Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: M+OluTmEa6TCyUegBYcNZ2yCGri2KvI3qB30PB1Xffc=
Subject key identifier: 7A:F3:97:E0:5A:0D:E8:B6:60:EA:3C:FE:94:00:45:ED:4E:31:89:A6
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 01A1815037DF984E277340B092B48456AAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 0544
Signing time: Wed 28 Oct 2026 07:01:20 +0000
Manifest this update: Wed 28 Oct 2026 07:01:20 +0000
Manifest next update: Thu 29 Oct 2026 07:01:20 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: k7Pb2/DWovYCZhLy8+DxKIByE7AVdM2Tt71WJ6pbcj0=)
2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:37:df:98:4e:27:73:40:b0:92:b4:84:56:aa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Oct 28 07:01:20 2026 GMT
Not After : Oct 29 07:01:20 2026 GMT
Subject: CN=7af397e05a0de8b660ea3cfe940045ed4e3189a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:d4:5a:90:78:30:e3:b7:57:6a:f3:b8:f4:
87:7c:3f:2d:d0:49:d3:00:06:8b:34:22:e5:1f:8e:
8e:e9:6b:df:44:af:ba:b2:c7:d0:30:1c:b1:b1:01:
a1:37:c2:29:8c:18:fc:e0:95:d2:9e:30:f6:a3:28:
66:6d:19:70:91:25:f5:b5:df:d2:7e:e9:31:59:d0:
ed:93:19:53:6c:bf:c9:06:10:f4:fe:e9:4a:95:ed:
39:7d:0f:92:e3:70:13:08:01:be:ba:fe:07:9a:ee:
db:7b:bc:a1:70:57:61:37:41:7c:39:fd:f7:73:7a:
8c:a0:21:c7:e6:80:84:65:e4:6b:51:0a:f5:a0:b7:
8a:65:e2:45:e0:c9:fa:c6:9d:e8:5d:51:8d:b7:63:
2b:2a:b2:0d:51:f0:7f:2e:b7:7a:59:04:af:a4:48:
4e:c2:22:d4:42:78:a4:bc:18:3d:0c:27:3c:da:59:
08:d4:31:5c:af:8a:c9:cc:71:4a:f0:43:a7:f2:e8:
fc:8f:4c:c1:2d:39:94:bb:80:7e:17:c6:1f:73:87:
ce:58:16:e1:59:7b:98:b3:7c:85:ce:6d:cc:79:5b:
21:46:3e:f8:86:55:18:dd:e8:84:4c:25:e2:02:83:
3a:2c:93:a5:e7:84:cf:45:37:8e:74:32:93:2a:e5:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F3:97:E0:5A:0D:E8:B6:60:EA:3C:FE:94:00:45:ED:4E:31:89:A6
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:8f:56:17:9d:c0:60:fa:03:e6:22:ba:d5:e0:14:d0:a6:
de:e4:c0:f2:6e:42:2f:d2:e3:4d:e5:c6:bb:f4:4b:20:f7:2a:
b5:e4:32:15:c0:56:73:4c:4b:c6:06:3b:ec:84:59:fb:47:30:
82:48:d7:0d:e2:c5:66:e3:e7:96:30:68:f5:c8:1e:b3:ce:71:
c6:a7:bd:2e:90:b2:6d:9b:10:4d:bd:98:8b:03:47:f1:52:c4:
c6:ad:70:50:1e:17:15:e0:f2:8b:97:ce:b5:f6:6b:59:c3:19:
75:d2:d0:d8:47:4d:67:99:f7:07:46:20:e0:66:93:6c:3b:f5:
9c:4a:b8:54:e1:c1:e5:8c:d9:c0:9c:31:5a:36:23:0d:ec:a0:
93:29:f3:b7:f8:a0:1d:6c:55:19:51:fd:bb:cc:15:a0:88:15:
54:97:7e:96:29:8f:bc:f7:e6:32:26:96:e6:6b:de:b2:c9:23:
d8:2e:7a:d8:10:9c:49:8a:7f:11:fe:0c:25:67:83:b4:6e:18:
81:2c:60:f0:fd:8c:67:7e:e5:d1:6a:85:ee:97:af:f6:0c:49:
6f:6b:06:01:2f:29:40:b7:6a:ab:7e:8f:d1:24:da:70:39:15:
d7:c5:24:90:99:84:08:a1:30:0d:30:58:d6:c0:30:cf:8b:cc:
62:c5:82:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBUDffmE4nc0CwkrSEVqrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNGQ3Yjc5MGYzZjQ5MzQzMjhlMTI5YTJkZGU0ZGQ3NGFh
M2UxM2UwHhcNMjYxMDI4MDcwMTIwWhcNMjYxMDI5MDcwMTIwWjAzMTEwLwYDVQQD
Eyg3YWYzOTdlMDVhMGRlOGI2NjBlYTNjZmU5NDAwNDVlZDRlMzE4OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYnUWpB4MOO3V2rzuPSHfD8t0EnT
AAaLNCLlH46O6WvfRK+6ssfQMByxsQGhN8IpjBj84JXSnjD2oyhmbRlwkSX1td/S
fukxWdDtkxlTbL/JBhD0/ulKle05fQ+S43ATCAG+uv4Hmu7be7yhcFdhN0F8Of33
c3qMoCHH5oCEZeRrUQr1oLeKZeJF4Mn6xp3oXVGNt2MrKrINUfB/Lrd6WQSvpEhO
wiLUQnikvBg9DCc82lkI1DFcr4rJzHFK8EOn8uj8j0zBLTmUu4B+F8Yfc4fOWBbh
WXuYs3yFzm3MeVshRj74hlUY3eiETCXiAoM6LJOl54TPRTeOdDKTKuXglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrzl+BaDei2YOo8/pQARe1OMYmmMB8GA1UdIwQY
MBaAFF9Ne3kPP0k0Mo4Smi3eTddKo+E+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YjYwMTYtMTQyNC00MTg4LWFlNjIt
N2Q1NDkyNzQ0NWY2LzEvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85YjYwMTYtMTQyNC00MTg4LWFlNjItN2Q1NDkyNzQ0NWY2
LzEvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh2PVhed
wGD6A+YiutXgFNCm3uTA8m5CL9LjTeXGu/RLIPcqteQyFcBWc0xLxgY77IRZ+0cw
gkjXDeLFZuPnljBo9cges85xxqe9LpCybZsQTb2YiwNH8VLExq1wUB4XFeDyi5fO
tfZrWcMZddLQ2EdNZ5n3B0Yg4GaTbDv1nEq4VOHB5YzZwJwxWjYjDeygkynzt/ig
HWxVGVH9u8wVoIgVVJd+limPvPfmMiaW5mvesskj2C562BCcSYp/Ef4MJWeDtG4Y
gSxg8P2MZ37l0WqF7pev9gxJb2sGAS8pQLdqq36P0STacDkV18UkkJmECKEwDTBY
1sAwz4vMYsWCgQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:34:14 2026 by rpki-client