Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: jfNIjfsWS/k1Duf9J+VltgGYaINVx709ILvNci5QiRY=
Subject key identifier: DF:42:B7:A7:8E:5A:17:4B:58:0F:53:96:18:C7:B9:A2:92:E4:D5:68
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019E1DFE14225C197A9E9DF33B268A4F3445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0D2E
Signing time: Tue 12 May 2026 21:00:50 +0000
Manifest this update: Tue 12 May 2026 21:00:50 +0000
Manifest next update: Wed 13 May 2026 21:00:50 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
4: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: c6EOs8FSF+vKJARUIyeMPEMOCBL7Pkgqv7EQram16E4=)
6: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
7: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
8: sivMy5BBS6tJ9sCgHnWlisFnhLo.roa (hash: xCUeJYhVUbo9aIK2zsPjwZyUTmFOjdc6FHzhpsmqqVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:14:22:5c:19:7a:9e:9d:f3:3b:26:8a:4f:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: May 12 21:00:50 2026 GMT
Not After : May 13 21:00:50 2026 GMT
Subject: CN=df42b7a78e5a174b580f539618c7b9a292e4d568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:15:13:a0:9a:f3:1a:76:14:82:10:3e:9f:
27:97:6f:3c:9b:e0:17:12:46:77:b6:6e:53:0b:6a:
3e:e8:9a:e7:4e:5c:bf:6c:28:40:c2:06:63:d2:25:
fe:2a:ba:95:5c:73:33:91:1d:3d:9c:8d:61:49:26:
0c:ad:6e:bf:53:c3:e3:7b:20:e9:fe:88:99:3e:46:
5e:8e:42:f0:c5:84:3d:ab:2d:cb:ce:30:32:9f:9f:
d8:fb:39:78:11:30:e5:9f:c7:af:c6:1c:54:4a:aa:
71:32:19:c6:f0:f4:dd:72:5f:60:d1:9d:f3:33:d5:
33:ba:0b:f1:22:7f:b0:d6:3e:2e:91:c7:bb:fb:1a:
59:27:01:0a:4e:24:d3:a8:eb:6e:23:3c:2f:39:21:
e8:26:ec:f3:4d:48:f3:31:a4:82:e9:89:3f:8a:b6:
c2:32:b0:9a:28:d9:65:f4:9e:6d:ed:8e:d8:f0:ee:
91:1a:a8:55:88:08:5c:e3:91:66:d0:08:57:1b:52:
bc:13:39:b4:d1:a9:b9:19:9c:0d:d4:e5:da:c4:d4:
ad:f3:82:03:cb:f8:42:2a:28:32:db:4a:1f:81:dc:
b2:92:88:14:02:c2:54:30:a3:b1:36:38:63:d4:a8:
77:e5:39:70:92:a4:1a:87:57:57:f6:34:c9:43:59:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:B7:A7:8E:5A:17:4B:58:0F:53:96:18:C7:B9:A2:92:E4:D5:68
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:51:dc:22:54:41:1b:b0:d8:a9:58:19:8a:79:9b:5b:6d:15:
ce:44:7f:d4:b9:59:0c:ea:08:1f:07:ed:b0:13:13:b8:ca:9d:
a4:5b:8b:22:1b:87:88:f3:78:34:42:c0:c8:65:a1:ff:b1:cf:
3f:86:cc:b7:0a:d6:c8:79:4f:99:07:b4:3c:68:70:ea:5b:3a:
ed:6e:fc:72:cf:94:6b:42:4e:f9:f7:66:f8:e8:42:9e:51:9c:
83:5d:9b:ee:5c:5a:25:9a:a4:5b:70:94:78:cd:d7:bb:69:b8:
6c:ad:5c:65:9e:60:20:df:cd:21:f0:eb:48:a8:41:1d:29:1f:
02:e4:5c:86:60:b0:4e:93:b3:b8:a1:0f:36:36:7e:fc:b4:da:
34:27:c5:e8:07:1f:e2:37:fb:e7:38:04:f9:39:a1:79:92:6e:
5b:1d:4a:a1:d6:2f:5e:4c:8d:7f:64:a1:bb:55:50:45:ff:b6:
39:dd:b1:fb:9f:b5:97:63:e1:da:94:bb:5b:6a:f9:54:8a:5a:
a5:75:b4:7c:4f:52:46:04:0f:24:f8:88:5a:fe:79:b2:5b:b9:
b7:4c:f3:d0:d6:89:a8:7d:32:8a:8c:6f:83:89:6f:1c:73:5e:
ad:14:5e:02:7f:66:10:d7:22:6d:34:d8:f4:74:2b:bd:97:0f:
f5:0f:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:46 2026 by rpki-client