Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: bVgdvzDQg2qp+otfp6H19G/RRpGQoJSRmD1pTpYK9z4=
Subject key identifier: 1D:86:4D:62:08:10:15:57:F8:D4:6D:2C:7C:7B:6C:57:AC:D5:E9:55
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 019EB8B4836CC3AA3FCE0BDE4268B16E3C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: 03D3
Signing time: Thu 11 Jun 2026 22:01:38 +0000
Manifest this update: Thu 11 Jun 2026 22:01:38 +0000
Manifest next update: Fri 12 Jun 2026 22:01:38 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: kKbIL+R3YghFY4tdfcACJQJWOVeA8Ru8u0rxU3OJCS8=)
2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:83:6c:c3:aa:3f:ce:0b:de:42:68:b1:6e:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Jun 11 22:01:38 2026 GMT
Not After : Jun 12 22:01:38 2026 GMT
Subject: CN=1d864d6208101557f8d46d2c7c7b6c57acd5e955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:32:83:31:6d:8b:fd:30:72:b7:36:97:79:
9a:cf:ba:15:33:16:6f:67:ac:79:4b:ac:e8:b0:e4:
db:e6:91:5a:73:be:44:02:02:d4:da:7d:7d:cd:99:
6e:15:d0:3c:36:e3:d1:3c:6f:cf:8b:19:e6:b9:f8:
3d:bd:f2:53:d4:ba:2a:f9:c5:a2:ac:44:ea:80:8b:
16:8d:cf:31:b2:3d:56:28:78:1d:77:7e:f2:04:7b:
02:a2:eb:67:78:81:cb:1a:e9:82:c5:b3:a4:38:86:
c0:1f:ae:65:0c:ba:a3:aa:09:b5:00:6b:49:15:6a:
d8:f2:92:f5:9a:a1:89:53:51:d5:1b:66:8f:c4:14:
a3:28:f3:66:b0:77:07:dc:0a:36:50:c5:f6:e2:05:
25:04:1d:df:4b:4f:57:9a:d9:8d:2a:20:4c:83:96:
1e:6a:db:0d:52:b5:fa:08:97:e7:7c:99:70:72:ba:
f5:a8:e4:02:14:e1:a7:c5:fb:2c:17:d8:ba:e6:be:
83:1c:7e:41:71:11:74:11:22:a2:4b:dc:4b:86:ae:
f0:10:40:3d:7b:f9:b8:62:ae:08:45:c5:bf:9b:97:
8a:92:d7:29:5e:80:7f:c9:25:ce:2a:85:bc:89:69:
a6:db:c9:0f:eb:9f:69:3a:06:d1:54:c7:70:cd:51:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:4D:62:08:10:15:57:F8:D4:6D:2C:7C:7B:6C:57:AC:D5:E9:55
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:a7:5f:f0:35:90:fd:a6:67:69:57:b6:b3:6a:ab:b6:0b:
87:2f:13:fb:89:80:42:93:71:8a:09:9d:3d:b3:a4:a0:43:3a:
f5:f0:03:41:5b:ae:c3:d7:bb:a1:97:37:49:95:42:0a:89:02:
e3:19:fc:06:8b:c0:47:ab:03:99:56:73:b3:c0:cf:81:0b:30:
f2:62:3e:ba:62:bc:fb:56:13:23:ee:dc:46:41:d3:f6:74:92:
7f:29:2f:ed:19:e1:23:2c:6b:ef:69:b9:48:43:e4:c1:de:ea:
3b:bc:85:04:ad:42:82:14:32:b2:e1:1a:00:ab:10:e4:4d:d5:
fb:e1:1d:5e:22:55:be:c7:e3:50:39:39:3a:81:44:6f:08:14:
dd:52:43:58:1e:16:f9:a4:a2:ee:7f:de:3d:14:68:55:30:0e:
44:a8:cd:d9:af:1b:e5:81:53:96:6b:7e:9e:b8:eb:df:35:25:
c3:27:ba:ea:2c:19:a7:31:42:cd:6c:c9:75:27:95:a3:c8:97:
aa:ac:db:73:ac:8a:77:b9:69:18:4e:41:bb:65:c9:44:0b:01:
98:ec:61:29:82:a6:d9:4b:78:a6:04:b0:eb:b1:b5:06:32:60:
80:47:eb:8e:f1:5b:d2:4d:52:73:8a:09:6a:52:ae:12:de:d9:
3f:42:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:57:23 2026 by rpki-client