Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: A5JRqW5uim0TSwtV9rpS4BgU7csVvTDY364kSz4Athc=
Subject key identifier: 97:5D:6A:D9:7F:57:A7:2E:BB:11:19:E5:27:B8:76:2E:1B:A3:A6:DD
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01A0D34B4E80C26DFCCE95DE0A836049C41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0E96
Signing time: Thu 24 Sep 2026 12:02:02 +0000
Manifest this update: Thu 24 Sep 2026 12:02:02 +0000
Manifest next update: Fri 25 Sep 2026 12:02:02 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: TAOBPT5H68OOFn-aKgpIl79l-88.roa (hash: r/7rpZ5+y5pBnxkFqNUutBAb1N4xvdrVCeNUer0qRTE=)
4: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
5: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
6: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: hg+Iju0awb2XNsH/AHUMU350cHXDIffK4BhpB+ugOPQ=)
7: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
8: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
9: iTEBApGbXIQld6L8Gn4Udz3xB-U.roa (hash: HMQe1B8krTvbu6yUHhju4zyKwvmO6+uDtYtQV221HaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:4e:80:c2:6d:fc:ce:95:de:0a:83:60:49:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Sep 24 12:02:02 2026 GMT
Not After : Sep 25 12:02:02 2026 GMT
Subject: CN=975d6ad97f57a72ebb1119e527b8762e1ba3a6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:97:ad:24:42:64:e8:21:39:38:6a:23:3d:
1a:ff:c1:99:ae:4f:c1:78:c9:e6:9f:38:0f:b4:f8:
ea:3a:4e:b6:88:df:11:c0:b6:eb:f5:d5:52:45:df:
97:0a:31:ce:a5:b7:b2:dd:02:b4:13:1a:24:44:c0:
2d:06:2f:cb:f0:76:63:3b:c8:45:95:5d:58:c7:0d:
15:a4:66:63:63:28:d1:e4:cb:06:51:40:fc:2f:f8:
2c:ba:7d:44:c5:5b:07:16:a1:4e:53:4d:4c:4f:a8:
01:f8:99:1d:7d:41:a6:4e:d4:32:42:48:1f:58:4d:
3d:a7:56:e7:94:85:50:99:36:f8:f4:22:43:f3:da:
dc:17:58:d7:67:15:d5:30:63:2a:32:b9:5d:6b:7f:
4e:56:e0:b9:05:79:2b:75:38:85:47:bc:98:32:de:
04:43:96:23:a8:03:fc:8e:e5:9b:82:7f:1e:0a:68:
0c:cf:35:8e:bc:86:47:f9:ce:c7:93:58:be:32:c3:
06:9c:48:c9:f6:97:6a:68:13:93:56:a6:3e:41:28:
55:27:68:ab:11:aa:12:f7:19:48:ad:ee:27:06:4d:
76:13:b5:9c:fb:35:ab:05:d9:d7:52:e8:3c:f3:ec:
9e:1b:de:1e:3b:ec:aa:0e:4d:d4:90:27:fb:ef:1f:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5D:6A:D9:7F:57:A7:2E:BB:11:19:E5:27:B8:76:2E:1B:A3:A6:DD
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:09:43:61:b0:d6:05:1d:4c:54:f6:b1:57:b4:cf:50:b4:d6:
8a:05:30:18:af:51:5f:9b:ad:b8:60:5f:89:01:55:c4:34:4d:
05:80:97:78:f5:04:ce:d3:71:06:a4:b2:14:ec:ae:3c:de:d1:
ee:55:06:b9:56:59:0f:40:06:27:39:9f:a0:b5:bb:c4:04:bd:
80:85:48:14:2a:ba:71:1f:71:a2:72:5d:4b:1f:f2:67:5d:fa:
5c:b2:59:17:46:33:c8:ae:61:c8:04:a1:1f:63:71:00:89:2f:
74:29:d8:97:ac:ca:12:07:8e:53:3f:c0:0c:b8:92:fa:96:38:
05:1d:85:c2:70:a8:97:1f:5c:cb:71:a7:6a:ce:06:81:d0:c5:
ae:bc:c9:25:d5:93:b8:39:ac:ba:00:37:da:20:69:6d:ee:32:
57:3a:b9:f3:b6:e6:1f:b5:f2:7c:87:ee:ad:f4:a2:22:9e:98:
22:56:b5:e4:36:c8:6a:b9:e7:4f:63:37:5d:40:4f:00:ef:51:
12:cb:3e:60:79:c8:6e:d6:6f:4d:d4:a6:93:35:48:0d:b0:9e:
54:e5:2d:c3:c2:7f:f7:42:8f:cc:e3:7f:f9:3b:20:a6:da:8a:
45:db:9f:1b:00:90:f3:a5:0c:96:ab:c2:4b:9b:00:82:07:e8:
00:c8:73:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:46 2026 by rpki-client