Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: zYBqEqqAZzcEGie1OEzQQCBR97j2RQwQLGV39nzKLXM=
Subject key identifier: 3C:5D:16:38:20:A4:29:65:43:BD:43:1A:76:7B:D6:C5:1C:20:6F:96
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 01A0BFC2C52A727DA928848077FE63E18B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0A7D
Signing time: Sun 20 Sep 2026 17:00:07 +0000
Manifest this update: Sun 20 Sep 2026 17:00:07 +0000
Manifest next update: Mon 21 Sep 2026 17:00:07 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: 9/cquXcLcbI0JYKMIcCITTwmV9U5TYyIYY0XVickdG4=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c2:c5:2a:72:7d:a9:28:84:80:77:fe:63:e1:8b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Sep 20 17:00:07 2026 GMT
Not After : Sep 21 17:00:07 2026 GMT
Subject: CN=3c5d163820a4296543bd431a767bd6c51c206f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1f:de:6c:6c:c5:ed:35:e9:a4:89:9c:cd:db:
8b:f5:97:7c:3e:c4:5e:19:08:2e:be:f6:d7:2a:dc:
68:5e:67:bd:e0:bb:a0:10:c2:4d:ab:45:30:fd:be:
47:56:a7:e7:ca:8a:30:0a:28:66:41:59:1c:49:c9:
b5:3c:6b:5d:f2:e9:88:ae:eb:65:06:84:59:1c:0e:
c6:2c:1c:38:6d:a3:5a:f7:62:77:eb:0e:3e:7b:d3:
24:bd:03:2a:17:65:24:76:0f:8b:2f:db:a5:e8:67:
ae:62:71:2b:bb:ce:f0:c8:8a:80:a7:04:9f:9d:7d:
ec:53:8a:c0:56:0d:cf:07:86:db:2c:e9:60:bb:91:
37:75:b0:d8:a7:6d:ed:aa:0f:c2:2f:cf:fe:3a:ef:
59:b4:d4:e2:db:7e:41:ea:66:4d:74:eb:f6:e8:f6:
cc:3d:40:13:a7:ae:64:96:d2:cc:4b:da:0a:cb:62:
e1:a6:85:21:f6:87:c1:95:23:a9:ad:e6:03:0c:0c:
78:c7:cd:bf:c8:1a:2b:9a:cc:48:33:e3:23:6c:8d:
0c:b9:3b:d5:96:fc:db:28:9e:15:52:1a:d0:f7:17:
42:e3:71:6f:2e:c2:25:a1:75:00:d9:e7:a4:43:c6:
ae:30:b5:fb:8e:25:8c:40:ef:8d:48:7d:12:8a:2a:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:16:38:20:A4:29:65:43:BD:43:1A:76:7B:D6:C5:1C:20:6F:96
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ef:ae:1c:49:30:2a:f0:48:43:e2:c7:7b:86:18:72:bd:eb:
8a:ce:ad:c8:66:9c:a6:5d:d1:52:51:74:f1:c5:2e:4e:14:96:
e0:35:24:4c:ab:ee:04:90:ee:e4:14:92:f4:a3:fb:d5:9c:32:
29:1b:13:4b:0f:0a:9c:9a:71:1e:a5:ff:2a:93:22:2e:b3:82:
fb:f3:94:83:cb:1a:4d:f6:3f:ca:17:fb:e8:33:30:ff:9e:6c:
16:0f:66:48:eb:35:36:01:5c:8a:71:c0:d7:95:e3:b7:b7:02:
d4:c5:53:6c:d7:2c:96:ef:84:f1:78:07:b1:9f:54:68:25:75:
88:14:94:53:67:29:1f:b5:64:57:45:fc:2f:f2:01:81:ab:66:
39:4d:75:47:91:5e:f2:be:ca:ea:2e:9a:c1:e8:b6:1f:c4:66:
da:bb:c5:53:b5:6c:42:16:48:97:4e:d1:11:cb:d1:0c:1d:20:
2d:49:d6:68:df:fd:fc:f2:85:8b:68:cf:5f:09:da:5f:a6:41:
74:47:b0:0e:9b:ac:d8:61:b9:ed:be:57:bb:07:d3:0b:de:28:
5d:17:df:63:13:50:64:f0:34:00:ba:17:cc:48:e1:4a:f5:ff:
a5:a1:b2:0c:ff:7e:fc:3a:68:8c:54:43:9c:24:a7:62:05:41:
8d:06:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:39 2026 by rpki-client