Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: TitQLIsh6JrMLsArc4t7YLU7Y9OlFZDGzrJYakhF6c8=
Subject key identifier: 70:B0:01:FB:AB:21:AB:1C:6D:3C:7E:77:DF:1A:4F:23:A9:76:DF:F2
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 01A00281C2B7450328435E0CE9348FE40F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 23:00:53 +0000
Manifest this update: Fri 14 Aug 2026 23:00:53 +0000
Manifest next update: Sat 15 Aug 2026 23:00:53 +0000
Files and hashes: 1: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (hash: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU=)
2: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (hash: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: u/gu3e1Tzj5o+Zq+DOsAAYWJd2qO4AlvDVkkQvEBvhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:c2:b7:45:03:28:43:5e:0c:e9:34:8f:e4:0f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Aug 14 23:00:53 2026 GMT
Not After : Aug 15 23:00:53 2026 GMT
Subject: CN=70b001fbab21ab1c6d3c7e77df1a4f23a976dff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:09:4a:87:ab:e2:84:7d:16:cf:80:80:6e:
95:6f:6e:b3:10:78:43:c4:aa:e7:63:fc:0b:ac:10:
e8:ec:a6:82:bc:90:a7:ba:33:d9:0a:33:a1:bb:a0:
91:c5:8c:0a:f6:78:93:0a:27:59:22:17:35:4c:54:
7a:50:ac:05:4a:b1:e0:63:20:16:55:18:00:95:ef:
e7:c3:61:7e:57:4f:a8:64:12:ea:12:7d:86:e7:f1:
f0:5c:c4:ae:bc:c7:76:fd:b5:09:f0:3f:3d:d0:bc:
e7:9b:fd:a5:b2:db:0c:15:91:31:8d:4a:07:7c:20:
0c:84:09:b0:f9:73:73:46:2d:50:2b:d1:0b:34:08:
d9:ec:5c:cb:e3:10:f9:bf:a6:88:5d:dd:9f:27:f2:
df:d4:df:a8:b7:b8:c1:ff:a9:b9:1f:05:c2:54:f3:
5c:94:8f:ba:11:6b:a0:27:da:e8:0d:cd:e1:1c:f8:
97:6e:68:40:dd:a0:c6:ae:bd:a4:0f:46:00:83:b4:
19:c6:d0:a2:0b:fc:45:d7:6d:1c:17:52:40:f2:5a:
59:d9:9b:2d:9c:99:3b:e3:b9:00:56:88:aa:71:83:
59:d9:40:a0:06:54:07:84:79:71:07:bb:0f:40:a5:
92:7b:a3:04:d7:1b:f7:03:ec:aa:1f:c2:79:02:5d:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:01:FB:AB:21:AB:1C:6D:3C:7E:77:DF:1A:4F:23:A9:76:DF:F2
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:ee:66:9f:d1:68:22:d9:a1:7a:ac:41:7e:58:8e:4d:a0:
46:09:2e:ec:d1:8d:67:2c:4b:7a:52:d1:dd:b7:b2:f7:8c:ca:
70:bc:b8:a7:af:00:75:12:09:4b:3f:e7:e8:11:38:a8:54:6e:
7d:af:94:87:af:d9:e7:da:14:cd:61:4a:25:f6:25:77:aa:6a:
00:c4:b0:5f:b1:a2:30:91:bb:04:35:c4:e6:e4:d6:fc:85:4a:
a2:2b:b4:9f:b1:c3:8c:2f:62:9b:73:79:9d:d4:51:62:9a:ba:
b8:86:06:d1:e4:a2:e2:f9:d8:3c:ab:c5:ae:bf:52:e9:6e:6b:
fb:40:6d:52:ad:34:f0:82:d9:92:8d:30:01:34:c2:df:9e:09:
3b:1d:e0:6d:96:14:26:25:fa:c6:f5:0d:ae:36:00:52:77:31:
b9:71:9a:00:c9:b8:ce:14:80:6d:e0:3b:b9:6b:b9:52:a5:ba:
a0:43:91:53:5c:7e:b6:0c:cc:07:2c:d7:27:2e:61:48:da:94:
eb:39:23:32:29:93:b7:d3:5c:ad:74:3c:2b:6a:1b:fd:9e:78:
10:bf:16:93:04:b3:f1:bc:62:52:91:d4:f4:fb:2f:a7:e9:bb:
cb:77:f0:7c:72:16:a9:10:98:38:fb:83:f6:8f:cc:87:7c:65:
3d:0c:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:50 2026 by rpki-client