
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
File: 17ISLEzzCqZTnsnH5ojbh1BqqV0.mft (raw, json)
Hash identifier: +ktrAzYiKQQC5iE/8qiNgl69u+pBCjfEqs9ImWPLatg=
Subject key identifier: 5B:D8:FB:26:B5:3B:13:1B:AB:76:C7:30:CF:33:3F:44:82:A8:35:B2
Authority key identifier: D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
Certificate issuer: /CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Certificate serial: 01A0CE91F32F8841BA7C70C552BFA2C7CC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
Manifest number: 02B5
Signing time: Wed 23 Sep 2026 14:01:06 +0000
Manifest this update: Wed 23 Sep 2026 14:01:06 +0000
Manifest next update: Thu 24 Sep 2026 14:01:06 +0000
Files and hashes: 1: 17ISLEzzCqZTnsnH5ojbh1BqqV0.crl (hash: VsUnb1PMdvwm9q6JstqPS+m3GUPmJG1a50BJLOAHK/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:f3:2f:88:41:ba:7c:70:c5:52:bf:a2:c7:cc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Validity
Not Before: Sep 23 14:01:06 2026 GMT
Not After : Sep 24 14:01:06 2026 GMT
Subject: CN=5bd8fb26b53b131bab76c730cf333f4482a835b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:71:32:57:4c:ce:10:01:8f:3b:e7:77:7f:
d1:a2:8b:a3:bd:a2:c9:a6:11:cb:9f:61:e7:c3:85:
47:3f:22:94:f6:97:8d:da:72:a9:a3:8e:a4:1b:ce:
40:49:ba:e4:0f:15:b3:e0:13:73:45:8d:59:0e:eb:
f5:5b:2d:60:a0:c4:fe:fb:70:ee:ab:b4:51:f6:d9:
96:0a:6d:68:9e:16:01:3c:f2:b4:55:62:e5:0c:0f:
c6:ce:ad:5d:27:a8:7b:81:b7:f8:79:64:f8:d8:b8:
69:b0:15:7a:d5:dc:4e:c6:4b:02:e3:5a:20:3a:28:
d0:8d:0d:33:a3:c5:1f:ee:a3:bd:03:ef:c8:24:20:
cc:9c:4f:ba:6a:ca:6d:40:50:81:65:36:a9:d9:72:
8c:10:89:c3:9b:f4:ba:58:c5:18:3f:4b:35:ea:fe:
86:52:61:b6:e6:a6:c3:d6:35:1e:76:4e:ff:6d:f4:
f9:bb:5d:72:57:fd:f4:8b:58:8a:73:50:b9:2f:01:
5d:0f:a6:0e:13:00:c2:09:d5:cb:c3:3f:25:5c:bb:
1b:59:32:e0:7e:f4:4b:6e:af:6d:2f:68:1b:b8:f7:
df:51:a4:c6:be:24:ab:ad:e6:6c:73:82:5d:60:52:
ff:52:a1:43:21:1e:05:18:f7:2e:1c:51:c0:5b:cf:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D8:FB:26:B5:3B:13:1B:AB:76:C7:30:CF:33:3F:44:82:A8:35:B2
X509v3 Authority Key Identifier:
keyid:D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7f:fa:69:27:b7:06:4c:4e:af:31:c6:9f:ce:fb:58:25:40:
58:ca:3d:6f:d6:8b:c1:6c:d0:79:74:2d:fa:f1:14:8f:01:39:
1f:fb:f0:80:06:1d:a0:15:a6:2c:80:ca:b0:5c:7a:d6:41:46:
9e:64:1d:8e:9d:42:b0:d8:4d:26:be:79:d3:a6:bc:a1:3d:d1:
92:30:df:4d:08:61:db:eb:13:5c:51:5b:b1:d3:d9:52:53:62:
ae:64:83:58:75:8d:27:cf:f5:40:56:d4:75:e1:42:0d:9b:e8:
19:9d:3b:0b:8e:90:a4:dd:88:f3:ba:98:e3:9c:4a:3b:83:b6:
e2:1a:7d:38:24:55:09:11:ad:0b:74:ec:d1:e2:dc:38:ab:fa:
ad:5a:6c:98:d1:ad:27:6a:4c:0b:f8:52:ff:e4:8b:8f:53:2b:
f3:91:3e:64:c2:8b:61:a5:0b:48:b4:92:bd:2b:9b:85:9c:17:
ff:4b:5a:9e:76:57:30:ac:b3:24:83:dd:e3:77:3d:8d:28:60:
68:43:4d:2f:e7:4d:01:58:48:66:c4:24:03:4f:60:ca:1e:bd:
61:23:3d:2b:b8:d5:54:29:d8:b6:e4:42:4f:46:82:ac:3d:f5:
f6:f8:5c:1e:3a:7c:ae:06:6e:3e:82:b7:3a:4c:57:df:ef:06:
dc:65:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:31:43 2026 by rpki-client