Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: tqsbPUCmRoHbK45onMEk7U4WRv71o6vmHfe4qwXuUOc=
Subject key identifier: 32:DF:94:CD:28:DA:78:2D:4A:1A:79:4B:75:AC:41:BF:12:12:A2:E9
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019D288461A51B1DA371B801DEEE3AA94B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 08A1
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: /3SR5xylGtfPjOJcYOzIOPvuCB2ewkTYqAPjLZYlQEk=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:61:a5:1b:1d:a3:71:b8:01:de:ee:3a:a9:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=32df94cd28da782d4a1a794b75ac41bf1212a2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:b7:07:e1:e2:12:2e:98:aa:21:f0:53:2e:
3c:df:ef:e0:1f:6a:8b:18:23:ce:1a:48:6a:ad:7e:
60:3e:0f:d8:0a:95:41:25:26:d6:fc:3a:58:e8:cb:
e8:cb:02:b4:03:41:c9:a3:cb:a6:ce:f6:d7:f7:92:
f9:36:5f:c4:07:f4:64:e9:da:8c:16:15:af:8e:6a:
65:ab:da:b6:7f:79:14:9d:59:48:99:9e:b2:0c:d3:
ba:d7:9c:70:66:e7:bb:be:ff:e7:5a:0a:3e:c1:af:
b4:94:63:76:8e:5b:af:2c:5c:e2:3a:61:78:a8:07:
6c:26:07:71:2d:42:a6:7d:d5:1c:df:97:9a:52:fc:
39:b2:89:1c:c9:e5:5b:05:8a:f2:ff:01:53:de:71:
ec:8d:90:e9:2b:3b:c9:77:c5:8f:fa:d8:fb:57:43:
8b:96:b2:10:d9:a2:e4:bd:f7:88:3a:ed:e6:aa:2c:
5d:e4:1a:60:6d:cf:20:60:0d:66:ad:4b:89:68:a0:
9a:f5:4a:7d:4c:1a:93:09:bf:93:7a:f8:91:1f:22:
5e:3c:ff:d4:51:33:70:0b:7f:41:1f:89:52:0b:b1:
34:eb:71:a2:d5:aa:e1:7e:e4:a2:3f:4b:ab:7c:85:
ff:b2:a6:ec:7b:5b:ef:8a:c2:96:d7:f3:a1:bf:1c:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:94:CD:28:DA:78:2D:4A:1A:79:4B:75:AC:41:BF:12:12:A2:E9
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:4e:ca:8c:c6:fe:ef:86:34:f5:09:aa:d2:ec:20:4d:98:
d5:ef:ad:97:e8:6f:5c:1e:6a:4e:b8:5b:9a:7b:91:18:1f:2a:
bf:cb:a5:ff:f3:0e:ed:d9:96:63:dd:0b:95:f9:79:7a:b9:24:
c5:43:50:1d:1a:5f:1f:d0:5c:56:92:56:99:b7:6b:69:0f:4d:
3e:48:16:5e:de:c3:76:f0:7b:9e:9a:3d:ff:3f:32:58:92:b2:
21:42:2c:2c:38:78:1c:34:53:30:3c:8a:dc:27:5a:42:44:dd:
1b:55:eb:6f:06:ae:75:5a:6f:7d:7b:58:72:5b:1c:2a:ef:51:
4e:9e:98:94:d3:70:a2:28:21:64:cc:a4:21:37:06:27:4a:b9:
ea:2b:e3:c7:1e:c5:5e:0f:36:5c:ce:db:50:e2:36:7b:bc:4b:
74:49:44:0e:3d:e9:bf:7c:ac:dd:da:34:26:cf:45:45:2c:08:
6e:8d:76:d0:5c:16:ba:9c:c1:e0:87:a1:20:30:d3:b0:f8:ba:
ac:b9:29:8d:58:78:f0:cf:00:fb:7f:c7:be:89:08:8e:a5:fa:
54:e8:1c:29:e4:ff:8e:cb:f4:0b:bb:cd:ae:07:e7:4d:87:53:
74:0d:18:af:ee:6b:ce:7c:41:b5:1d:60:a1:2e:93:11:79:cd:
15:e9:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:08 2026 by rpki-client