Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: gnXnwKg3Q/HazLFrwGiRhW+MOFRtdxETO9R+b6sa4ks=
Subject key identifier: 5B:1E:57:8C:1D:B3:5B:F2:7C:E2:68:BF:0C:CC:62:3B:E1:C5:6F:29
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 019E2023893BBA654D2813796670F3616889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 0384
Signing time: Wed 13 May 2026 07:01:00 +0000
Manifest this update: Wed 13 May 2026 07:01:00 +0000
Manifest next update: Thu 14 May 2026 07:01:00 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: iyejBtng9SsRj+zHwd6uTT1c9aKZSauc6BXJTlV68og=)
2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:89:3b:ba:65:4d:28:13:79:66:70:f3:61:68:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: May 13 07:01:00 2026 GMT
Not After : May 14 07:01:00 2026 GMT
Subject: CN=5b1e578c1db35bf27ce268bf0ccc623be1c56f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:48:49:6e:ef:78:91:f0:a4:3e:85:d5:0d:
a3:d2:80:42:1c:7e:d8:2c:cd:c6:f6:f2:2f:87:b7:
b4:c2:82:30:b4:17:37:e1:7a:e8:fb:ab:89:aa:f6:
59:d1:cf:4a:5b:54:17:41:2b:f7:ca:9e:46:75:14:
cf:ef:21:e8:17:aa:82:7d:b4:d9:56:bc:23:27:b5:
51:bb:87:62:98:f5:bc:f2:da:a6:9e:71:ba:89:ee:
12:a3:9c:21:0a:f2:85:b9:b3:22:29:31:ad:e2:e8:
37:4d:f3:c0:b2:cb:af:15:17:7d:50:d6:f2:ff:15:
b3:29:a0:b3:88:6c:8e:a2:26:33:3a:b4:fc:f4:cf:
00:83:e0:42:a7:9c:ab:88:72:72:30:9a:93:05:f5:
36:f0:29:99:d1:51:e5:30:97:5b:5b:d4:00:28:dd:
58:f6:5d:7e:94:59:f7:90:39:ca:48:98:08:70:f2:
27:b4:37:1d:ee:d9:fd:91:84:6e:08:46:ca:0b:2d:
07:7d:32:9c:22:0a:be:6a:7d:93:a6:e5:dc:dd:8a:
11:78:55:a1:f8:e6:c1:4f:d5:21:69:b8:90:5e:7f:
4f:aa:a0:0d:88:2b:86:36:3a:08:d6:6e:96:da:86:
35:b8:c7:c0:6d:b4:c7:0f:2c:64:7f:71:27:a3:bd:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:57:8C:1D:B3:5B:F2:7C:E2:68:BF:0C:CC:62:3B:E1:C5:6F:29
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:20:41:00:52:4c:41:cd:74:b4:0c:0f:52:18:d1:33:50:7d:
42:9e:12:d1:3d:bf:b7:2e:f8:2c:4a:79:2e:98:ab:e5:e4:de:
4e:13:6b:1c:0f:21:ae:76:38:36:45:57:81:af:08:85:fd:18:
8a:0c:ca:96:0d:54:5e:e9:64:45:ae:06:45:c2:2c:86:56:11:
94:95:31:07:08:36:42:02:9f:27:6d:2b:4f:04:35:ae:66:e7:
09:27:1a:8d:ef:4d:63:ff:23:d1:b0:a3:0e:ee:a6:60:ac:52:
5a:75:ff:84:df:82:43:2b:16:fd:92:2e:72:e7:39:3f:24:58:
46:33:4a:1a:1d:87:7d:81:3e:58:b5:9e:4e:1f:e9:ad:e2:94:
99:c9:5d:d8:75:6f:e9:73:1c:7a:77:47:6b:fa:93:25:8c:f4:
8a:08:55:be:3e:69:b7:69:6e:38:d7:0e:13:bc:87:08:f5:56:
a0:4e:02:1e:49:72:ee:8c:44:e5:be:d7:eb:dd:0f:46:a3:ea:
53:3e:a3:e8:e5:52:21:92:e8:c9:b2:d2:9c:41:06:e7:94:eb:
b5:9b:64:56:cc:9c:d3:44:6c:cc:17:8a:bd:12:61:c7:cc:66:
7e:c0:2a:1c:18:fa:d8:dc:c4:54:1a:61:90:bc:8f:03:14:d1:
a0:8f:c1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:20 2026 by rpki-client