Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: 0yYae+9YrgLKEdDq6PNNLrjspnXzl8RPW2YSS64kG+Q=
Subject key identifier: 69:8F:8D:B1:39:6A:49:20:96:C2:3C:EE:DD:0F:D0:11:91:ED:8A:92
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019D9886C6DCA0D68E942F12A427D41984BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 08DB
Signing time: Thu 16 Apr 2026 23:01:02 +0000
Manifest this update: Thu 16 Apr 2026 23:01:02 +0000
Manifest next update: Fri 17 Apr 2026 23:01:02 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: 83ndPtpA2So5cLQnfbRtU+HPovOVg0oFOxvgbXtiRfI=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c6:dc:a0:d6:8e:94:2f:12:a4:27:d4:19:84:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Apr 16 23:01:02 2026 GMT
Not After : Apr 17 23:01:02 2026 GMT
Subject: CN=698f8db1396a492096c23ceedd0fd01191ed8a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:9c:76:32:26:ce:a8:5c:e9:d1:65:04:90:
d0:7a:52:ca:8f:c9:ea:00:bb:e9:df:4f:30:b3:e3:
96:91:b2:df:af:bc:ab:cc:0f:1a:0a:98:a0:10:db:
4c:46:fd:f1:de:5a:f7:ab:76:a1:ef:0e:21:6a:13:
db:05:91:ca:68:a3:db:3e:a7:c6:9d:1d:48:c4:9e:
dc:ca:13:57:92:b5:bd:ec:67:db:ad:d3:83:5f:33:
19:ed:19:cf:45:24:44:4a:89:b9:b6:56:eb:b8:18:
c3:10:e1:99:f3:11:ee:ea:9e:ec:f9:15:cd:05:42:
85:89:b1:9c:df:14:6a:5e:47:fb:6c:8a:aa:3f:62:
6c:36:a6:5b:4a:e3:62:62:1b:06:ef:5e:64:39:79:
5f:60:50:12:de:7f:c1:d3:ee:0e:63:48:05:c5:27:
97:6a:f5:97:11:db:3a:4a:30:9b:eb:cf:e5:f1:d1:
9b:00:0a:25:1f:8d:03:c5:8c:73:97:6e:67:6e:24:
02:0a:de:ff:85:2e:3c:2f:b5:0f:3f:5c:23:d5:af:
18:f4:ac:41:a1:2e:6c:c4:b9:43:06:60:c8:d2:10:
a4:bb:c9:91:16:fe:00:0e:f4:cd:81:b3:45:ba:3b:
ce:e1:5e:b1:5e:c2:1e:53:87:e1:51:16:26:02:82:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8F:8D:B1:39:6A:49:20:96:C2:3C:EE:DD:0F:D0:11:91:ED:8A:92
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:53:79:01:9c:f7:bd:a2:bb:ae:38:56:fc:cf:8a:79:7d:39:
da:3e:83:c3:e0:65:7d:1c:ba:2f:ff:af:18:24:ef:56:8a:2e:
0e:ea:81:e2:b1:be:be:f0:3f:9c:1e:19:61:10:37:b9:52:ce:
35:a2:81:b5:3e:1b:b9:e4:3b:43:76:9d:8f:c5:61:a7:b5:3d:
8b:ba:7b:6c:47:69:e8:7c:95:b9:7a:42:00:36:5f:01:5e:56:
bf:0f:a8:df:84:e4:fa:10:9e:17:6b:bb:4d:e8:3e:7d:9d:0a:
ea:c6:4a:16:c4:78:74:27:84:9e:87:9a:54:8b:4b:3f:41:d2:
ed:37:ac:bc:74:bf:7c:49:37:28:e2:18:c1:0d:e9:7a:bd:c6:
58:4c:af:89:bd:13:5a:71:db:2f:fc:7e:bd:de:8b:17:a4:b9:
ba:d5:ec:24:7b:b4:c5:3e:d1:46:a1:fb:1c:da:d9:cc:7a:43:
1f:da:26:bb:da:c5:25:79:79:04:1b:83:1b:f0:2d:6a:2c:aa:
6e:e8:6e:44:26:14:1b:5b:c0:f2:7c:22:2e:cd:65:4b:f3:8a:
53:24:46:82:41:f7:64:33:8a:1e:20:79:2a:c0:41:5d:95:23:
dc:ef:40:7c:a2:b2:c1:c9:ee:f0:d3:e6:74:79:76:6f:1f:b6:
9c:16:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:52 2026 by rpki-client