Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: agkW5GiSvKXEhiNuSQHfiyOLVGe9bDFbBzA2jrgpXBk=
Subject key identifier: FF:65:F8:3E:73:66:F1:36:29:55:BC:37:4B:8A:CA:22:3E:32:A1:C2
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 019D38661535F8369159944ECB6990753AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 030C
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: K+klVOOzPNFA/a0aKIGdRnhWTvaWKjv7tjnd6uht9Pc=)
2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:15:35:f8:36:91:59:94:4e:cb:69:90:75:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=ff65f83e7366f1362955bc374b8aca223e32a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:ab:b8:66:2a:df:2d:5a:24:b5:8d:82:b0:
b4:d9:b3:c3:33:70:d9:8c:db:e2:90:b7:a2:bf:ea:
52:57:43:a2:d2:b7:ca:9b:4e:69:df:16:d9:4d:09:
11:81:4c:b2:df:a9:22:e4:a1:ff:50:f9:77:d5:65:
0f:5e:19:df:bf:aa:e9:9c:fc:19:d6:d7:a3:2c:4b:
ea:91:0c:ce:58:03:d7:2b:53:f8:a4:b8:57:b1:08:
4e:0d:b1:3e:f9:94:f4:96:20:ce:ff:62:8a:a1:26:
91:d5:11:e8:49:a9:6d:fb:6d:0e:61:89:41:b7:2f:
a8:b7:05:d2:94:dc:0a:cf:d4:76:6c:2d:93:8b:d0:
92:b4:7e:92:7f:fa:b8:72:3b:a9:2c:bb:93:9a:13:
90:54:c3:f1:ba:13:2c:d2:ab:f4:ea:8a:9c:04:a9:
c7:2d:46:3d:09:d8:b8:d3:b0:59:90:78:bc:59:5f:
06:cc:6a:c6:9c:32:95:ac:25:65:0d:86:07:0d:22:
b7:3b:c3:08:04:27:5c:e9:35:62:5b:9e:c5:f6:b0:
fb:24:f9:a1:d8:84:6e:55:13:cc:78:26:87:31:74:
d6:e8:96:a4:39:26:01:1f:ba:6f:21:3b:19:1c:73:
5f:ed:40:28:a9:1b:3e:19:37:f4:54:5b:c6:cb:20:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:65:F8:3E:73:66:F1:36:29:55:BC:37:4B:8A:CA:22:3E:32:A1:C2
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:37:9e:47:2e:22:bb:e2:05:d9:5a:ee:10:aa:4a:ca:0c:a8:
94:e6:98:25:b7:24:cb:c9:fe:76:b5:90:45:0e:7d:4a:2c:84:
a5:a0:6c:d9:c7:81:f0:0b:ad:67:3a:69:9f:49:9d:e5:98:42:
47:00:f9:44:55:14:ed:35:d1:82:87:9f:f9:c3:2c:f5:30:59:
35:57:87:69:77:ff:45:fa:bd:80:45:1c:ba:32:16:db:52:96:
bc:c0:7d:c3:7a:65:5f:7d:22:7c:4c:df:14:00:7a:40:b9:43:
ae:59:31:0f:fd:83:fb:e7:66:22:85:45:7c:3c:09:97:5f:90:
87:5d:ff:24:34:c1:b1:34:f3:85:e3:44:f3:ba:7a:55:5b:91:
cc:8a:f3:31:e0:32:7b:ee:70:89:4c:3d:d9:4f:5f:2a:4b:92:
a8:59:06:21:ab:55:a1:b2:a2:04:0e:fb:94:aa:4f:95:71:8c:
35:cd:d1:fb:5d:44:b3:93:43:2b:cb:8c:31:90:2c:71:92:5b:
4e:47:44:39:61:72:93:5b:4e:7c:14:ee:e6:90:be:25:fd:04:
f8:71:d4:ce:0c:46:6a:6a:9e:ae:44:f1:fa:40:05:a9:0d:bb:
de:49:6d:6b:c5:eb:d9:c6:84:a2:a1:dd:61:a1:38:4c:78:7c:
9c:a7:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:06 2026 by rpki-client