Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: 6lAFKUfnkyiFKLCGGrGiNGzvBk4YlGSr3HLuYIN49UI=
Subject key identifier: 65:D0:5D:C3:71:DD:BB:91:F4:62:69:07:02:D9:CC:7D:70:BC:38:9B
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019E1DC76C9C77DBF2EA2D3B1384F7ACF9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0920
Signing time: Tue 12 May 2026 20:01:09 +0000
Manifest this update: Tue 12 May 2026 20:01:09 +0000
Manifest next update: Wed 13 May 2026 20:01:09 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: 7l2yvQXYxQ7HgMpYtSFmrJ+WoJFcVuz+MLM0JfUinE4=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:6c:9c:77:db:f2:ea:2d:3b:13:84:f7:ac:f9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: May 12 20:01:09 2026 GMT
Not After : May 13 20:01:09 2026 GMT
Subject: CN=65d05dc371ddbb91f462690702d9cc7d70bc389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:10:07:56:2e:3c:a3:ad:18:18:ff:6e:17:
e0:8a:0f:b2:f6:92:86:17:2e:22:88:a6:91:7f:69:
28:22:4d:cf:94:87:5d:12:3f:81:7e:0e:09:bc:a0:
e5:06:6f:2c:3e:79:ec:0f:c0:b7:8b:30:f7:7e:41:
ab:01:26:b9:41:fe:14:8a:98:a1:9c:82:79:bb:21:
84:e6:e4:c8:15:e5:06:09:71:3e:3a:c0:d0:de:6f:
4f:09:e0:a7:af:17:ff:a2:b0:dc:b8:ef:ef:84:c9:
2f:f0:bd:c8:5a:42:d8:e0:59:ec:01:e3:c1:86:65:
ac:44:fb:ba:61:fc:7c:70:17:4e:0f:7d:41:ef:35:
eb:3c:69:28:58:fd:09:7a:cc:5b:41:bc:38:b8:52:
69:0a:38:b0:0f:b7:40:a4:23:06:1c:f1:e1:c8:76:
7f:2c:91:b8:99:71:bf:3a:1b:10:56:9a:0e:1e:b4:
86:65:1f:b3:63:85:23:0b:ea:0d:d3:88:70:b6:43:
c0:5e:c6:d6:ca:61:6b:68:45:c4:da:33:54:9a:3d:
b4:f0:d2:31:93:6a:59:f1:67:15:a8:83:7a:34:51:
aa:a3:86:37:03:11:53:d1:8a:48:7d:f7:fb:fb:dd:
b4:9e:21:72:b7:80:43:eb:11:07:76:c3:5c:e6:2c:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D0:5D:C3:71:DD:BB:91:F4:62:69:07:02:D9:CC:7D:70:BC:38:9B
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:60:56:30:8a:14:db:8b:07:ab:81:20:4b:c6:12:84:d5:
23:ad:11:f8:dd:67:10:d4:87:b9:7e:2e:59:0b:06:ae:b3:bc:
11:c8:9d:9f:90:46:ce:79:bf:0b:90:9c:93:32:ff:65:09:dd:
50:eb:49:27:a7:1b:0b:70:f9:a9:3d:ce:9d:39:1a:51:98:4b:
2d:0d:aa:f6:7f:bd:53:02:66:51:a9:da:5e:b7:87:1f:a7:15:
ec:54:37:93:d1:16:94:7f:1f:f9:30:80:34:c1:42:0b:b1:79:
cf:6b:df:13:d0:7c:79:4b:02:21:fc:3d:0d:72:1f:52:6d:9b:
6d:9d:fa:bb:75:98:59:61:28:e2:1a:84:69:6a:ff:27:6c:41:
f9:96:24:85:1d:cb:90:9d:f0:d7:19:99:9a:02:36:f0:f5:5d:
42:ff:5a:60:8d:b0:73:90:a0:f7:e7:0b:74:03:5e:44:de:19:
1c:3f:f3:d0:1d:56:3a:91:3e:ff:a8:2c:57:ae:d3:45:8b:55:
26:cf:13:b9:63:dd:f6:ec:09:06:ed:2d:28:37:b3:ad:93:0f:
50:3e:c8:23:38:f7:f6:9e:66:1c:26:2d:9f:91:29:f8:bd:7c:
e0:cc:b3:31:cc:e3:82:e3:e2:b3:a3:05:42:5b:45:f4:5e:75:
78:3c:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:08 2026 by rpki-client