Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: YUUOOjBO+MWeFbzWmDa6XfFPnqApeDNlVQ3v15jv+EI=
Subject key identifier: 2C:35:D0:4E:DE:56:7A:3F:3F:CC:95:D7:F0:44:B7:00:AC:D5:42:FE
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 019FA2600D327E571795BC1D2EF5AFEED736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 044C
Signing time: Mon 27 Jul 2026 07:00:31 +0000
Manifest this update: Mon 27 Jul 2026 07:00:31 +0000
Manifest next update: Tue 28 Jul 2026 07:00:31 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: 0Z0H6Hg05HKz7na3vhEazjd6h+AjL+Tud5QlhYzi4kQ=)
2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:0d:32:7e:57:17:95:bc:1d:2e:f5:af:ee:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Jul 27 07:00:31 2026 GMT
Not After : Jul 28 07:00:31 2026 GMT
Subject: CN=2c35d04ede567a3f3fcc95d7f044b700acd542fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:d6:2c:bd:a0:21:b3:9d:9d:29:f9:a4:ad:
c0:61:04:5c:53:3f:16:0a:31:db:bb:1d:e8:2b:2e:
b3:6e:f6:b5:87:c7:ff:7a:5c:a2:a2:db:10:6d:54:
1f:0f:a4:5c:00:9e:e8:c3:5b:12:08:4d:d4:4c:10:
30:60:27:03:f3:76:54:0e:50:9c:f7:74:e3:bb:9f:
df:26:0d:20:e2:29:8d:d3:eb:3b:0a:f8:04:3d:89:
d2:67:12:8f:90:b5:83:0c:cb:9d:cc:a4:ad:46:ef:
c7:ce:4e:45:c3:c6:9b:8a:38:a5:7d:43:31:f5:23:
4a:13:14:60:dd:07:2b:26:92:db:6d:74:9d:d2:91:
9b:fe:f4:d3:dc:e6:2b:68:5d:53:9b:71:1e:71:36:
da:fe:6a:32:32:60:4f:31:9f:6b:22:bc:13:81:65:
16:e8:4c:14:0f:43:48:61:47:cb:29:e7:fc:ed:4a:
19:54:b0:66:c5:4f:8a:e6:af:da:8a:27:ce:db:f8:
bf:2d:44:b1:c1:cb:2a:f5:21:64:8d:1f:3d:5b:55:
79:a4:85:f3:60:da:66:9a:b8:50:c9:12:04:9b:15:
b2:f8:1e:3f:39:63:00:ae:11:e1:bf:e6:07:ee:86:
2f:af:de:09:b9:f0:a8:16:35:01:b8:1f:ca:c0:36:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:D0:4E:DE:56:7A:3F:3F:CC:95:D7:F0:44:B7:00:AC:D5:42:FE
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:6b:6e:dd:7f:2e:37:f3:d6:38:2b:58:ef:f2:de:2d:3e:
52:c3:e5:cc:e9:e6:10:96:19:31:d5:e4:59:5c:b9:c0:51:48:
83:14:c4:a0:b8:8e:2c:8c:7e:27:ec:95:e8:bc:b4:39:df:fc:
ef:eb:21:3d:dc:6d:87:7f:f5:f0:10:b5:7a:21:48:0f:3f:7a:
2a:51:c5:b1:a8:ac:ce:27:17:43:c2:13:48:f8:b2:d2:25:cc:
47:2c:f2:35:04:45:48:7d:64:17:d2:2b:73:02:53:05:29:e5:
5e:0d:c0:6b:ae:26:e1:2a:c6:1a:5f:de:de:be:6f:c3:8a:d0:
12:1a:0b:c2:05:9b:5c:ec:08:15:30:03:81:57:bd:db:a7:36:
50:85:bc:c1:22:86:07:3b:31:76:38:22:88:2f:f3:b9:a3:47:
dd:0f:69:c8:a4:9e:69:59:ef:a9:ba:29:8c:65:ea:e9:2d:84:
37:84:c1:eb:20:87:6a:18:85:07:91:75:1a:97:b6:89:e1:aa:
f0:f6:41:96:a5:95:7b:6c:60:08:2f:7d:18:04:21:65:4d:70:
ff:45:ba:f1:c9:bd:c3:d5:ad:2a:6d:28:2d:c2:09:7e:1b:b8:
3f:36:cc:a2:a5:02:9b:8f:45:df:3c:6b:74:43:08:bc:a1:22:
bd:84:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:44 2026 by rpki-client