Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: /yL/wf+WzieUToYDMZ3sJNAEpkVTbN6GzzLMzJF21gk=
Subject key identifier: F2:D7:25:12:12:2A:CC:9B:CA:33:46:F3:4D:E1:93:1E:84:F4:F0:51
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 01A0BE430D0BB505EE5BADD1FFFBAF61C44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 04DF
Signing time: Sun 20 Sep 2026 10:01:00 +0000
Manifest this update: Sun 20 Sep 2026 10:01:00 +0000
Manifest next update: Mon 21 Sep 2026 10:01:00 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: jF6gGgwIjS2Ig2DwYa7xk/pJTJXWXdGz+3jeFc4LMt8=)
2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:43:0d:0b:b5:05:ee:5b:ad:d1:ff:fb:af:61:c4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Sep 20 10:01:00 2026 GMT
Not After : Sep 21 10:01:00 2026 GMT
Subject: CN=f2d72512122acc9bca3346f34de1931e84f4f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:d5:f8:81:74:02:1f:e2:03:5b:69:0c:f5:
76:eb:61:f3:06:c9:9f:e8:b1:6e:81:ec:4e:ed:d5:
11:82:66:ff:b6:c8:08:12:2b:af:bb:7b:66:33:f6:
c8:1d:cc:71:f2:52:33:60:a7:77:7d:0f:7e:4c:af:
42:2b:07:c2:a7:bd:13:9d:f3:15:67:72:15:14:c9:
6a:31:0e:c7:29:66:9a:7b:f7:e4:8e:94:0d:8b:39:
c2:b3:0b:f4:a6:24:56:1d:9f:26:aa:3b:e5:22:31:
e7:5a:44:1f:7b:b6:e2:59:00:97:9a:cf:0d:29:3e:
88:2e:6c:98:6d:26:b3:a8:b2:fe:f5:ae:60:da:e5:
6b:05:8a:da:f2:b4:a2:1d:57:80:23:7c:33:b8:3e:
89:5a:39:35:33:c2:a6:69:18:01:94:d6:94:21:a5:
d5:99:5b:ab:38:dd:fd:b8:cc:ca:a6:a9:ed:da:c3:
d2:ee:ea:ce:5f:1c:bd:f9:90:b3:3c:01:ff:a9:2a:
e1:48:bb:24:6d:59:7b:36:15:8b:c5:0f:c6:ae:e9:
44:ce:f8:bd:ac:9a:08:25:6d:fb:7f:ae:1b:71:29:
da:9e:39:9f:5e:58:7c:e9:f4:56:67:f0:df:96:84:
5d:de:7b:0b:7c:52:ac:77:57:ab:6b:11:af:e8:a3:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:25:12:12:2A:CC:9B:CA:33:46:F3:4D:E1:93:1E:84:F4:F0:51
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b6:59:cd:0e:5c:19:1d:8e:ff:b4:16:c8:8b:ac:7e:04:1d:
3b:e2:cf:fb:e7:a1:fc:ef:54:97:de:ce:7b:0b:d1:5a:93:7f:
d7:84:6e:ef:43:a1:3d:44:bc:a4:c8:31:92:df:f8:71:60:a0:
24:3a:47:0f:87:4d:23:13:eb:23:48:2f:fa:9b:df:79:da:00:
dd:58:fe:6a:1f:03:bc:8f:35:65:b2:69:5c:b9:e7:68:5e:cd:
f7:7b:b8:45:cd:b5:57:61:c9:5f:02:a7:15:76:65:6b:15:3e:
53:14:90:2b:5c:9d:4d:bd:bc:d4:e1:8b:f5:8f:69:1e:ca:6f:
33:df:b1:68:05:b9:87:e1:8f:72:98:49:3d:f6:35:e5:85:74:
3f:a4:c5:69:2f:ec:52:1a:a3:04:b7:f4:1d:c8:ce:74:a5:c2:
d9:93:90:d0:05:5c:eb:79:3c:ad:72:9f:c4:34:0f:3b:55:8d:
9f:1b:0d:8e:34:00:18:68:ba:4e:eb:cc:99:39:6d:56:39:41:
d4:49:d6:17:29:41:55:47:0b:f1:af:ba:48:c7:7d:66:99:0b:
17:8f:25:09:12:40:3b:77:80:fa:26:ea:41:cd:82:2a:88:94:
b0:c2:6b:c8:ce:8b:e0:90:87:8f:f8:12:c8:3d:a9:d4:fd:be:
40:40:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:11:19 2026 by rpki-client