Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: VQ+TnwZ7qLVRh3ZqrcBtxsgagGYLgZUHQuf974EcuAA=
Subject key identifier: 20:4F:CD:E2:6B:3E:D3:96:92:11:A9:C6:F8:61:B8:75:1F:2A:2E:1C
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 01A00402A7022DC71F16C7D08E1CA2FD7F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 0654
Signing time: Sat 15 Aug 2026 06:01:17 +0000
Manifest this update: Sat 15 Aug 2026 06:01:17 +0000
Manifest next update: Sun 16 Aug 2026 06:01:17 +0000
Files and hashes: 1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
2: J9cICFFeUPnuZ3yzA1KgrAZGx84.roa (hash: 9RH36o0oO3f56TRJm7j5nPq0jLwEjtVFzvQY0/8VQxQ=)
3: PJqQOsiLgJpBTNtEIXIzADvxDUY.roa (hash: BexP3j7XfBxWmDzuyrg//sFpVDsAMkl0xxF/49mSdTQ=)
4: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: gW9VObzr4ZsmuKp8Xv7hmuVOQ8QsMw+nrr84vojdZFA=)
5: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (hash: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=)
6: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
7: htlNfPXeOM_NDL0vMYFjvU5Mm-E.roa (hash: YFlq6LKizZ68CiU9V3egi4UmhmdAdZaBPdKX3CR59h8=)
8: oE8I7DKi5Scx62McnafbDKdkeVA.roa (hash: e/rl0S5tt3ihZhVjgUohrEpN2kpCvSYZ/ikRybFoWpo=)
9: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:a7:02:2d:c7:1f:16:c7:d0:8e:1c:a2:fd:7f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Aug 15 06:01:17 2026 GMT
Not After : Aug 16 06:01:17 2026 GMT
Subject: CN=204fcde26b3ed3969211a9c6f861b8751f2a2e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:e1:87:39:7d:db:8d:8e:0e:b7:28:7e:55:
97:80:71:51:72:b4:f6:d4:4c:18:3a:44:47:f0:fd:
1a:65:c2:5c:54:9a:dc:3b:c9:2d:c0:a6:bd:5d:f0:
73:19:41:59:d5:f5:63:a9:61:7e:55:90:a6:ee:4f:
e7:88:05:be:88:dd:1b:d3:f1:03:f0:e8:ec:3d:6c:
80:be:45:6a:8c:86:93:e0:10:fd:2a:78:76:5f:63:
fd:49:a4:a9:5f:80:97:f6:92:7c:8f:c6:aa:07:16:
78:08:68:c2:aa:36:78:32:30:1a:3a:b9:4f:54:a8:
08:72:4b:d2:b2:3b:ca:17:ac:9e:c8:8f:c8:2b:88:
a6:96:0f:27:30:17:a0:a4:f8:43:1a:32:14:a0:e7:
da:2e:43:ba:2b:3a:a0:40:9a:fa:df:16:4c:3a:e0:
f6:8b:ad:b8:97:3c:7e:dd:68:32:58:0d:06:13:0b:
6b:d8:50:d0:93:9b:b8:a6:8c:89:16:09:be:fa:4e:
45:30:cc:c3:e3:1b:0e:4b:d6:b7:a1:b5:98:61:16:
4a:00:f2:c8:d0:75:57:38:64:e9:cb:45:af:bc:a8:
4b:4b:25:4b:77:a1:42:16:a8:52:a9:c8:47:80:55:
44:d8:bb:51:67:a0:6e:9e:28:d4:83:7d:a4:44:48:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4F:CD:E2:6B:3E:D3:96:92:11:A9:C6:F8:61:B8:75:1F:2A:2E:1C
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:20:69:2b:e0:eb:70:15:de:04:75:bb:2b:6b:84:3a:4a:a5:
c6:fd:d7:3a:a4:14:f4:4b:27:97:fd:ed:11:6f:ad:13:44:ea:
52:cd:09:f4:78:27:8d:e1:da:3a:d8:e6:bd:16:f0:fd:32:4d:
1f:bd:9b:70:77:e0:22:67:21:49:b7:a0:82:4c:d3:fa:4a:f7:
9a:63:35:05:66:c2:53:11:63:50:98:94:a8:c3:16:56:86:2f:
09:dd:b0:b8:47:6b:93:2f:b5:cb:5f:07:d4:a8:09:c8:72:88:
3f:c2:6f:34:f5:f1:7b:bd:58:0a:cd:58:01:47:c1:4c:08:6e:
8c:90:cd:0b:dc:2f:b4:31:a4:89:cd:25:4e:e7:c0:9f:b3:1e:
9e:bb:8b:6e:9c:d3:e6:3a:fc:92:69:08:0b:fe:5e:65:54:83:
37:a6:66:64:ed:bd:1f:fd:a7:be:b9:3d:f1:31:6f:2b:90:38:
34:8c:96:d6:dd:58:40:88:a8:b0:a5:ad:bf:bf:ee:45:6e:43:
55:c1:0a:09:32:f1:cd:f6:9d:b0:85:7b:56:46:b2:77:17:82:
fe:e3:27:7a:d0:8b:75:a2:02:be:10:8d:27:27:24:99:0c:12:
a1:fa:6c:8d:1d:1a:66:5c:ca:09:05:89:86:80:c3:77:1f:d2:
45:2a:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:04:03 2026 by rpki-client