Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: F2gESWtVs/AZXtyd9NE82x8QNi/uPq0QrE0GrphWvX0=
Subject key identifier: DD:32:D1:CE:64:D1:55:22:8B:6F:DE:1F:23:D9:78:9C:78:2C:21:AE
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019D24DEC4FA4324B9F809A7629FDCABB010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0CAD
Signing time: Wed 25 Mar 2026 12:01:12 +0000
Manifest this update: Wed 25 Mar 2026 12:01:12 +0000
Manifest next update: Thu 26 Mar 2026 12:01:12 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
4: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: Q3gDR7cMSP4i2zyfavMNi5ARKxZyfCxNVjdXvRhZIpI=)
6: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
7: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
8: sivMy5BBS6tJ9sCgHnWlisFnhLo.roa (hash: xCUeJYhVUbo9aIK2zsPjwZyUTmFOjdc6FHzhpsmqqVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:c4:fa:43:24:b9:f8:09:a7:62:9f:dc:ab:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Mar 25 12:01:12 2026 GMT
Not After : Mar 26 12:01:12 2026 GMT
Subject: CN=dd32d1ce64d155228b6fde1f23d9789c782c21ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:10:08:58:46:ac:ce:92:a7:c4:9a:bb:86:
23:9f:1d:1c:16:4f:03:f9:6f:74:e9:3f:97:32:01:
c7:64:23:23:f8:ec:8f:83:4d:6e:00:57:6c:e3:61:
97:4a:04:89:47:81:b4:ea:65:11:0b:42:8d:b7:88:
bf:5d:fd:34:a0:d9:a4:5b:21:36:bf:a3:4e:96:26:
03:77:fc:f6:e0:56:28:12:a2:f3:32:b2:b0:53:b0:
80:33:f7:8e:2b:07:c0:25:21:fa:f2:71:16:f6:55:
a3:c1:2f:42:af:7a:83:42:5c:2e:d0:55:bd:a6:54:
ef:0a:94:a8:7a:d0:23:49:95:d7:58:58:f4:cc:9e:
e0:63:ce:04:07:eb:d7:d6:34:21:b2:a1:89:00:4c:
7d:12:56:69:d0:55:8b:e9:4a:47:96:6b:86:50:52:
08:b3:72:ee:8d:8a:da:38:fc:fb:21:58:5f:1c:43:
63:88:77:23:15:94:c0:e0:ad:fc:58:21:2b:9e:ea:
52:c5:71:1b:53:b6:10:1a:0a:d8:5f:57:b6:e4:00:
08:9e:0b:56:95:8d:f6:d0:11:e6:65:61:9f:7d:1e:
b3:f4:10:ed:bc:80:e3:44:c7:86:e3:fa:4b:2c:88:
71:ad:62:83:99:ee:14:38:6c:18:a7:6a:74:d7:69:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:D1:CE:64:D1:55:22:8B:6F:DE:1F:23:D9:78:9C:78:2C:21:AE
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:53:03:03:eb:6c:84:f7:c1:76:19:58:44:56:37:05:62:
70:d6:87:92:f2:e7:f9:71:5e:64:b1:3b:23:32:49:c8:3a:6c:
d1:d0:5c:a4:e7:8c:3d:cb:fa:ce:2c:b7:40:06:9a:dc:26:cd:
84:55:a4:53:75:42:36:04:3e:df:82:fb:00:82:dc:43:a3:cb:
ca:4e:ba:f0:58:f4:45:29:c7:80:b5:ee:90:0d:06:1b:e3:56:
a1:f5:f1:df:6e:05:26:3a:3f:55:69:0c:f9:fc:a1:c3:bc:15:
e6:73:19:7c:af:95:a5:31:97:13:81:9b:f7:aa:e8:8a:5f:2e:
94:7e:4f:1c:56:6a:1f:d1:b3:1d:a5:c1:39:46:df:fa:1e:bf:
81:64:5b:6a:eb:0a:c7:9c:ba:74:0a:9a:3a:c8:3f:c5:ce:bf:
fb:b0:58:bb:86:ea:f3:e0:7c:e0:96:ba:d9:f7:59:55:73:5d:
d1:0e:4c:28:1e:c8:46:6d:49:2f:9e:c7:f1:be:2b:0f:66:bd:
9d:e0:c8:e4:a7:68:24:64:41:57:34:f5:30:78:67:17:d8:9f:
b8:2d:87:fc:f9:e0:06:d0:f1:c8:4a:18:fb:97:34:1a:02:8c:
dc:58:9b:74:27:a3:84:5d:83:81:f5:99:7d:e2:c4:90:29:cb:
f4:b8:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:25 2026 by rpki-client