Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: daK+cz1ZCQVzjPvJsbzpRlp4EopRf1KsFMoGdVaniog=
Subject key identifier: 82:F9:57:24:B0:D0:47:CE:1E:57:EF:22:9E:CC:BF:0D:1B:B4:0A:C4
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 01A12A68A40A06133C63F8C869F4E6360809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 0517
Signing time: Sun 11 Oct 2026 10:01:03 +0000
Manifest this update: Sun 11 Oct 2026 10:01:03 +0000
Manifest next update: Mon 12 Oct 2026 10:01:03 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: dxQL9qUjSufAjLtX6I0Kk8sxCoob7FpX93kE1dcRs0c=)
2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:a4:0a:06:13:3c:63:f8:c8:69:f4:e6:36:08:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Oct 11 10:01:03 2026 GMT
Not After : Oct 12 10:01:03 2026 GMT
Subject: CN=82f95724b0d047ce1e57ef229eccbf0d1bb40ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:4b:7c:04:39:54:a0:1f:da:42:64:d5:36:
50:23:04:87:d2:ce:02:e2:ff:5a:76:38:2b:6d:4e:
fe:63:64:85:e9:fb:ba:74:b0:0c:7a:c4:63:da:3e:
f3:85:aa:d4:1f:61:19:22:a1:e6:d8:b5:3e:ab:70:
77:22:65:31:75:ed:c3:8b:93:29:da:fe:e2:a0:34:
77:7e:fd:33:83:69:7f:7a:62:6c:81:17:59:8b:94:
28:2e:f0:d5:a4:ec:77:1e:b5:65:e3:2f:a3:21:a4:
5d:94:fd:69:03:79:3e:cc:10:39:7b:68:80:fc:2e:
20:97:04:1a:2a:0d:3a:51:44:14:c0:d6:dc:34:5f:
bc:a5:0e:56:9e:90:fd:51:f7:b5:e3:48:8c:35:8b:
50:3e:68:5e:71:7a:17:c7:b2:16:d2:52:91:d3:cc:
a5:c6:c8:55:12:bc:e5:77:cb:d1:93:30:09:11:0a:
c5:22:da:9e:a0:1d:97:b4:6a:d4:0d:f9:0a:f8:86:
d2:d2:41:a3:53:f1:f7:e1:29:81:97:4d:d4:6a:6c:
c9:c1:e9:fa:6b:32:0a:9c:25:61:45:b4:ed:96:8f:
a9:c5:f7:ed:24:78:7a:f2:db:11:d3:9d:31:a2:f9:
e6:4a:ee:16:69:b3:4e:a0:29:7b:41:dc:2d:b2:81:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:57:24:B0:D0:47:CE:1E:57:EF:22:9E:CC:BF:0D:1B:B4:0A:C4
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7f:cd:ea:69:c2:44:5e:b9:b5:82:e8:7a:b8:94:e7:3e:29:
f0:27:fe:e7:30:dc:35:c8:52:3b:84:ad:7a:b0:16:22:ff:cb:
c5:37:82:31:c9:7a:98:70:2f:c1:80:27:7a:82:7a:9d:ac:64:
9a:b6:3b:52:1b:fb:78:45:97:7a:75:24:34:74:44:0b:82:2b:
7c:97:41:7f:ef:d4:a9:16:5a:e4:75:6e:73:44:d4:21:e5:24:
2b:51:c9:99:14:2a:a2:a9:77:a9:7a:6d:88:01:b6:b8:da:d3:
98:62:34:5c:ed:77:a0:a8:84:3f:30:39:d2:ba:ba:82:67:0c:
ea:0b:ec:a1:52:e0:c7:06:96:7a:09:08:7e:f6:cc:6f:2d:14:
b1:69:6c:e2:6d:56:bc:02:09:14:23:f9:82:32:9a:71:2b:77:
95:06:9f:e4:69:48:69:ab:c3:ef:9d:6f:ac:81:a5:cb:7d:13:
3d:6a:f7:4e:e6:c9:51:18:bd:d2:ca:66:c8:d4:08:fb:fb:39:
94:33:28:63:b2:ec:01:52:b4:59:b6:e0:43:1a:a3:1c:8d:a5:
36:ab:53:b2:f1:e2:1f:69:ed:8f:c7:13:88:bf:f6:e6:ac:4c:
f9:5f:c2:6c:c1:b0:2d:86:df:5c:ff:4e:f7:44:25:62:a1:6a:
86:1e:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:37:11 2026 by rpki-client