
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier: YA9oM+W3in8eKtcUJpFxCoeQqP3GnFKIWI5PuYKLHIg=
Subject key identifier: CD:DD:CB:CE:70:27:62:17:72:56:C4:F4:A3:DA:3F:64:AD:0E:7F:D8
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 019E1F4832F9A7499FDAB7947F3D6E327FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number: 116C
Signing time: Wed 13 May 2026 03:01:25 +0000
Manifest this update: Wed 13 May 2026 03:01:25 +0000
Manifest next update: Thu 14 May 2026 03:01:25 +0000
Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=)
2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=)
3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=)
4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=)
5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=)
6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=)
7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=)
8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: xEW7C30C0HjCIwVHk/deJ/jXa7bFIYxasYy5rlhnOig=)
9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=)
10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=)
11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=)
12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=)
13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=)
14: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=)
15: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=)
16: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=)
17: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=)
18: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=)
19: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=)
20: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:32:f9:a7:49:9f:da:b7:94:7f:3d:6e:32:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: May 13 03:01:25 2026 GMT
Not After : May 14 03:01:25 2026 GMT
Subject: CN=cdddcbce702762177256c4f4a3da3f64ad0e7fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:6d:ce:10:f7:6d:7e:60:38:f3:c8:ec:54:
e9:1b:da:93:95:b1:cc:26:82:64:84:a6:70:74:38:
41:e2:00:1c:37:32:e7:d4:b8:72:58:d7:30:e6:92:
dc:21:4c:78:2a:67:34:3c:01:c9:eb:97:2f:75:44:
17:a1:f4:f6:e6:cc:b7:6c:b8:e4:3f:3c:6e:82:c2:
d9:1b:7e:9e:30:a7:d1:2f:b3:05:71:9f:18:d7:e8:
dc:85:17:b9:d0:13:3a:d4:a4:c0:30:d3:23:69:67:
8f:65:ee:de:bd:9c:2c:2a:b4:15:00:6a:39:58:28:
05:08:8c:16:6b:fb:81:3c:22:55:89:50:66:8f:68:
8f:c5:73:a0:99:e5:2d:ab:74:8a:2f:db:b3:85:1a:
2d:b9:d5:58:71:df:19:db:a4:2a:3d:9f:b8:f7:30:
92:40:cb:ba:17:30:6a:a2:a4:a5:d9:a8:db:32:f1:
a4:83:01:cd:03:cf:7f:39:ee:8d:c2:6b:be:31:1c:
7a:68:55:3f:e0:d7:69:5e:cf:98:7b:3f:77:96:79:
e6:ce:cc:1d:50:9a:8a:37:6e:20:b9:47:3a:32:50:
63:14:31:a7:bd:41:05:d5:38:05:94:c0:ae:5b:64:
bd:4d:50:33:99:a5:8a:e8:b4:f1:dc:98:9b:13:a5:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:CB:CE:70:27:62:17:72:56:C4:F4:A3:DA:3F:64:AD:0E:7F:D8
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:02:1f:e5:d2:d4:5c:40:0a:e8:ed:8c:b2:e2:8f:19:22:9e:
14:25:87:8f:40:8c:42:fb:b3:a6:e9:0c:6f:e6:58:15:5a:5e:
9b:2e:42:0f:09:3c:0d:11:0e:24:bd:3c:57:69:50:5d:cb:90:
22:37:6e:e8:31:45:9b:8e:9e:c7:93:0d:de:cd:80:38:bf:9f:
ca:69:84:b2:0a:27:75:7c:f4:6c:7c:bf:83:7a:9b:4f:be:43:
34:05:04:a6:1d:df:db:44:f7:87:02:61:2e:df:64:54:f9:33:
df:4a:a5:40:80:3b:1d:f5:d7:49:de:cc:a6:0c:85:d8:21:32:
e5:4b:d4:58:b9:dd:39:c5:9b:71:81:8f:01:17:ed:a6:a9:76:
39:d9:8a:46:79:28:0a:ac:47:bb:90:ab:5d:47:1f:c9:77:45:
46:c1:18:55:76:aa:55:5b:0b:4e:c9:dc:68:b6:ac:be:b3:c8:
44:59:0e:cf:13:d6:e0:81:20:c3:9d:a2:d6:c8:03:52:56:b5:
e3:e6:8a:8c:73:9d:ff:b2:04:d3:42:d6:1f:15:5f:3e:b9:9c:
61:b8:49:be:69:4f:a9:cc:70:d1:9e:b5:bf:d4:ab:d8:b6:8a:
2c:bd:06:1f:82:2d:f3:e6:7c:46:85:74:e4:54:2c:80:6a:55:
c1:53:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:08 2026 by rpki-client