Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: SVDaMEnT13So16S0JwWiHoy5uQn1eu1pGwgvQ0KK/P8=
Subject key identifier: F8:FC:93:A3:AC:50:D0:2E:35:EF:45:6E:23:D8:33:20:02:5D:F0:CA
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019D382E88F41D8D40C4866F5191BC3C6AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0CB7
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
4: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: ii6NxB8VlYJiBAd10eUZAgFuwzs31Tj2NdASbvQBSVY=)
6: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
7: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
8: sivMy5BBS6tJ9sCgHnWlisFnhLo.roa (hash: xCUeJYhVUbo9aIK2zsPjwZyUTmFOjdc6FHzhpsmqqVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:88:f4:1d:8d:40:c4:86:6f:51:91:bc:3c:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=f8fc93a3ac50d02e35ef456e23d83320025df0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:44:5e:54:cc:f9:77:b7:cc:a6:cc:a0:a2:
64:88:20:15:db:a9:50:c5:27:22:9e:62:4c:f4:98:
98:11:aa:47:a9:d2:cd:bf:43:0e:9b:97:f9:b4:ee:
88:ae:54:45:80:87:09:21:39:28:55:f1:ff:10:7f:
96:0e:64:c5:83:38:e2:10:77:94:20:70:30:e3:e5:
73:b9:fa:cf:66:5d:e1:20:93:47:2f:f9:28:12:ff:
27:2a:62:25:67:06:15:04:11:ff:a9:a8:ac:47:70:
b0:24:cc:53:84:59:9c:95:d0:37:d1:95:27:8d:56:
e6:6b:7b:87:23:c7:9e:49:a9:22:bf:1c:2a:bf:25:
a9:6b:61:e8:34:f2:e4:d1:6b:24:a8:8f:67:b9:f4:
76:f8:94:7d:57:cc:07:76:0c:13:24:28:44:8c:41:
78:2b:7d:08:41:50:d0:f0:e2:13:25:6b:16:28:09:
cc:52:6e:81:70:32:f1:cb:02:3f:c1:19:ab:1c:bd:
fc:de:99:2b:73:72:45:28:d9:64:d7:6d:1b:94:25:
79:45:e2:16:06:5d:fd:7a:e9:e8:4a:ef:fc:cb:e9:
6a:b5:ae:8b:fc:b6:9a:2b:f6:c6:d8:3b:ed:b5:01:
76:4d:7c:30:d1:57:f7:35:ab:94:15:cc:da:4d:5f:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:93:A3:AC:50:D0:2E:35:EF:45:6E:23:D8:33:20:02:5D:F0:CA
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e2:f6:85:f4:57:ea:86:a8:7c:77:5a:3c:6a:c5:32:22:01:
2b:28:3a:ad:60:17:56:c0:15:71:c8:fe:33:9e:b7:90:63:ab:
f0:8a:4a:8d:d0:29:c1:5b:6f:32:6d:32:4e:62:4e:3e:c4:d2:
47:6d:7b:f1:b9:ee:7e:e9:22:ea:d7:e6:41:15:2c:24:a9:79:
ee:a4:53:42:a0:62:64:2d:42:cc:30:a9:49:46:0d:c7:42:79:
cb:26:09:fd:28:36:07:bd:03:63:9c:42:5c:80:02:5f:b2:48:
4a:ec:2e:f0:c0:18:f2:38:2c:5d:1e:23:0d:24:e2:69:4f:07:
5f:c8:01:5f:41:83:95:01:da:24:96:dd:58:9d:fb:22:12:58:
d9:12:8d:1a:55:ed:29:19:1c:64:ba:a0:ec:b5:f5:ff:dd:6b:
47:e3:19:a5:b9:2d:53:3d:35:ef:26:05:51:a1:77:8d:d6:db:
65:39:4a:08:25:47:e0:16:db:98:d5:e2:bb:84:07:ac:21:3e:
dc:18:12:30:e6:f4:0d:fd:73:54:fa:c7:e9:b9:8b:d1:6f:be:
51:16:0e:14:11:f6:d0:59:53:b0:a9:86:dd:b4:93:93:d1:72:
e1:37:1e:ab:d9:10:96:a8:e4:c7:07:c0:d6:5f:e7:51:8f:f2:
60:5f:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:08 2026 by rpki-client