Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: Gh99lbq5Z0Mdce/bHr1W+K30SY2itkwnTUNU1rnYbT4=
Subject key identifier: 8E:E6:FD:F6:6D:A3:16:BB:1E:C0:2E:C7:AF:25:C7:BB:5D:43:F5:E7
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 019DDC8C8655607751E917B984D64F28D637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0FCE
Signing time: Thu 30 Apr 2026 04:01:30 +0000
Manifest this update: Thu 30 Apr 2026 04:01:30 +0000
Manifest next update: Fri 01 May 2026 04:01:30 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: ZgBpXB/tYCLvJXz6JevALl4NACoLoyG+H4yaRF/cvU0=)
2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8c:86:55:60:77:51:e9:17:b9:84:d6:4f:28:d6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Apr 30 04:01:30 2026 GMT
Not After : May 1 04:01:30 2026 GMT
Subject: CN=8ee6fdf66da316bb1ec02ec7af25c7bb5d43f5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:7b:63:2c:04:be:40:a6:a4:2d:ce:f1:72:
37:b6:28:0e:af:8f:34:5a:10:4b:f4:c1:fd:1f:6f:
5e:cc:39:fd:89:da:e7:4f:88:5a:c8:10:b0:00:22:
78:88:db:4a:81:3e:6f:89:18:de:90:8b:83:dc:bf:
30:36:26:83:a5:fd:ac:e9:f5:81:e4:66:3b:c6:66:
ff:27:3c:ed:b2:5d:ac:22:f1:5b:95:29:56:25:9a:
c5:71:16:b0:a1:58:3e:52:f6:13:f0:79:e8:6a:80:
ec:ed:fc:07:3e:6e:55:13:7e:83:e4:17:df:e3:cd:
a4:32:8e:59:98:a5:68:65:74:bb:1b:ff:24:e7:0a:
df:96:3d:f9:72:95:04:1b:14:fc:12:2c:a1:a4:2f:
13:e3:09:b1:58:7d:a3:e0:e9:53:67:31:06:52:fa:
fc:de:cf:8f:9b:eb:56:82:5f:a1:dc:0d:ec:61:a4:
ec:de:48:68:0a:c9:06:70:d3:ad:30:8d:03:0a:5f:
fa:b0:c7:30:2b:4c:b0:bb:ae:61:48:cf:b8:2b:ea:
4a:44:73:7e:b3:f7:a3:d0:de:b0:cf:85:eb:fe:6c:
cc:2e:a0:95:24:fc:02:99:18:b0:d2:b8:e0:5c:49:
31:42:d3:c5:58:4c:36:40:a6:4c:78:6f:bb:42:d8:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:FD:F6:6D:A3:16:BB:1E:C0:2E:C7:AF:25:C7:BB:5D:43:F5:E7
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:65:85:17:30:b4:40:f1:04:a7:dd:80:57:1c:01:8e:0d:00:
14:ca:c2:27:f0:a5:a7:4a:50:3c:91:8c:a4:6c:c7:f7:61:c9:
03:66:c2:bc:cc:7f:a2:d5:4e:36:4e:95:93:ac:01:41:45:78:
13:4f:c5:b5:9a:9c:b9:57:4d:9a:65:cb:fb:8d:f3:2b:6d:7b:
a3:03:7c:5a:e0:db:a5:3e:27:fe:69:86:07:4c:34:5f:43:ac:
b8:c7:aa:7b:f7:d5:bb:6b:fc:97:f5:76:62:f6:23:d3:79:da:
ea:58:0a:f0:b8:32:bc:b4:63:df:5f:e4:8c:6d:04:08:c4:5e:
a2:b7:83:e6:ca:27:bc:c0:9d:9d:7f:eb:c2:0f:36:c8:29:43:
6d:a2:cf:7a:dd:e1:2a:35:ba:5e:a9:63:6f:80:83:87:05:f4:
aa:cc:a9:00:38:c2:b1:79:dd:a0:d4:82:74:2a:fd:43:3d:80:
1b:d1:05:ac:91:1d:37:1f:a6:c6:0c:da:d4:7f:71:c2:37:f6:
ed:1e:10:f8:58:2a:53:e8:5c:d0:50:91:54:de:8a:d5:ee:72:
3e:c0:7b:8d:07:6b:5c:48:3c:51:88:87:ff:63:85:0e:47:39:
e7:f5:89:e9:4e:19:53:e4:d2:be:5b:88:cf:0a:92:b3:07:ce:
af:83:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:21 2026 by rpki-client