Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: tas0HjF001QfNIXguWEsePd6XO8t9dt59Opo3uCrLcY=
Subject key identifier: 84:92:7B:66:8A:E6:DF:75:BD:01:C6:D1:A0:F7:4E:ED:86:C4:76:C3
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019D2F6C924BB85CE9F13EA00BE975B1FF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 04DA
Signing time: Fri 27 Mar 2026 13:12:17 +0000
Manifest this update: Fri 27 Mar 2026 13:12:17 +0000
Manifest next update: Sat 28 Mar 2026 13:12:17 +0000
Files and hashes: 1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
2: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: UvwHf0dj/dHyrTYl5sDyPBOFzRHTnLoOZQp33KuRnx0=)
3: SzDjXmkPc81OxUH-J5X5s68f_Jg.roa (hash: uY/BmEoUTgPIr21DkbWh/gHnXF9vEuYAHGIFIehB+YQ=)
4: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (hash: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=)
5: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
6: uev_Cdm4I3bqHHs8NJV7cbJIl5Q.roa (hash: s4Q03IYP8nRfMJZytfhhkdjuwRkc+JRlSu6SQVdvSw4=)
7: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:6c:92:4b:b8:5c:e9:f1:3e:a0:0b:e9:75:b1:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Mar 27 13:12:17 2026 GMT
Not After : Mar 28 13:12:17 2026 GMT
Subject: CN=84927b668ae6df75bd01c6d1a0f74eed86c476c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:40:8a:3b:12:41:29:22:c4:3d:30:a6:47:
c2:53:2b:72:19:64:52:2c:e5:52:c0:29:cf:07:da:
91:4c:a4:67:4e:d0:2b:88:28:98:a8:08:7a:a9:14:
d1:dd:85:b8:fa:a6:04:64:48:70:8c:ae:eb:6b:73:
1b:cc:b4:e4:d2:e2:28:b9:5e:3e:b2:ea:54:f3:03:
41:94:04:dc:26:0b:a5:ca:f3:2a:9e:f3:4b:43:ab:
67:7a:4f:16:6e:b1:c3:87:da:dc:7d:1c:ca:dd:5c:
e8:e3:3f:09:ed:34:50:3a:af:2f:01:bd:88:f5:04:
38:d6:56:ed:f2:8f:fd:59:55:85:c4:07:d1:c9:6e:
07:7c:56:42:b3:01:5a:cb:f0:3a:66:7d:e1:b6:7d:
81:b8:e7:8e:37:a2:35:b5:cf:c4:1f:a8:06:b1:69:
a1:80:b0:20:99:8e:94:96:1d:ac:29:d3:f8:18:1a:
3e:9a:d3:5a:4e:5d:50:f1:86:26:cd:aa:a1:0c:2b:
36:e9:d5:ba:f4:9a:3d:77:93:85:bb:2c:e0:1f:1f:
65:7b:51:8f:d7:9e:e0:09:19:e1:24:a3:ea:5a:2c:
db:f4:08:0b:5b:7d:92:dd:0a:04:45:c7:8f:aa:71:
d0:34:83:59:22:a9:11:3f:88:99:9a:82:95:ee:ec:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:92:7B:66:8A:E6:DF:75:BD:01:C6:D1:A0:F7:4E:ED:86:C4:76:C3
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5d:f1:e4:61:b5:1a:47:d6:83:46:1a:53:5d:e1:05:5c:6c:
79:de:c7:08:e8:96:fd:96:2d:a1:c6:03:c9:55:0e:21:1a:d8:
56:ad:fe:98:d0:e2:d6:8c:fc:d3:ea:06:ba:a8:18:0c:af:3a:
05:48:89:b9:be:4d:0e:90:3c:52:5e:7b:49:6f:2d:0c:43:86:
5d:a8:39:b3:32:83:68:10:45:df:66:b6:b0:02:50:5f:eb:1f:
89:25:c5:96:03:7d:39:60:dc:bf:c0:55:da:5a:94:f5:3f:41:
00:c0:c2:3b:37:3c:74:c1:0c:0e:41:2a:88:f1:06:8d:93:e0:
ea:80:5d:73:30:7d:7c:e2:b9:2b:92:67:9a:57:29:ec:43:e1:
22:10:a4:38:63:e2:d2:72:e5:09:ed:f0:6d:78:d1:7f:33:16:
13:8f:3d:68:e9:2c:d5:08:6f:28:67:7a:70:f1:bf:de:3d:c1:
c1:25:c0:eb:75:bd:ee:16:85:3c:67:af:7b:8f:4c:b5:65:27:
a4:38:15:be:b0:86:39:1c:22:a7:08:47:54:5b:df:59:50:e7:
de:3f:51:bb:a4:5e:0d:6c:4e:31:6e:aa:0a:ce:5a:c1:6c:1e:
7a:96:28:41:6c:2a:03:4a:08:ea:d9:87:54:99:65:2b:f8:6d:
71:ac:3c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0vbJJLuFzp8T6gC+l1sf+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx
ZDlkNjQwHhcNMjYwMzI3MTMxMjE3WhcNMjYwMzI4MTMxMjE3WjAzMTEwLwYDVQQD
Eyg4NDkyN2I2NjhhZTZkZjc1YmQwMWM2ZDFhMGY3NGVlZDg2YzQ3NmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqhAijsSQSkixD0wpkfCUytyGWRS
LOVSwCnPB9qRTKRnTtAriCiYqAh6qRTR3YW4+qYEZEhwjK7ra3MbzLTk0uIouV4+
supU8wNBlATcJgulyvMqnvNLQ6tnek8WbrHDh9rcfRzK3Vzo4z8J7TRQOq8vAb2I
9QQ41lbt8o/9WVWFxAfRyW4HfFZCswFay/A6Zn3htn2BuOeON6I1tc/EH6gGsWmh
gLAgmY6Ulh2sKdP4GBo+mtNaTl1Q8YYmzaqhDCs26dW69Jo9d5OFuyzgHx9le1GP
157gCRnhJKPqWizb9AgLW32S3QoERcePqnHQNINZIqkRP4iZmoKV7uzj0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISSe2aK5t91vQHG0aD3Tu2GxHbDMB8GA1UdIwQY
MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut
NDIyNTIzYzRlNjhiLzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi
LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATF3x5GG1
GkfWg0YaU13hBVxsed7HCOiW/ZYtocYDyVUOIRrYVq3+mNDi1oz80+oGuqgYDK86
BUiJub5NDpA8Ul57SW8tDEOGXag5szKDaBBF32a2sAJQX+sfiSXFlgN9OWDcv8BV
2lqU9T9BAMDCOzc8dMEMDkEqiPEGjZPg6oBdczB9fOK5K5Jnmlcp7EPhIhCkOGPi
0nLlCe3wbXjRfzMWE489aOks1QhvKGd6cPG/3j3BwSXA63W97haFPGeve49MtWUn
pDgVvrCGORwipwhHVFvfWVDn3j9Ru6ReDWxOMW6qCs5awWweepYoQWwqA0oI6tmH
VJllK/htcaw8fA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 16:08:17 2026 by rpki-client