Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: 3lcb/vH/x4jYwkndn+a4sAbehatA5sF/vnndvFP1y1Y=
Subject key identifier: 7B:69:6E:0E:6F:E6:B1:EE:87:16:FF:9A:8A:1A:3E:4E:9B:04:E8:4D
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019F830BF4A8D570F3127D740487542C0F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 09D9
Signing time: Tue 21 Jul 2026 05:00:26 +0000
Manifest this update: Tue 21 Jul 2026 05:00:26 +0000
Manifest next update: Wed 22 Jul 2026 05:00:26 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: tBJnGo4WrkkX1S/uiCRKKKgUL5jxGWMpLabMtHSfam8=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:0b:f4:a8:d5:70:f3:12:7d:74:04:87:54:2c:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jul 21 05:00:26 2026 GMT
Not After : Jul 22 05:00:26 2026 GMT
Subject: CN=7b696e0e6fe6b1ee8716ff9a8a1a3e4e9b04e84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:46:17:05:d7:bb:d2:f2:d7:69:9b:59:5a:
68:e7:72:85:d7:ca:f0:00:64:3b:3b:2d:8e:96:03:
a4:b1:d1:01:c4:8f:f7:b7:aa:84:1d:75:a0:01:af:
ce:4a:56:df:e7:74:f9:ef:66:77:bd:3d:77:9e:33:
31:4b:bd:1b:c9:36:18:d2:7a:ca:6c:e0:63:12:63:
49:67:d4:17:1f:c4:d3:75:15:9b:16:41:97:af:d3:
0e:5f:c2:03:33:f6:ba:df:f1:a1:4d:07:61:46:ac:
7e:b0:62:15:89:46:65:ac:5f:c2:58:af:cf:13:e0:
ce:35:a6:8d:71:3b:59:64:85:0f:31:5d:54:13:34:
3a:e1:0c:62:0f:cb:91:e7:70:84:bf:17:7b:80:6b:
e0:c6:c6:91:e7:95:9b:63:e7:ee:e6:81:59:b3:e0:
0d:a3:fe:59:d1:5b:1f:f6:41:62:f8:af:8e:5c:19:
ca:c7:3a:c7:19:16:ed:40:68:c9:a6:0f:c4:35:60:
65:50:bc:05:dc:e2:67:46:33:4f:3e:74:2c:26:7f:
33:41:c9:21:0c:1e:f4:63:52:a8:15:8f:a3:35:49:
a3:83:a4:d0:20:76:20:e5:df:e2:6e:e4:f4:86:0b:
df:ed:4a:fe:a5:b4:07:d0:e2:cc:37:86:6e:f1:81:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:69:6E:0E:6F:E6:B1:EE:87:16:FF:9A:8A:1A:3E:4E:9B:04:E8:4D
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:d9:2c:96:2e:0e:51:a0:cb:39:5d:07:e6:bf:e4:0a:76:
98:25:e8:be:26:4f:0d:91:67:0b:64:c5:88:59:2a:d6:b2:42:
60:50:c0:c5:c6:ef:c5:2e:2d:6c:7b:64:6e:70:6b:1f:46:c7:
c5:de:93:3d:f0:06:7d:c3:38:84:72:ba:8f:83:97:b9:df:d7:
92:9e:6c:f1:c9:9f:d5:34:20:b6:9b:ae:80:83:c5:83:75:fa:
3e:63:47:f3:9b:32:bc:a1:3d:f7:db:13:67:e5:a7:8f:25:a1:
f1:fa:a0:92:a2:97:40:44:55:f9:99:13:94:bd:24:04:f6:92:
b2:f3:5b:29:35:1f:8e:ad:b0:14:b2:bd:48:02:03:59:5e:46:
79:07:d4:83:44:9f:8a:69:e2:38:f7:51:db:52:5d:ef:06:7b:
38:b9:1e:b8:6b:19:40:7b:0e:1e:65:65:a8:a5:43:61:29:a3:
97:b5:96:28:47:47:d2:26:df:60:e4:08:55:37:36:54:13:c5:
de:57:73:17:bb:ef:14:49:ff:c8:d8:1a:96:e0:12:2a:ef:2e:
60:bc:ec:5f:d6:74:b9:be:27:07:f7:0f:6e:0b:4e:09:c7:57:
9c:b4:d0:5c:77:02:0e:5d:e1:38:0f:54:f6:64:da:6a:fa:6d:
65:0c:f7:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DC/So1XDzEn10BIdULA9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4
MTk5ZTYwHhcNMjYwNzIxMDUwMDI2WhcNMjYwNzIyMDUwMDI2WjAzMTEwLwYDVQQD
Eyg3YjY5NmUwZTZmZTZiMWVlODcxNmZmOWE4YTFhM2U0ZTliMDRlODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lFGFwXXu9Ly12mbWVpo53KF18rw
AGQ7Oy2OlgOksdEBxI/3t6qEHXWgAa/OSlbf53T572Z3vT13njMxS70byTYY0nrK
bOBjEmNJZ9QXH8TTdRWbFkGXr9MOX8IDM/a63/GhTQdhRqx+sGIViUZlrF/CWK/P
E+DONaaNcTtZZIUPMV1UEzQ64QxiD8uR53CEvxd7gGvgxsaR55WbY+fu5oFZs+AN
o/5Z0Vsf9kFi+K+OXBnKxzrHGRbtQGjJpg/ENWBlULwF3OJnRjNPPnQsJn8zQckh
DB70Y1KoFY+jNUmjg6TQIHYg5d/ibuT0hgvf7Ur+pbQH0OLMN4Zu8YH8dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtpbg5v5rHuhxb/mooaPk6bBOhNMB8GA1UdIwQY
MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt
ZGYyN2YxMGM3MDk3LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3
LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaTZLJYu
DlGgyzldB+a/5Ap2mCXoviZPDZFnC2TFiFkq1rJCYFDAxcbvxS4tbHtkbnBrH0bH
xd6TPfAGfcM4hHK6j4OXud/Xkp5s8cmf1TQgtpuugIPFg3X6PmNH85syvKE999sT
Z+WnjyWh8fqgkqKXQERV+ZkTlL0kBPaSsvNbKTUfjq2wFLK9SAIDWV5GeQfUg0Sf
imniOPdR21Jd7wZ7OLkeuGsZQHsOHmVlqKVDYSmjl7WWKEdH0ibfYOQIVTc2VBPF
3ldzF7vvFEn/yNgaluASKu8uYLzsX9Z0ub4nB/cPbgtOCcdXnLTQXHcCDl3hOA9U
9mTaavptZQz3Eg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:56:04 2026 by rpki-client