Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: GPaw2u8bjrYcWqvT6JRHj+PJ650w7uaF8wFqzp1mVGs=
Subject key identifier: D9:8C:D4:7B:67:0D:A4:18:17:A8:D4:7D:1B:D6:49:22:89:7A:48:3E
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 01A0CF3678822C005A7D16AD697E93728C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0A85
Signing time: Wed 23 Sep 2026 17:00:48 +0000
Manifest this update: Wed 23 Sep 2026 17:00:48 +0000
Manifest next update: Thu 24 Sep 2026 17:00:48 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: pw/go7UeLF0c6jVEvGZuT4r7OLrfkQOF63SnjzMG+x8=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:78:82:2c:00:5a:7d:16:ad:69:7e:93:72:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Sep 23 17:00:48 2026 GMT
Not After : Sep 24 17:00:48 2026 GMT
Subject: CN=d98cd47b670da41817a8d47d1bd64922897a483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:b3:63:16:de:af:8f:07:55:fe:9f:7d:8e:
a3:b4:6d:bf:31:c6:e5:c3:dc:58:8a:76:39:af:31:
2e:70:bd:53:8b:65:a6:58:70:78:4b:00:47:27:04:
ea:d9:7d:d9:4b:6e:60:ef:e6:b7:78:88:2a:3f:2a:
d6:ef:09:7c:63:3a:de:b5:26:ea:5d:20:10:d4:cc:
ba:c0:59:13:9e:d6:2e:54:cd:89:3c:66:b3:49:ac:
39:60:45:4a:e4:36:e7:a8:ee:a3:c4:fa:a6:a7:7a:
d0:8b:25:d1:7f:a9:8a:99:4f:5c:3a:e2:13:03:97:
a0:57:ad:15:e3:4e:fd:e0:e4:9d:20:ef:c2:13:6f:
7f:a5:ea:d6:65:77:ff:dc:e5:bf:c7:4c:7f:03:31:
f2:14:d6:21:76:d5:f8:5e:0a:73:72:c3:58:ca:81:
bc:58:20:5a:df:a0:3f:91:27:5d:34:b8:be:4a:69:
d3:cb:c4:2e:8a:ae:aa:d0:54:86:cd:bf:42:c8:27:
30:db:78:c6:0a:fa:4c:71:a3:52:2e:12:7b:cb:d0:
f9:c1:c3:3e:94:b7:68:f9:a0:54:34:50:b4:08:0b:
29:7e:da:83:8d:ac:8b:fc:9b:dd:d5:8a:ab:30:a3:
6f:e0:c4:3e:6b:c1:67:0f:89:09:a4:d7:a0:97:52:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:D4:7B:67:0D:A4:18:17:A8:D4:7D:1B:D6:49:22:89:7A:48:3E
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:32:94:7f:c5:14:3f:80:8c:6a:a3:75:82:ad:49:ad:d8:08:
7a:3b:e6:9a:e1:1a:d4:f4:24:e3:d8:86:aa:85:33:87:12:ad:
93:50:d0:7a:37:f8:bc:02:22:84:3a:bb:cc:b0:a3:5c:98:82:
fb:c3:b9:15:a4:71:71:e2:69:51:c0:da:b2:26:a7:16:5e:87:
09:09:0c:40:99:91:9c:c0:b4:09:b7:ca:21:22:38:79:87:29:
df:49:53:b2:fe:42:5a:6d:31:0a:a3:d2:8a:94:4f:c6:77:e3:
8b:d4:42:bc:26:8e:a5:19:b1:15:26:65:10:15:45:55:28:af:
5c:63:e7:9d:a2:98:89:55:4b:50:81:66:f0:f9:73:8e:88:aa:
0f:a9:1c:7d:0a:99:5a:70:95:e5:75:bb:a4:b1:81:0a:4d:58:
67:17:da:1d:72:b2:6c:79:f0:10:15:f6:e0:20:96:9c:36:3e:
98:bc:ef:9e:51:5e:8c:76:fa:b6:2d:3f:93:fc:e9:6d:e7:84:
57:c2:ca:b6:82:c9:f0:69:1d:d4:c5:85:b5:a9:5f:1e:17:b9:
08:88:3b:60:0e:16:ad:b5:99:93:c4:4e:ec:27:4d:3e:8e:4f:
a6:bc:7a:3a:00:7e:48:6a:4e:bc:f4:0d:37:27:30:b9:5e:37:
f2:a7:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:40:34 2026 by rpki-client