Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: jyFZb1EfvI4hsWZhU5JGYitzzZuFexK4gqBWXf5aaag=
Subject key identifier: AF:11:80:DF:EF:CE:E6:BA:BD:62:D7:23:DC:0E:B8:7C:20:8F:1F:74
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019F90C79F5679229B3A15237C4AB438700D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0DEE
Signing time: Thu 23 Jul 2026 21:00:29 +0000
Manifest this update: Thu 23 Jul 2026 21:00:29 +0000
Manifest next update: Fri 24 Jul 2026 21:00:29 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
4: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: g91BuN3GFe42db+mXLQqWVT8qzUdT+RsIh1SPqxB3nM=)
6: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
7: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
8: sivMy5BBS6tJ9sCgHnWlisFnhLo.roa (hash: xCUeJYhVUbo9aIK2zsPjwZyUTmFOjdc6FHzhpsmqqVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:9f:56:79:22:9b:3a:15:23:7c:4a:b4:38:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jul 23 21:00:29 2026 GMT
Not After : Jul 24 21:00:29 2026 GMT
Subject: CN=af1180dfefcee6babd62d723dc0eb87c208f1f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:e2:43:83:97:f3:e1:f4:fc:f5:30:10:e4:
a7:2d:eb:1a:b8:5c:ad:05:02:66:69:37:78:62:d2:
9e:b9:4f:80:fb:a3:86:3a:40:af:29:4f:56:72:78:
03:66:c3:1d:65:40:78:4f:c1:17:5d:bd:a8:35:bb:
d1:78:ab:28:bd:be:ef:d4:24:c7:5f:d2:19:a5:33:
29:c7:65:d0:02:32:64:cd:2b:c6:09:e8:b2:d4:ff:
ef:a2:f6:72:46:e3:10:81:0b:af:33:ed:c1:17:4f:
7f:5a:09:fa:8c:f1:f9:72:90:04:93:b2:69:25:0f:
04:f1:2c:e0:e6:33:bb:11:5b:ca:10:8f:d0:04:74:
6f:5c:e9:9d:4f:20:ff:a6:b9:2c:fb:2e:2e:36:e1:
bd:a8:30:42:bd:e9:95:1d:c1:83:6a:11:78:05:25:
33:f8:a7:67:07:75:a4:9a:6d:49:ab:03:42:03:26:
75:96:a7:85:f1:02:57:9b:67:e0:ab:61:cc:d8:58:
11:fd:6c:af:54:cc:cd:e2:e2:48:91:1c:07:ef:db:
a4:ba:bf:d7:77:43:29:93:40:c3:53:56:a7:38:6d:
2f:f5:4c:eb:cf:05:56:7f:d4:9f:96:b0:7e:dd:2d:
7d:c5:3e:c6:18:68:32:37:d7:47:e2:7c:c5:1e:77:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:80:DF:EF:CE:E6:BA:BD:62:D7:23:DC:0E:B8:7C:20:8F:1F:74
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:03:5d:95:1d:c3:8b:7d:d8:dd:fa:84:b7:a5:e5:ba:90:15:
8b:2c:82:8a:a4:35:b6:e5:11:e5:06:95:7a:26:30:89:a5:34:
fd:6e:8d:d9:54:4f:f7:e4:24:e7:7d:a2:d0:41:2a:8a:39:0d:
6c:61:45:7d:ad:ca:92:88:10:b7:b1:97:4f:db:49:ec:11:2e:
24:fe:ed:a1:d3:10:e3:06:f7:d5:80:35:cb:f1:1b:e9:08:66:
8d:34:e2:e5:f2:b7:6a:be:67:fd:cc:d3:4e:12:a9:85:12:a2:
f0:72:7f:d9:94:7d:a2:f6:b2:75:65:58:44:7b:3a:a2:4a:79:
0c:98:31:7b:75:19:9c:53:03:3b:e7:8e:b5:76:6c:ca:7b:ea:
13:8b:98:a9:4b:61:9d:70:28:16:73:5c:04:8f:5a:ca:0c:ae:
59:ec:78:8f:2c:5f:50:2d:ab:df:78:4e:9d:dd:e7:68:9c:fc:
c0:7e:47:d2:26:c5:69:86:8c:8a:e3:df:13:ac:b9:65:41:11:
0e:02:98:26:97:d2:06:53:bd:0c:2d:d3:30:59:f4:fa:1a:76:
cb:39:59:0c:1d:51:08:5d:9e:9d:aa:5a:71:86:ce:75:28:b0:
07:dc:c7:9c:5f:e8:7f:73:6d:bb:85:c7:dd:69:11:41:05:0f:
88:d9:e8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx59WeSKbOhUjfEq0OHANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx
YTU4ZjYwHhcNMjYwNzIzMjEwMDI5WhcNMjYwNzI0MjEwMDI5WjAzMTEwLwYDVQQD
EyhhZjExODBkZmVmY2VlNmJhYmQ2MmQ3MjNkYzBlYjg3YzIwOGYxZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NriQ4OX8+H0/PUwEOSnLesauFyt
BQJmaTd4YtKeuU+A+6OGOkCvKU9WcngDZsMdZUB4T8EXXb2oNbvReKsovb7v1CTH
X9IZpTMpx2XQAjJkzSvGCeiy1P/vovZyRuMQgQuvM+3BF09/Wgn6jPH5cpAEk7Jp
JQ8E8Szg5jO7EVvKEI/QBHRvXOmdTyD/prks+y4uNuG9qDBCvemVHcGDahF4BSUz
+KdnB3Wkmm1JqwNCAyZ1lqeF8QJXm2fgq2HM2FgR/WyvVMzN4uJIkRwH79ukur/X
d0Mpk0DDU1anOG0v9UzrzwVWf9SflrB+3S19xT7GGGgyN9dH4nzFHnfbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8RgN/vzua6vWLXI9wOuHwgjx90MB8GA1UdIwQY
MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt
ZjNmZDY0MzMxNzA5LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5
LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggNdlR3D
i33Y3fqEt6XlupAViyyCiqQ1tuUR5QaVeiYwiaU0/W6N2VRP9+Qk532i0EEqijkN
bGFFfa3KkogQt7GXT9tJ7BEuJP7todMQ4wb31YA1y/Eb6QhmjTTi5fK3ar5n/czT
ThKphRKi8HJ/2ZR9ovaydWVYRHs6okp5DJgxe3UZnFMDO+eOtXZsynvqE4uYqUth
nXAoFnNcBI9aygyuWex4jyxfUC2r33hOnd3naJz8wH5H0ibFaYaMiuPfE6y5ZUER
DgKYJpfSBlO9DC3TMFn0+hp2yzlZDB1RCF2enapacYbOdSiwB9zHnF/of3Ntu4XH
3WkRQQUPiNnoyw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:54 2026 by rpki-client