Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: K2VJe2gcZR1nXEwRtt5xNhGrhUqbJ7mW8JrbOks2hKQ=
Subject key identifier: DF:90:E1:60:B6:AD:6E:8D:CE:48:6C:EA:06:E3:E1:84:D1:0C:5F:42
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 01A06CB8EA171D20AC2BD5FFC0FD2CA06C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0A52
Signing time: Fri 04 Sep 2026 14:00:52 +0000
Manifest this update: Fri 04 Sep 2026 14:00:52 +0000
Manifest next update: Sat 05 Sep 2026 14:00:52 +0000
Files and hashes: 1: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (hash: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw=)
2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: iwxR17jameNBe0MboD8NYgDqZluiHqekLpxZq1MjLdU=)
3: zbnb8pvWCIB2NZlr2UlPdBQ3cbg.roa (hash: gyv7S18WNiVOA1fHrpU8fK2oUyx2a5ceddxcu/tJwdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b8:ea:17:1d:20:ac:2b:d5:ff:c0:fd:2c:a0:6c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Sep 4 14:00:52 2026 GMT
Not After : Sep 5 14:00:52 2026 GMT
Subject: CN=df90e160b6ad6e8dce486cea06e3e184d10c5f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:34:a4:82:4a:91:88:0d:4d:21:27:4d:fe:
ad:98:3c:02:06:5c:e7:16:21:51:c9:65:cf:5d:27:
c2:74:6a:e7:9c:a3:63:8d:48:bd:03:ea:db:12:7a:
d8:32:da:7f:1b:da:e8:b3:6b:34:bb:30:57:63:d4:
d7:6a:5a:17:e8:72:54:bf:57:91:6c:69:b9:9f:1c:
1a:8b:ee:bb:e4:5b:f3:4f:b0:62:02:46:58:e9:73:
5c:57:4f:97:db:a1:21:81:d1:78:ff:b3:40:b5:74:
37:86:61:8a:21:58:6e:69:3a:df:71:82:1b:2c:3c:
ce:9f:60:df:12:0e:ee:5a:b4:0f:c6:e4:61:8d:fa:
91:c8:51:c6:44:24:1c:ce:e4:74:8c:4b:c4:55:44:
ba:fc:4a:5e:7a:d4:80:d6:b4:18:eb:94:2e:14:7d:
e7:47:d0:5b:0a:cb:bc:da:7c:5a:01:53:b4:81:4d:
e8:ad:1b:c1:96:e0:34:dc:11:b8:01:97:b2:fa:20:
2c:73:04:bb:b6:ef:4f:d8:8e:91:dc:29:92:25:17:
13:ea:94:c3:c0:1c:d5:ee:e4:c5:06:89:32:12:48:
be:88:cb:93:de:c8:85:12:20:11:0d:e8:0b:e7:fe:
7d:72:f4:8c:e9:f1:2f:8d:15:13:fe:e6:94:4b:a2:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:90:E1:60:B6:AD:6E:8D:CE:48:6C:EA:06:E3:E1:84:D1:0C:5F:42
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:16:d3:f0:26:58:76:c2:09:58:89:8f:83:ce:89:04:7f:d2:
07:41:50:a0:f4:07:79:fb:6f:3c:e7:e1:4d:8b:93:a5:22:60:
40:4d:c0:17:db:69:10:8a:98:56:9c:ee:3e:38:56:27:aa:48:
41:12:03:11:09:40:d1:06:e0:12:43:6a:a0:19:5c:98:4f:17:
69:2f:94:d5:0d:a9:36:a7:88:9e:11:bf:b7:62:3b:07:e9:a3:
e7:21:b0:6a:7c:ec:16:8c:ea:12:39:dc:51:57:1e:67:e0:5d:
7c:20:d7:d9:e3:84:8b:b8:36:eb:90:1e:9b:11:3b:c8:d9:85:
11:ef:47:ed:87:f3:8b:84:e5:91:8c:35:a1:65:4e:76:a8:cb:
56:93:4d:4b:9f:91:e2:70:76:ab:29:41:aa:7f:fc:66:c3:18:
ee:d1:7a:37:bc:92:60:b1:9f:d4:51:37:80:1e:3d:35:ae:c2:
70:29:03:57:d5:61:2a:59:64:db:a0:d5:ef:ab:df:8e:9e:50:
d6:08:3a:85:ed:e9:a8:e7:28:47:19:ba:32:1e:d0:af:07:8e:
e9:62:76:0e:af:63:9f:5b:ba:21:1b:8b:29:f8:6f:82:eb:7c:
51:4f:80:db:42:bf:6f:be:e0:cd:f1:c0:4c:10:0f:8f:5e:ab:
23:52:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:05 2026 by rpki-client