Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: 4aEdL9ozAWnGpVkmbHkAVAn0RY4emw5aHvn3VGFI+eU=
Subject key identifier: 1D:EC:C1:F1:C3:2A:00:C0:B6:71:D3:77:B1:C1:B1:9C:CD:39:83:E8
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019FAB9A5FCAD5072D39E580E5DA0BB5999C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 09EE
Signing time: Wed 29 Jul 2026 02:00:48 +0000
Manifest this update: Wed 29 Jul 2026 02:00:48 +0000
Manifest next update: Thu 30 Jul 2026 02:00:48 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: tEvqnG5NFWoVINntqO9p/oN6etr+ZdwBQXZTcdMHnzY=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:5f:ca:d5:07:2d:39:e5:80:e5:da:0b:b5:99:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jul 29 02:00:48 2026 GMT
Not After : Jul 30 02:00:48 2026 GMT
Subject: CN=1decc1f1c32a00c0b671d377b1c1b19ccd3983e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:18:e1:99:d8:d9:f2:4b:aa:3c:7d:d5:f3:
e2:43:bf:68:a6:39:b3:8e:3b:4d:2f:91:f4:74:b4:
6f:b1:4d:82:79:03:c5:20:fa:20:d1:69:0b:f8:ae:
d1:b7:cc:a3:6d:79:5c:80:0c:d9:96:e5:2f:e3:63:
d3:b4:1e:4b:e7:8c:d9:98:b6:cc:35:a0:50:c7:d9:
98:7a:d0:ac:0d:8d:3d:c9:4d:2c:0c:e8:02:4d:06:
7a:b3:80:91:3a:82:20:be:d9:55:b1:30:d5:0d:b2:
91:d8:64:29:69:05:8a:cd:b0:cb:f4:d8:71:42:c5:
f3:df:5c:a1:c3:c9:50:cd:9d:28:44:34:49:60:9a:
a1:dd:42:1f:e1:59:1a:3e:8c:3a:46:3c:8a:4c:ac:
4d:62:0b:a3:2e:30:44:94:fe:ee:04:ed:37:0c:3d:
84:d0:0c:5d:50:3e:25:87:47:f5:71:8b:ce:3a:2f:
a0:fc:0e:d2:9b:a1:30:b6:ae:71:bd:88:32:a4:b4:
58:ce:97:a3:d3:40:bc:88:77:ae:26:33:06:f8:a9:
fd:b4:21:3a:3a:d0:66:95:45:e2:9d:5e:47:47:01:
91:b5:90:d3:8b:e8:6d:5f:e1:e4:3d:39:ab:ff:95:
3c:b8:da:13:1d:b9:39:72:86:52:06:71:7c:35:cd:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:C1:F1:C3:2A:00:C0:B6:71:D3:77:B1:C1:B1:9C:CD:39:83:E8
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fa:68:48:6f:d3:6d:8a:f1:62:39:97:f2:d8:62:30:79:0d:
d9:94:96:1e:5d:af:d3:55:c0:f0:ec:03:a2:83:b9:ea:c8:29:
8a:11:19:f5:f9:d0:8d:2a:c9:70:6e:b9:e4:59:9d:c1:4f:78:
f5:a7:6a:b7:4c:b0:2d:ff:83:01:1d:71:51:b4:9d:33:eb:b7:
2d:3f:40:2f:35:6a:66:b7:45:49:71:6a:63:4e:05:d4:e0:8c:
d1:ba:01:6a:4f:26:54:5a:9f:f6:c3:71:67:23:3d:0b:f1:40:
6f:db:b0:cb:50:52:2d:77:da:2b:c9:31:b3:83:01:df:4b:96:
db:6d:90:0a:cd:08:c3:8d:1e:26:9c:63:9a:78:26:db:4d:7b:
87:0a:e8:c7:7a:c0:0f:84:bd:f6:42:a8:2c:ec:87:bc:3f:37:
cd:2b:2d:de:e8:28:6e:bf:98:2f:e5:bd:f6:a8:79:c6:c7:7f:
a8:5e:61:ea:f6:a4:b2:8b:16:01:90:7a:37:0c:05:cf:cd:c4:
1c:11:d4:0a:e0:e1:e9:e7:24:40:ab:87:2c:5f:d0:30:93:15:
35:ea:2c:be:21:ab:b5:7f:e3:ca:c3:2b:29:5d:ba:0f:73:a2:
aa:2d:c4:d2:78:f5:2a:7e:11:d6:b6:89:5f:c2:b6:5b:9e:81:
9f:b4:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:49 2026 by rpki-client