Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: g834QR8zTg3d+8XoWgA+W4psZt9IuwV8K3JotwmCt+w=
Subject key identifier: 3A:78:21:19:D8:BE:59:5C:A0:23:06:AE:10:DD:A2:90:0A:23:91:C5
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019CAB345C47565F1D53D544D80C4A918AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0C6E
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
4: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: p7K0DZ/7KZ7Hy6rFbd+k9aPyH9ZEn5LEkmxb65FCzxs=)
6: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
7: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
8: sivMy5BBS6tJ9sCgHnWlisFnhLo.roa (hash: xCUeJYhVUbo9aIK2zsPjwZyUTmFOjdc6FHzhpsmqqVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5c:47:56:5f:1d:53:d5:44:d8:0c:4a:91:8a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=3a782119d8be595ca02306ae10dda2900a2391c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:29:75:83:4a:f9:b5:31:5f:03:62:49:db:
52:6b:98:81:35:71:a9:2e:08:35:ce:50:b1:3f:2b:
0d:f5:a5:b2:17:2b:3f:16:f6:78:01:5f:6b:35:36:
a4:f2:41:02:fd:e8:d8:4d:97:44:21:56:80:11:53:
17:3f:1d:84:bd:97:56:7c:47:71:48:7c:87:10:16:
87:3f:36:62:2a:4f:ad:d5:64:70:29:e9:5f:2f:10:
1e:5c:72:59:31:e8:40:92:51:0a:03:9e:a2:6d:e4:
34:13:3a:6a:17:25:9b:8b:8d:70:03:2d:0d:d6:6f:
7d:8e:71:00:da:35:0b:6c:4a:36:7e:84:f9:41:4b:
f5:ce:14:40:69:35:8b:f1:b9:12:a2:b0:59:c6:61:
55:87:e4:70:c9:76:42:10:7b:83:24:cf:aa:16:ad:
82:1c:ce:c1:d3:bb:09:50:ad:bb:89:63:5b:41:93:
b9:dd:4b:ea:bd:e3:1f:d3:6e:07:60:9c:7b:02:00:
d8:5f:4d:5a:be:45:59:11:3c:67:2a:fd:7b:7e:ba:
f2:f6:68:69:70:07:c8:49:d1:52:d6:c0:48:2b:b8:
3c:92:72:3d:d3:78:78:b5:c1:3c:40:d4:6b:fe:0e:
56:8b:17:c5:9d:e6:16:c1:d9:0d:61:bb:83:ef:54:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:21:19:D8:BE:59:5C:A0:23:06:AE:10:DD:A2:90:0A:23:91:C5
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a5:b4:02:62:91:06:19:9f:35:5b:19:56:da:85:a4:fb:f6:
cb:3a:3e:e2:be:02:d4:d9:f7:77:58:21:8a:4f:ef:a7:f0:46:
a8:df:26:3f:d7:19:c5:8b:7c:df:d6:59:e6:67:16:35:fa:7f:
03:79:16:6d:de:b7:58:6c:2a:04:36:3c:55:72:fa:d4:c0:08:
ce:07:a9:3d:e1:9d:a2:f9:ae:a9:50:8e:9a:15:88:84:3b:3b:
6f:4f:95:d3:b2:e5:b5:19:18:5b:81:73:b6:c8:b5:1f:a4:8b:
c1:91:3e:63:f7:83:7d:89:13:46:3a:c2:9b:a7:10:53:b8:de:
c9:a1:74:ad:a8:e6:3e:c4:ab:3c:d9:ea:ae:4b:06:c4:bc:4f:
45:f4:d7:95:11:96:91:5d:cc:ce:d6:3b:b0:52:3c:37:d4:c9:
29:c8:6b:a1:1a:40:49:96:5d:a4:80:97:82:fc:d8:c5:47:c5:
5c:be:7c:4f:29:0a:46:2a:1b:e0:ef:d1:88:91:d3:11:d9:8e:
32:1d:58:2c:85:e3:b5:f2:fc:cb:76:66:b3:5a:c6:8a:c9:f6:
75:34:92:db:44:9d:19:cd:27:11:0c:3f:5e:59:62:47:d5:19:
18:ab:9a:98:92:53:82:0f:bf:a3:5a:5f:bc:91:b3:eb:71:1a:
46:3b:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:03 2026 by rpki-client