Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: d+pXKpA1iq41CV3D8ZKXvCZvSqq13FbIclj3+Xg3Erc=
Subject key identifier: 68:10:5C:D2:FB:77:B3:7B:A6:37:ED:42:BF:85:66:1B:A2:42:0F:03
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019E8DC93985B9F4BAF24DDFC2A51BB5CE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 095A
Signing time: Wed 03 Jun 2026 14:00:35 +0000
Manifest this update: Wed 03 Jun 2026 14:00:35 +0000
Manifest next update: Thu 04 Jun 2026 14:00:35 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: JtcxZLr0rbXAC5cELzUmRSxiUypi5UbC5lF8Xis09B0=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:c9:39:85:b9:f4:ba:f2:4d:df:c2:a5:1b:b5:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jun 3 14:00:35 2026 GMT
Not After : Jun 4 14:00:35 2026 GMT
Subject: CN=68105cd2fb77b37ba637ed42bf85661ba2420f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:9b:79:fe:9a:5a:3f:e6:21:b0:d9:80:96:
a7:d9:f8:21:a4:89:ba:33:53:a1:be:58:82:31:8f:
f7:0d:3a:06:f9:bd:8d:ba:28:9f:82:67:ed:3f:51:
dd:5f:5b:db:1f:4c:61:36:a2:48:44:6c:e8:4b:a5:
4e:6b:92:e1:2c:8d:e9:e0:15:34:88:98:b6:de:e1:
70:54:af:d0:9a:eb:c2:2e:21:c8:10:49:25:ba:3a:
2e:9a:19:2a:56:94:1a:e3:1c:3a:39:30:0b:31:4e:
0a:f4:72:1d:c7:c6:54:02:16:3a:58:19:90:30:cb:
ca:b0:62:69:97:34:d5:f2:9a:e6:08:19:ea:10:08:
8c:38:00:c3:77:9a:ad:04:62:48:12:6a:e0:b3:ab:
64:1c:da:57:77:4a:fb:2b:ce:5b:d4:77:ff:eb:b3:
a1:ab:4f:69:05:d2:42:ec:5e:89:15:5c:13:61:d1:
90:34:fa:ef:01:b4:27:f6:8e:f9:1b:f7:27:e8:dd:
89:54:8d:fb:23:47:40:8e:2e:17:30:51:80:d7:8b:
bf:6b:71:c3:b5:0d:73:05:7d:21:58:75:0d:d6:61:
d7:27:a0:a0:30:49:9b:49:b3:48:af:af:43:5a:f2:
02:84:f3:15:c8:88:d8:ed:15:fd:81:5f:df:fc:11:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:5C:D2:FB:77:B3:7B:A6:37:ED:42:BF:85:66:1B:A2:42:0F:03
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:1c:d4:08:62:14:9a:3d:29:d6:c9:c0:1f:44:dd:11:ca:
14:60:f9:ca:f8:9a:2a:c0:4d:87:50:d4:41:6e:2a:ac:52:fd:
a5:a6:94:94:f3:42:2c:16:81:f9:8f:bb:d3:2e:17:aa:cc:45:
1c:b7:ee:61:ef:d4:fc:bf:f6:94:59:aa:ce:ff:bd:f4:6a:e1:
47:3b:a8:f2:a9:3b:b6:76:2d:da:51:7f:a0:04:c1:09:c4:6d:
3f:d2:53:50:bd:fd:e3:8b:20:47:d0:1a:92:79:8c:45:13:0a:
73:83:20:fc:da:78:d3:b2:74:8c:06:39:d3:31:8d:de:a1:2e:
5e:51:93:7f:16:c3:11:77:46:41:05:b8:9e:45:c8:f1:18:5c:
b4:b1:ab:fc:1c:77:c4:0c:d7:aa:e6:b3:5a:e3:90:2e:14:43:
85:64:56:8a:d6:89:2d:8a:82:bf:81:22:ca:d1:c9:23:b3:b6:
4f:46:ea:1e:dc:6c:ee:4c:a0:96:55:3b:8a:8e:25:16:c4:f1:
29:fb:53:5f:47:a2:6b:62:5c:d4:dd:6e:ef:77:66:49:19:6f:
4c:6f:5d:d0:95:48:ce:38:a3:69:b4:0f:3a:c7:77:c3:9f:a0:
7a:eb:94:55:8f:34:75:de:0f:81:7c:ec:f5:f2:c8:34:90:eb:
d8:a2:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:56:30 2026 by rpki-client