
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
File: xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json)
Hash identifier: Plbl+Aes+vg/RCSrbPLs0MsCU5UUEobqixQUW/WUR5I=
Subject key identifier: 00:4D:F2:05:E2:6C:56:CB:EA:87:D9:80:4A:DF:E8:94:6B:49:83:06
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019E1F7EE41E5B296C50BD0D9DA11F3D7BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
Manifest number: 02B3
Signing time: Wed 13 May 2026 04:01:10 +0000
Manifest this update: Wed 13 May 2026 04:01:10 +0000
Manifest next update: Thu 14 May 2026 04:01:10 +0000
Files and hashes: 1: 1-DD4o6xbuV6samukDs3vaP8tu6k.roa (hash: 7AU6fV8RAb68tAatAXOQGyf+DldTsJty373d6zKIAZc=)
2: 1-eFVKmGWJEdXxYxER_6NTgHg9nM.roa (hash: UWlmQISqK1Q3Nfe8AMftm7uDs9PdmCWhPYuq7XWFlJc=)
3: 2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa (hash: 7g2yMNDEh/3UCmJMu0HEy/ij+vuN812wmv5+67aeiXQ=)
4: 4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa (hash: ITGD8b+FCm11c80KFD5+ZoRZrONhlzxP1zvlRlrSgkM=)
5: 7E96DTfT004BumK2TWn6X-KStr0.roa (hash: 4dVQ5tEe28gAbBR2YECy/CnG4r5KNVR2jJdh36ss1Ro=)
6: AUJBwqUEGRl5pOinQQhewx3XNN4.roa (hash: 00r5IYJwyUKYgINfARqOjf3C3sp+DUhl/0cWO2KBAGQ=)
7: FdFBOG_czA7j6v6Y4dm7gddEJ7Y.roa (hash: 9YtYGIO+vZ5T2hyxv7HeDob3cHulk/JcKTCyZ2ktJl0=)
8: GICLEj3ymdfbxLRaQ1STYZ1HQm0.roa (hash: R8hNe/xkDTsv6hzz2dGuX7HG2B9Hsj+cN7gQT4HGaWo=)
9: GLzvmrFZwtHFe9Z1yEG5XD0OvBw.roa (hash: QOv5YSca4ZcldTa0HFwimRbho38o3TvS8gmdTUQXDWI=)
10: GXtyBoKwJa_8udE5jlYgWB7VYaI.roa (hash: 5g97zlCVWlo32hpHqRVgpaG704TgHvygtVvbPhPxh4A=)
11: MEpnn_UIBaXHk3JMf7tw8C-sp0A.roa (hash: +buMoz8blTj/Jno2gmUOhshJfC2X8Bq4gZI/d0LapjU=)
12: Otk0FG79gmtURrbs9qBFw9Z1oYE.roa (hash: a7mLkMf4TxITC/PYCxNaVolYF/WwFtTrcxfr0qmRb9E=)
13: PzmgqQ8um9H5hi2VAkYcPSoWEZc.roa (hash: Ng3CEcY0pucPNrNnMyShiiiPUWhrAnQNm1Uu1P+kOs4=)
14: Spi55eI2JrifMv5ym0HwLqyglo8.roa (hash: Js2piaBVieot3w/NY7INh7FCYo3taWHPYAVu8oowvZc=)
15: XzNsr4B1xQ7pRfu1SBmIkDMW_8M.roa (hash: Mas1wyyTw8nAbUVSel719nCInFBkYipcPE55OkvIgQY=)
16: ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa (hash: mbBMJSTyfI2VzBuWzMkS287FyWqD5btpEmqCqBM0tFM=)
17: a4c5nDjxUxZzN8-2XTGKKyylEKA.roa (hash: vIspRpTGJa0UmUflc4n43GVwg91z3DdXziQm69Y2zi4=)
18: dwaLrvELUGHutpxf2yGe613jUKg.roa (hash: jlwp/GQn3eJcU7Xth5RxFaTQYB+NlHF1Kq/P2SSZV88=)
19: gwpdq_NkP7xGLzmZAueCQIGLNMM.roa (hash: Zzjd6w649CZmKiqH/d7WSYa+l7hvrSIPU7guX3LLEFs=)
20: iR63CY1kK3TiPhYx6WEO-yojkgY.roa (hash: yNqWBZbEljIAfAFMt1cH42zOzS6vcf4m1YoQHlDtmc0=)
21: icij8tzbCB1q5s1zQochnbGKB_k.roa (hash: 5ILc/a0dy416laIUvkxzERmHvyyFM6HRRoVjgXd6PRU=)
22: kD9THQqr52-A9HCLqNy2hqhG_kA.roa (hash: ZY3pnD0PUamjgM9FCMYtpaTRi8Ds5YJqoFSs/k+EEOo=)
23: kkdrwvtIm67mYRzUq0YY24XrUnQ.roa (hash: RflwSuE6iPYXKTGfn+ZXNNVA1p+hYP+EDtyv0xx/9xg=)
24: l1JBJeL1TzXpfEJ4dJ1OFlIGoKs.roa (hash: WH2AV+DKIPZKgJAKlzBT1MXSPWrK7NoPeJmwxvwHWks=)
