Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: X3wY7t+9A9idvBPT2SWyZk4TNTiOtC/MMtVgLdx2i/w=
Subject key identifier: AA:93:63:85:78:37:E8:A4:30:3B:31:44:CD:93:93:54:C5:69:87:99
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019F18D6479F4D303331AF6315D003C140EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 14:02:03 +0000
Manifest this update: Tue 30 Jun 2026 14:02:03 +0000
Manifest next update: Wed 01 Jul 2026 14:02:03 +0000
Files and hashes: 1: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (hash: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU=)
2: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (hash: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: BCvBI0nlDl0zhpfk05QAH4vUFKHAbFLKqZmlAbt18vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:47:9f:4d:30:33:31:af:63:15:d0:03:c1:40:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jun 30 14:02:03 2026 GMT
Not After : Jul 1 14:02:03 2026 GMT
Subject: CN=aa9363857837e8a4303b3144cd939354c5698799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:26:19:99:b7:3b:46:ac:f5:2f:9d:f2:db:
2d:c1:dc:b4:a8:36:ba:2a:bc:55:7b:99:a2:36:7e:
e5:b2:b9:1b:f7:5d:54:9c:b0:f0:3c:ac:79:b2:0c:
e1:10:ab:44:85:fe:e8:81:16:03:20:ea:88:64:bd:
e0:d9:e6:56:79:f8:de:e6:84:c4:0a:ac:3f:36:62:
98:15:13:c7:aa:c9:67:14:f5:01:1e:b6:d0:ca:06:
d6:57:8e:b0:d4:bf:f8:72:af:7d:22:93:94:ce:06:
88:20:0e:53:79:84:59:33:7c:00:96:fd:fc:eb:46:
26:c2:ce:c9:bb:6b:de:18:06:43:a6:3f:2f:58:68:
43:80:16:57:0b:8a:bc:4a:b6:92:95:07:f1:66:82:
37:6a:6b:a3:42:48:f7:c2:83:5a:e0:bb:73:9a:ee:
5d:d6:2c:57:a9:5b:ab:d6:34:98:61:8e:5c:72:e6:
ba:03:f9:fc:88:78:dd:a7:36:e2:47:25:b6:95:ec:
69:f3:fc:06:92:d0:a3:9c:f2:8d:68:1f:d1:81:09:
98:7d:9d:6c:95:97:f1:83:54:31:5c:c1:fb:e1:84:
83:fe:de:09:d2:f7:21:0e:dd:af:7d:a0:9a:0e:7a:
ad:90:6b:0e:ac:58:96:59:77:19:4f:79:b8:eb:0c:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:63:85:78:37:E8:A4:30:3B:31:44:CD:93:93:54:C5:69:87:99
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:1d:24:26:c0:45:41:5d:3d:ea:55:c3:60:51:d3:99:e3:
38:e5:98:15:cd:82:68:35:6e:a9:57:26:06:69:0a:ed:b0:89:
93:ce:ca:20:6e:74:45:b2:dd:b2:a5:ea:1b:a6:ea:5d:fb:fa:
91:b7:3f:b8:49:4c:f1:8b:a3:8b:35:bb:c5:fc:94:40:11:ee:
d5:36:31:d6:2b:87:41:f3:73:72:c3:f9:00:ac:a2:da:f5:ff:
57:50:b6:0e:e3:c0:3a:3f:3f:8c:70:2f:7b:c3:79:c9:cc:1c:
b6:28:67:99:fa:a9:24:aa:31:c7:30:ca:73:9d:0b:16:8e:31:
45:0b:3e:4f:ea:c3:e1:93:01:fd:fe:c6:3d:51:0b:ee:5d:11:
4e:06:ec:ba:59:a2:3f:f2:e8:b1:a5:fe:27:07:fd:c9:6a:7e:
65:55:f2:30:0f:2c:95:6d:3f:cf:d8:f5:8f:51:fc:e1:f5:91:
f2:6b:f0:81:98:66:9f:7f:5a:d1:55:4f:18:a5:bc:c1:f5:45:
ab:b0:61:9b:bf:59:83:34:a4:d4:f0:f7:0b:07:c8:d8:37:87:
30:1c:fe:81:9a:af:17:03:94:52:64:f6:bb:5f:cf:04:3d:55:
2a:f3:92:13:57:df:6f:de:a9:28:8d:b9:eb:21:1c:f3:35:3e:
ad:b1:ed:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1kefTTAzMa9jFdADwUDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOThlODE3MDk1OWI1ZTYwMThmNjAyYjNhNzQ4N2IyZDgw
MjgxMDYwHhcNMjYwNjMwMTQwMjAzWhcNMjYwNzAxMTQwMjAzWjAzMTEwLwYDVQQD
EyhhYTkzNjM4NTc4MzdlOGE0MzAzYjMxNDRjZDkzOTM1NGM1Njk4Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHImGZm3O0as9S+d8tstwdy0qDa6
KrxVe5miNn7lsrkb911UnLDwPKx5sgzhEKtEhf7ogRYDIOqIZL3g2eZWefje5oTE
Cqw/NmKYFRPHqslnFPUBHrbQygbWV46w1L/4cq99IpOUzgaIIA5TeYRZM3wAlv38
60Ymws7Ju2veGAZDpj8vWGhDgBZXC4q8SraSlQfxZoI3amujQkj3woNa4Ltzmu5d
1ixXqVur1jSYYY5ccua6A/n8iHjdpzbiRyW2lexp8/wGktCjnPKNaB/RgQmYfZ1s
lZfxg1QxXMH74YSD/t4J0vchDt2vfaCaDnqtkGsOrFiWWXcZT3m46wwlAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqTY4V4N+ikMDsxRM2Tk1TFaYeZMB8GA1UdIwQY
MBaAFL+Y6BcJWbXmAY9gKzp0h7LYAoEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEt
NDhjZWVkNWU0MzhlLzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEtNDhjZWVkNWU0Mzhl
LzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyEdJCbA
RUFdPepVw2BR05njOOWYFc2CaDVuqVcmBmkK7bCJk87KIG50RbLdsqXqG6bqXfv6
kbc/uElM8YujizW7xfyUQBHu1TYx1iuHQfNzcsP5AKyi2vX/V1C2DuPAOj8/jHAv
e8N5ycwctihnmfqpJKoxxzDKc50LFo4xRQs+T+rD4ZMB/f7GPVEL7l0RTgbsulmi
P/LosaX+Jwf9yWp+ZVXyMA8slW0/z9j1j1H84fWR8mvwgZhmn39a0VVPGKW8wfVF
q7Bhm79ZgzSk1PD3CwfI2DeHMBz+gZqvFwOUUmT2u1/PBD1VKvOSE1ffb96pKI25
6yEc8zU+rbHteA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:11 2026 by rpki-client