Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: zfIUViPs/YO1k5JyrpkMGO63vhO+4qxsmmEGhI4x0FE=
Subject key identifier: 7C:D3:97:80:BD:2A:4A:ED:F3:22:98:72:DE:50:D2:39:22:47:0E:59
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019F287F4C62ABA30E4550B5D25995BA8A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0DB8
Signing time: Fri 03 Jul 2026 15:00:58 +0000
Manifest this update: Fri 03 Jul 2026 15:00:58 +0000
Manifest next update: Sat 04 Jul 2026 15:00:58 +0000
Files and hashes: 1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
2: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
3: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
4: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: Eu+1ECUSNqQf655a85eCoZNpYBiuBWGF/um5736Tj5k=)
6: Y8G3KeNfPUqqriXeZv1L07FMYlQ.roa (hash: 4XWpqygMRvUQDnhrLqnOHQ+UYJ0tZoFYtlTkeWPzt6M=)
7: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
8: sivMy5BBS6tJ9sCgHnWlisFnhLo.roa (hash: xCUeJYhVUbo9aIK2zsPjwZyUTmFOjdc6FHzhpsmqqVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:7f:4c:62:ab:a3:0e:45:50:b5:d2:59:95:ba:8a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jul 3 15:00:58 2026 GMT
Not After : Jul 4 15:00:58 2026 GMT
Subject: CN=7cd39780bd2a4aedf3229872de50d23922470e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:32:18:77:7b:3d:f8:d5:39:82:e9:99:a7:
f9:1b:30:0e:a9:7a:6f:61:66:f5:49:fd:53:41:27:
91:3d:92:bb:d7:8f:a4:70:0d:27:43:ad:0f:0f:47:
a9:a6:d2:27:be:ef:6b:3f:df:31:6d:eb:29:92:2d:
ae:ac:b4:fe:f2:04:a0:f8:2c:c6:70:e6:87:cd:f4:
25:21:62:b8:f8:ed:ba:da:4e:89:27:76:28:7d:73:
d2:b0:40:60:23:3f:b5:ff:b3:dd:33:5a:b7:c2:32:
5f:0e:d0:19:09:e9:58:57:65:b3:02:d3:32:9b:e3:
c1:0d:78:00:54:b4:e0:30:3a:f7:31:3e:49:65:f4:
8e:d1:0f:8d:2b:ae:3b:e4:5a:ac:56:c8:cb:c6:35:
b9:f7:8e:7c:5f:b7:34:28:ae:42:36:69:3a:e0:4a:
89:c4:06:22:bd:43:33:a7:1d:37:b9:b7:08:20:0f:
8a:b4:db:6f:ce:35:cd:c0:b0:7a:d1:a3:4b:e4:8a:
9d:4a:75:e2:bf:c2:94:38:d9:37:6e:7e:87:48:66:
7f:08:5e:40:bb:58:6d:ed:79:21:d5:c0:c6:f4:d2:
98:6e:c8:73:ab:80:bb:fe:6f:fd:20:3d:21:bd:97:
cc:be:d8:50:f8:22:5e:2a:e5:35:71:15:f7:ff:20:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D3:97:80:BD:2A:4A:ED:F3:22:98:72:DE:50:D2:39:22:47:0E:59
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b9:27:da:60:09:b8:51:c0:ab:fb:56:4f:5c:d8:27:9f:d7:
d5:3a:9c:4e:53:cf:bc:0d:8c:06:3a:f2:1a:64:97:ed:53:e0:
0e:99:a5:c8:ec:ac:76:bd:f7:c6:45:4f:68:ed:e3:bc:6c:9c:
dd:3b:c7:0c:15:d4:47:25:b4:5b:2a:ec:4c:ac:a9:46:a0:2b:
bd:b0:c9:f5:21:77:b2:01:7b:89:c8:39:fc:1b:e0:7c:09:83:
21:0f:1d:d4:dc:39:f2:9c:7d:14:aa:c5:7d:f6:a2:36:9c:98:
83:08:91:7c:48:03:5b:77:08:11:50:4e:78:56:3d:7c:a8:de:
c5:c4:87:e0:f4:32:91:3c:a1:85:44:95:04:07:fa:38:25:04:
a5:ee:21:1c:fc:0e:21:a0:a3:96:bd:7f:cf:b7:66:b8:f9:83:
1c:3d:98:cc:1e:fb:cb:58:5b:f9:00:c9:4f:ce:84:df:68:bf:
da:08:3d:6c:44:87:de:a7:1d:b6:88:0a:d2:38:0e:b8:e4:d3:
5e:63:17:b7:9d:20:df:b8:e2:08:6f:6b:09:9f:57:1e:a7:19:
b8:dd:d0:55:4b:dd:de:07:cb:24:ae:73:87:e8:55:e1:eb:11:
2a:81:ae:57:e1:03:b7:d2:4b:ce:c4:6f:35:39:ca:eb:84:16:
13:a0:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:41:15 2026 by rpki-client