
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
File: xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json)
Hash identifier: C1++GQ5+LkFx5kXW0tgYKozYrz6MpL5sxgawOEmoGa4=
Subject key identifier: 39:75:33:7A:06:F5:2F:05:D6:28:6B:4A:C1:17:49:8B:85:6C:4A:CA
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019D31F5500CBDD2F877B98E80A72904E42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
Manifest number: 0231
Signing time: Sat 28 Mar 2026 01:00:53 +0000
Manifest this update: Sat 28 Mar 2026 01:00:53 +0000
Manifest next update: Sun 29 Mar 2026 01:00:53 +0000
Files and hashes: 1: 1-DD4o6xbuV6samukDs3vaP8tu6k.roa (hash: 7AU6fV8RAb68tAatAXOQGyf+DldTsJty373d6zKIAZc=)
2: 1-eFVKmGWJEdXxYxER_6NTgHg9nM.roa (hash: UWlmQISqK1Q3Nfe8AMftm7uDs9PdmCWhPYuq7XWFlJc=)
3: 2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa (hash: 7g2yMNDEh/3UCmJMu0HEy/ij+vuN812wmv5+67aeiXQ=)
4: 4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa (hash: ITGD8b+FCm11c80KFD5+ZoRZrONhlzxP1zvlRlrSgkM=)
5: 7E96DTfT004BumK2TWn6X-KStr0.roa (hash: 4dVQ5tEe28gAbBR2YECy/CnG4r5KNVR2jJdh36ss1Ro=)
6: AUJBwqUEGRl5pOinQQhewx3XNN4.roa (hash: 00r5IYJwyUKYgINfARqOjf3C3sp+DUhl/0cWO2KBAGQ=)
7: FdFBOG_czA7j6v6Y4dm7gddEJ7Y.roa (hash: 9YtYGIO+vZ5T2hyxv7HeDob3cHulk/JcKTCyZ2ktJl0=)
8: GICLEj3ymdfbxLRaQ1STYZ1HQm0.roa (hash: R8hNe/xkDTsv6hzz2dGuX7HG2B9Hsj+cN7gQT4HGaWo=)
9: GLzvmrFZwtHFe9Z1yEG5XD0OvBw.roa (hash: QOv5YSca4ZcldTa0HFwimRbho38o3TvS8gmdTUQXDWI=)
10: GXtyBoKwJa_8udE5jlYgWB7VYaI.roa (hash: 5g97zlCVWlo32hpHqRVgpaG704TgHvygtVvbPhPxh4A=)
11: IWX-CNMtLnEwDMU_uuhCAK1EY24.roa (hash: QFvTEXXIi0ZV1gJXbhpa5SnttSZtnVJpB+lXXSI4qeM=)
12: MEpnn_UIBaXHk3JMf7tw8C-sp0A.roa (hash: +buMoz8blTj/Jno2gmUOhshJfC2X8Bq4gZI/d0LapjU=)
13: Otk0FG79gmtURrbs9qBFw9Z1oYE.roa (hash: a7mLkMf4TxITC/PYCxNaVolYF/WwFtTrcxfr0qmRb9E=)
14: PzmgqQ8um9H5hi2VAkYcPSoWEZc.roa (hash: Ng3CEcY0pucPNrNnMyShiiiPUWhrAnQNm1Uu1P+kOs4=)
15: RO3bpIDn2J_HXKMszt7GfzDSzLQ.roa (hash: QedY6RKt5ofFsS0wCMN8+wlwQCbLNQao3vI53Hc1xns=)
16: Spi55eI2JrifMv5ym0HwLqyglo8.roa (hash: Js2piaBVieot3w/NY7INh7FCYo3taWHPYAVu8oowvZc=)
17: VSTvJd5h1fJUpFcDkpWehBmerWU.roa (hash: BJSxFJdEem4H8rI+w02tkL0g2q81qbgek0uq2F+I4QE=)
18: ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa (hash: mbBMJSTyfI2VzBuWzMkS287FyWqD5btpEmqCqBM0tFM=)
19: a4c5nDjxUxZzN8-2XTGKKyylEKA.roa (hash: vIspRpTGJa0UmUflc4n43GVwg91z3DdXziQm69Y2zi4=)
20: gwpdq_NkP7xGLzmZAueCQIGLNMM.roa (hash: Zzjd6w649CZmKiqH/d7WSYa+l7hvrSIPU7guX3LLEFs=)
21: iR63CY1kK3TiPhYx6WEO-yojkgY.roa (hash: yNqWBZbEljIAfAFMt1cH42zOzS6vcf4m1YoQHlDtmc0=)
22: icij8tzbCB1q5s1zQochnbGKB_k.roa (hash: 5ILc/a0dy416laIUvkxzERmHvyyFM6HRRoVjgXd6PRU=)
23: kD9THQqr52-A9HCLqNy2hqhG_kA.roa (hash: ZY3pnD0PUamjgM9FCMYtpaTRi8Ds5YJqoFSs/k+EEOo=)
24: kkdrwvtIm67mYRzUq0YY24XrUnQ.roa (hash: RflwSuE6iPYXKTGfn+ZXNNVA1p+hYP+EDtyv0xx/9xg=)
