Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: W574sXpLjd4Go3c4Gg22jhTKlpQqqrb6RjNL8GoMC9o=
Subject key identifier: 2C:CC:5A:78:8E:0B:68:89:30:CA:9D:77:41:28:A7:B3:51:84:3D:3B
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019EBFFFAD48E8038C2691B03B480A64752C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0974
Signing time: Sat 13 Jun 2026 08:01:04 +0000
Manifest this update: Sat 13 Jun 2026 08:01:04 +0000
Manifest next update: Sun 14 Jun 2026 08:01:04 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: KJUOpW3LnuGg/+sGZoznVeB/cyYr7r7jF04FiV2ZVNU=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:ad:48:e8:03:8c:26:91:b0:3b:48:0a:64:75:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jun 13 08:01:04 2026 GMT
Not After : Jun 14 08:01:04 2026 GMT
Subject: CN=2ccc5a788e0b688930ca9d774128a7b351843d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0a:52:53:28:a7:7e:31:a3:cc:22:75:1b:4f:
a4:a5:65:ec:da:16:6e:86:71:d1:a3:89:eb:ac:64:
01:20:5d:29:44:d0:37:6b:b7:30:f9:1d:7a:4e:14:
1c:dc:b5:19:ce:42:13:25:d8:bd:ac:70:28:31:38:
dc:23:3a:ce:75:94:86:ea:0f:00:2c:1b:dc:c0:bc:
8d:42:7b:34:0d:b8:35:58:ac:4c:09:78:f3:12:cf:
63:24:ff:d5:3b:6c:2f:51:65:96:ce:6b:c6:f0:15:
70:92:f7:70:69:6e:3c:b5:ba:13:d7:e1:cc:fd:58:
f0:c1:44:01:2c:8d:b1:97:8e:a2:e8:c5:00:bb:c0:
68:af:d6:f8:28:0e:1a:63:6c:13:b8:6e:0d:61:87:
07:1e:af:9a:a4:9a:5a:4e:fa:66:b7:a1:6d:96:c2:
2e:57:d5:41:ff:ed:d0:6c:fe:d2:e8:e6:f2:37:b2:
8e:96:3a:36:0b:ee:40:b3:97:bb:60:91:72:02:16:
91:ba:ea:bc:f6:55:55:60:6e:32:5d:d1:f6:3f:f8:
ec:53:a8:02:24:a7:6b:c3:a0:78:5c:ce:42:ab:8f:
58:fd:60:55:15:75:47:8c:d4:af:17:64:cb:0f:68:
f4:78:8c:0a:6b:c8:a7:87:b3:b7:79:d7:7d:35:7e:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:5A:78:8E:0B:68:89:30:CA:9D:77:41:28:A7:B3:51:84:3D:3B
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e9:82:87:bb:83:da:9b:57:92:4d:d6:e0:12:ed:72:f6:06:
da:69:61:fc:f5:ac:d4:cf:cd:69:46:83:fa:c6:a8:aa:e9:cf:
77:68:60:af:da:18:55:4b:93:d1:20:9f:98:e2:6f:2a:f5:43:
15:c3:58:32:16:f6:87:ff:12:27:54:3c:c5:90:70:67:45:17:
96:5f:e4:7a:7b:ef:a4:a6:1b:39:f3:07:17:4c:71:d2:97:5f:
82:7b:44:21:1e:0b:30:43:3c:fc:e4:39:e9:91:f2:23:38:74:
8e:e9:6d:fb:b5:e1:30:d2:9a:44:0e:37:2b:8a:55:a9:1e:9b:
59:4b:f0:9b:84:c5:18:3c:97:80:c8:a8:b7:4a:28:f2:dd:d7:
79:a1:55:99:46:a7:ce:77:a9:0d:24:2a:fd:df:d9:74:c7:ed:
ac:f6:a2:f6:fd:38:69:2d:67:e7:04:a7:b1:ac:62:de:8e:14:
3c:cd:06:8c:83:20:5c:0f:ea:cc:ae:17:fc:26:81:4c:9c:5c:
4b:65:88:76:77:d1:e5:4b:af:7d:c1:21:80:a5:8b:f7:0b:26:
b3:b3:fa:dd:64:a2:41:5b:61:53:47:b4:a6:f1:02:be:07:af:
7d:b7:8d:fc:2c:f0:4b:43:9e:d7:b3:ee:c8:a7:65:85:e2:ae:
a1:4e:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:22:36 2026 by rpki-client