Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: Js2EaLV6XbT6iIyqrUiKDhFoG1WPRrS7KFj346E4UqA=
Subject key identifier: B6:77:D6:59:7A:76:55:A9:D8:23:C0:4E:38:B8:B1:39:F4:CB:77:27
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01A0C5C54E86B1E4829F223F715CDBFB2A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0E8F
Signing time: Mon 21 Sep 2026 21:00:37 +0000
Manifest this update: Mon 21 Sep 2026 21:00:37 +0000
Manifest next update: Tue 22 Sep 2026 21:00:37 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: TAOBPT5H68OOFn-aKgpIl79l-88.roa (hash: r/7rpZ5+y5pBnxkFqNUutBAb1N4xvdrVCeNUer0qRTE=)
4: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
5: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
6: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: AnI6GCCrDfjEnUtVuRblUtPO1005/mAV/B9dpAD2YNI=)
7: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
8: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
9: iTEBApGbXIQld6L8Gn4Udz3xB-U.roa (hash: HMQe1B8krTvbu6yUHhju4zyKwvmO6+uDtYtQV221HaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:4e:86:b1:e4:82:9f:22:3f:71:5c:db:fb:2a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Sep 21 21:00:37 2026 GMT
Not After : Sep 22 21:00:37 2026 GMT
Subject: CN=b677d6597a7655a9d823c04e38b8b139f4cb7727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:96:8d:12:9a:02:9b:77:b0:82:9d:d5:6e:
92:a0:10:f1:8b:34:19:f8:ba:af:0a:fa:c9:31:d6:
cc:c7:a6:c3:eb:cc:60:bb:de:29:e2:d4:c7:e8:b0:
09:c3:b9:39:09:55:cc:38:f0:29:39:49:3e:5f:80:
41:26:e0:b7:a4:2e:e0:ff:a7:a1:94:50:15:16:42:
6f:40:22:15:4c:af:e8:a0:88:1c:c5:a7:46:6a:33:
da:07:76:dc:04:8b:6c:db:32:e8:26:f8:90:96:67:
5d:20:86:9b:64:da:3e:45:47:06:a4:13:47:bf:5a:
9e:2e:73:1a:82:ba:fe:ea:ca:5a:23:6d:0f:68:d1:
b8:3b:95:9c:79:11:94:93:02:ea:48:ce:a8:9c:89:
76:4e:1e:a3:25:11:d3:ca:5c:06:35:3e:58:9d:99:
0a:14:be:4e:74:4a:61:6c:9f:6b:fc:2d:9b:82:a6:
62:28:24:78:e8:07:ef:e0:74:c6:8f:d9:8d:64:61:
bb:5b:aa:f4:e1:ba:5a:ce:a3:12:6d:21:e2:f6:a2:
93:74:5e:c7:84:0d:9e:5c:79:9c:8d:1d:75:eb:f2:
e0:01:14:12:3d:c7:62:1e:7c:a6:8d:0f:06:66:7f:
c0:4e:b9:fe:a1:54:d5:3a:00:fd:4e:92:b6:da:f8:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:D6:59:7A:76:55:A9:D8:23:C0:4E:38:B8:B1:39:F4:CB:77:27
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d3:2f:54:b7:fd:92:fc:86:8e:bc:d0:fc:22:7a:f5:51:9f:
3a:d7:de:45:77:54:bb:6f:02:38:63:79:7e:37:26:0d:d6:cd:
3d:43:ec:e8:94:2e:29:0f:f0:f3:50:18:17:65:5c:25:e4:4b:
5b:5b:91:5d:11:fb:66:20:14:5a:2c:00:de:a2:ae:4f:2e:da:
93:40:49:18:ad:87:a9:78:4c:56:17:ef:b8:93:45:e8:c2:3c:
72:86:0a:84:af:2c:4d:09:b1:48:f7:65:d1:1a:d4:a4:5d:b2:
d6:ab:e2:7a:68:82:f9:d6:37:92:65:dd:c8:d7:1d:d9:a3:95:
8d:50:ae:4b:b4:75:6d:42:d6:a1:a1:cb:a9:24:57:66:1b:55:
c4:d4:25:4f:d7:cc:24:47:12:7d:a8:85:06:7b:9d:86:d5:3a:
14:ba:af:c9:81:ea:24:66:97:a0:83:6b:96:d0:c0:e0:ad:58:
fe:f2:c9:45:3e:94:41:7f:d5:ca:24:fa:ed:80:9f:c6:02:76:
f5:06:ef:84:12:cc:3e:3c:70:66:49:e8:33:bd:93:5b:39:09:
85:ff:db:08:e1:df:b8:4b:51:30:d1:c6:71:e5:61:5c:58:d1:
aa:02:1e:63:89:16:c0:ef:8c:4d:c4:e3:c1:cd:1e:9b:bd:a5:
6e:44:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:22:45 2026 by rpki-client