25: lIu0H0yuC3-BywTkSb56YA1zcUs.roa (hash: 3DBYGsn6K7uF1Bw9p2Jse1TYdY1cQKyXCA9E5NJekWw=)
26: n98z2qle9j9RoGcLrh06bUNoVZY.roa (hash: CBtwp7UwHlaVOr8fW2fX58/bDbCTIdB1ZHIKVtTlbvY=)
27: v9u6c1G3uDUBNBW72AIeQsbMSkU.roa (hash: cSw29uaRCfhlXcjTUk/oJ6tL7PSBGFC6VZcRPpBUoGo=)
28: vNvu3CipEQ22NPrTCm5toxcdUV4.roa (hash: js4t+SXfMQKXRL4QtWfYNg6zeuXvSb2Q6gaWblLMLx0=)
29: vgdrRNg1iwDXk7wRjAKw2oXzxgk.roa (hash: 9GItr0FbMxsEXBlU8CcW+5gVVGSwBDcp0ugxaQ97mEE=)
30: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: rXEhGFoSzgIrddJ3p/SEYtXtOdcHp2c8tPUlAwTlu14=)
31: xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa (hash: 86Kt24lcILhRy/GfUx34Xk5McTjh1tptJAhmbF8EPxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:e4:1e:5b:29:6c:50:bd:0d:9d:a1:1f:3d:7b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: May 13 04:01:10 2026 GMT
Not After : May 14 04:01:10 2026 GMT
Subject: CN=004df205e26c56cbea87d9804adfe8946b498306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:d7:36:d5:cf:02:94:4a:1f:df:a1:77:a7:
21:0d:2f:ec:b2:99:ca:28:44:1e:86:ea:0a:cc:92:
ca:0b:40:9d:a7:1a:45:89:78:d6:b8:8a:0d:01:9a:
27:6e:01:8a:76:31:c8:59:94:9c:e9:c4:88:dd:28:
4a:f0:14:25:2e:17:b6:88:d6:a0:a9:8f:c8:97:7d:
3f:d3:c9:de:7b:d1:d8:96:96:87:05:2c:e0:4b:38:
7f:3d:66:c7:85:57:d1:dc:67:22:13:f4:40:35:a4:
73:fa:f9:b7:31:81:3f:d6:60:ee:d9:f1:42:d3:aa:
01:67:35:40:66:e0:69:5c:93:c8:d4:01:e2:2c:91:
33:f4:a5:ea:1e:79:ae:01:96:fc:2a:64:db:be:03:
15:db:ed:7c:5d:dc:e2:a1:0a:bb:cf:92:5e:3e:80:
1f:6f:9f:dd:2f:63:25:28:3a:da:33:56:12:a4:ac:
d6:89:bb:53:24:71:2a:59:de:27:fc:d4:df:d8:2d:
ab:fc:e3:04:f4:75:0e:4e:d6:b4:71:ce:f4:73:27:
2d:e6:2b:a1:2c:7a:70:3d:bc:dd:c3:7e:b7:c6:0c:
e8:2f:38:59:8c:2e:8c:1c:64:bb:99:a3:8c:02:f6:
d9:90:71:c7:b3:48:ee:40:b7:ef:4a:88:69:ca:ac:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4D:F2:05:E2:6C:56:CB:EA:87:D9:80:4A:DF:E8:94:6B:49:83:06
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e7:ff:7b:2a:d7:15:94:e1:56:87:c2:50:37:31:0e:0a:6f:
47:73:5e:10:c1:27:77:ed:4e:f7:8f:3f:6e:7e:d8:4a:a5:65:
cf:8b:60:dd:ee:40:8d:83:dd:8f:8f:7d:f4:db:5c:a6:8a:e8:
70:11:0d:9a:46:8e:27:b0:d7:30:7a:f5:8c:b1:ef:d0:74:95:
52:56:aa:cc:4f:9d:e0:e7:7a:fd:d0:63:67:48:e7:0c:9c:6c:
3f:e0:54:e4:72:16:28:69:ae:1e:55:ee:f1:92:6b:cb:60:7d:
6d:a5:1d:e9:b5:dc:89:48:d9:01:d8:ba:50:49:02:08:68:06:
43:26:11:6a:95:0f:04:25:4d:c0:1e:24:1f:ee:7d:26:db:16:
9b:6d:09:a3:76:3f:b3:94:96:d7:ef:f7:cd:e9:c7:c0:cf:0b:
81:03:7c:c7:b7:8e:84:cd:b7:b9:13:9d:d3:d1:96:c5:23:c0:
84:91:68:8d:ea:d4:82:53:b4:63:b2:17:14:e7:86:65:2a:8b:
b8:d6:79:3e:68:f9:8b:d4:6a:9d:3e:ab:01:80:68:60:94:43:
fe:d7:e9:98:40:73:33:08:47:54:90:c3:8b:43:8d:14:66:96:
e8:71:7c:15:af:ed:2c:60:49:58:de:d3:29:1a:7f:ba:92:f0:
e0:48:71:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:11 2026 by rpki-client