Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: kD6HmRvU2t4BxkbFCEfPdIaewG8jXvhp7B2afP8e94w=
Subject key identifier: 8E:17:7F:13:2C:FE:68:FF:15:DB:13:B2:7C:FC:28:AC:93:62:F9:C8
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019CAAFD80C45FC85C2F7F120CE5589EFCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0860
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: uvsuT8D0WTYBpF7JDNlLIruFnjTwJbkUhER9t/eTuAU=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:80:c4:5f:c8:5c:2f:7f:12:0c:e5:58:9e:fc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=8e177f132cfe68ff15db13b27cfc28ac9362f9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:c7:14:5b:e1:d8:97:92:cf:c2:74:45:44:
6b:4c:99:df:8a:f0:7d:dc:1c:bc:f4:6f:d2:4b:4b:
66:b5:0b:61:cd:d4:55:fc:51:2d:00:76:8d:1b:ea:
12:2a:ca:4f:3c:c2:10:52:1f:22:f4:83:86:e9:eb:
af:25:be:55:0f:0e:a3:99:30:cd:b6:d3:2f:f8:6c:
09:ff:ca:39:20:d2:91:bb:cc:f1:1e:63:49:33:7d:
93:54:87:be:8e:c7:fb:a3:ef:8f:73:f6:a3:d1:74:
4f:d4:87:58:c2:cb:7f:5b:30:34:93:a1:95:11:33:
75:90:aa:3f:6c:d8:9e:8a:c2:88:13:73:d1:14:73:
64:73:0b:7b:18:10:aa:54:c0:86:f7:58:10:30:02:
7d:ba:a3:99:af:14:50:e6:ac:4d:89:6d:e4:ed:21:
ae:ce:55:de:a6:eb:31:1f:e3:f9:04:1e:fc:26:a2:
ff:2e:97:5c:22:25:d1:6c:8f:44:33:bf:c4:46:1c:
c3:94:e8:f5:aa:51:07:aa:cb:e8:d8:68:f7:b0:a0:
08:43:23:b2:93:d2:13:58:d0:d2:0c:f8:79:98:03:
db:d8:7b:d1:e0:5e:ff:dd:16:85:c9:95:b5:f1:59:
52:26:77:4b:80:c2:c9:27:2d:b5:a9:53:8a:7c:c7:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:7F:13:2C:FE:68:FF:15:DB:13:B2:7C:FC:28:AC:93:62:F9:C8
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3a:f5:88:83:e8:52:a5:c7:fa:da:74:8c:c4:f0:f3:c5:25:
b3:74:fa:bf:49:44:50:99:05:37:46:b9:a1:e9:80:56:f5:d7:
f6:d2:77:fe:88:18:70:e0:5d:3a:cc:c6:b6:73:fb:d7:ae:97:
b3:25:92:41:33:90:1b:c5:e7:33:bc:da:a8:81:7d:02:5c:ec:
b8:89:0c:35:ae:53:52:68:e8:d2:16:54:71:37:22:26:09:80:
17:96:b4:a7:8b:97:1b:4c:e5:7e:57:04:5c:b4:5e:28:d7:54:
0e:33:cd:f3:a7:00:06:36:86:ca:c5:2f:a4:1e:86:a8:31:66:
d4:87:c0:aa:b2:bb:a5:ae:9d:11:3f:02:d7:b3:12:d1:48:4f:
e4:2c:2a:09:c3:55:c7:01:70:ba:fa:aa:48:96:ae:c7:d8:55:
53:b9:14:ee:27:c5:2c:f2:6b:d8:cc:4b:4a:24:f6:79:ca:f8:
12:b9:e4:05:92:d4:01:fb:8f:46:16:3d:56:d2:f8:09:b0:24:
30:a1:bc:5a:15:eb:eb:2e:e6:95:a6:3d:0c:dd:f1:fc:8d:5a:
21:c2:c0:9c:0e:28:68:e2:38:fd:1d:f0:dc:1a:05:f4:d3:79:
d2:db:a2:53:22:5e:14:a1:ad:ae:fe:91:b8:0c:bd:bd:c3:03:
42:a2:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:44 2026 by rpki-client