25: l1JBJeL1TzXpfEJ4dJ1OFlIGoKs.roa (hash: WH2AV+DKIPZKgJAKlzBT1MXSPWrK7NoPeJmwxvwHWks=)
26: lIu0H0yuC3-BywTkSb56YA1zcUs.roa (hash: 3DBYGsn6K7uF1Bw9p2Jse1TYdY1cQKyXCA9E5NJekWw=)
27: n98z2qle9j9RoGcLrh06bUNoVZY.roa (hash: CBtwp7UwHlaVOr8fW2fX58/bDbCTIdB1ZHIKVtTlbvY=)
28: v9u6c1G3uDUBNBW72AIeQsbMSkU.roa (hash: cSw29uaRCfhlXcjTUk/oJ6tL7PSBGFC6VZcRPpBUoGo=)
29: vNvu3CipEQ22NPrTCm5toxcdUV4.roa (hash: js4t+SXfMQKXRL4QtWfYNg6zeuXvSb2Q6gaWblLMLx0=)
30: vgdrRNg1iwDXk7wRjAKw2oXzxgk.roa (hash: 9GItr0FbMxsEXBlU8CcW+5gVVGSwBDcp0ugxaQ97mEE=)
31: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: ri99QZOtmYerokOsdlOmqnleE7l4Pj9MkBkAJ5ExriA=)
32: xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa (hash: 86Kt24lcILhRy/GfUx34Xk5McTjh1tptJAhmbF8EPxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:50:0c:bd:d2:f8:77:b9:8e:80:a7:29:04:e4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Mar 28 01:00:53 2026 GMT
Not After : Mar 29 01:00:53 2026 GMT
Subject: CN=3975337a06f52f05d6286b4ac117498b856c4aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:e0:18:e0:97:bd:c7:51:6f:76:86:79:e4:
27:55:48:d5:50:43:7d:6b:a7:a3:38:49:74:27:d1:
5b:fa:07:88:48:89:86:5f:04:5e:24:b6:75:84:61:
7a:ea:3c:93:48:fd:bd:27:27:50:f6:8a:69:9b:0d:
bc:66:aa:c8:32:9f:82:2e:0a:9b:e0:c6:f2:3a:3a:
e5:96:2e:6b:e4:46:eb:a3:ec:d7:8d:7e:72:3b:f8:
d3:d1:33:64:58:e2:a3:74:61:45:6a:82:5a:d1:fd:
58:0d:5c:1d:d4:bc:f1:fe:57:42:9d:a5:5e:d9:28:
0d:38:4f:6e:78:56:b1:f7:f6:e3:72:c6:3f:ac:62:
ca:c6:d2:b9:da:fe:fb:3b:f5:95:a6:31:f6:48:34:
ef:ca:5f:26:27:8e:6c:a9:07:3d:82:d8:8b:21:fa:
24:77:b7:c9:89:c5:10:fc:0f:a6:ae:c5:75:dc:38:
ef:58:36:65:d4:5a:2c:19:38:1f:ac:b5:36:7d:44:
6e:c6:5d:8d:c7:28:b7:88:ca:63:92:ba:9b:28:99:
3d:1a:da:39:f7:0f:f0:b4:fd:fb:ad:88:76:78:4e:
54:c2:8a:4d:9d:90:e8:46:1e:7f:14:4e:61:da:6b:
4c:90:cc:23:c5:4d:42:d6:9c:33:f6:9f:9e:17:0c:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:33:7A:06:F5:2F:05:D6:28:6B:4A:C1:17:49:8B:85:6C:4A:CA
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4a:28:73:40:c3:92:7d:e8:29:59:65:6f:cd:de:89:88:f7:
99:80:cd:82:d2:a1:f9:c9:70:26:83:eb:49:b7:a2:0c:ec:e8:
9d:d9:bf:96:8f:cd:8a:ce:52:2e:b2:f6:31:9a:22:48:9d:7e:
09:64:ab:cc:d6:6d:4f:aa:f1:10:ec:01:e0:1d:a1:17:6b:16:
c2:29:f9:9d:49:fb:4b:76:d4:e6:65:a7:b9:fa:99:32:7d:6d:
7d:93:7c:73:30:ba:1d:f2:56:b0:ac:6d:ee:ca:6c:1a:aa:63:
e9:10:d8:b5:5a:42:92:91:cd:47:17:23:d3:e0:ef:a9:09:35:
f7:b4:fd:d9:7c:de:59:07:2e:31:34:51:89:91:b1:eb:84:90:
81:c2:fb:2f:47:68:3f:23:83:7b:9b:03:c6:81:75:ae:e2:f9:
43:1d:94:4d:d9:ff:e7:20:ef:8a:77:bd:eb:e0:06:a3:1d:b6:
1f:3a:51:52:0e:26:8f:ab:a0:24:09:f8:4b:7a:3c:00:ae:f5:
16:25:34:89:95:1c:a2:c9:1e:bb:92:c0:76:7b:4d:05:6b:85:
4b:cc:5a:0f:cd:de:87:ec:0d:2f:67:3e:df:2c:21:c1:e6:be:
9f:20:15:85:19:b7:bb:0b:df:e7:0a:d7:b9:f4:0a:ea:b4:7f:
72:48:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:10:00 2026 by rpki-client