4j39A3Ko5r/srfDkrUOW/
u986LaNH7Lmsw/DT4D+5P2Wh4L7de2kaJZlddRnnN+jZnFuNKfaCE5NASvWewrjq
EV9OaaMRfJqOcA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:03:53 2026 by rpki-client