Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: FClaZsgn+hUEtdFRSDlUkXQcKfyUskwd789yzhEcTRA=
Subject key identifier: D5:B6:64:3F:FA:3E:94:1D:0E:6A:18:C5:0A:D3:90:33:B5:6E:11:F2
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 01A1242F585EA9A911098BEF816D488FE1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 05:00:44 +0000
Manifest this update: Sat 10 Oct 2026 05:00:44 +0000
Manifest next update: Sun 11 Oct 2026 05:00:44 +0000
Files and hashes: 1: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (hash: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU=)
2: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (hash: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: TnHV+UPku0Cw9r3Eq6+7cJgnoeWffJogqd/oWnxWulk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:58:5e:a9:a9:11:09:8b:ef:81:6d:48:8f:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Oct 10 05:00:44 2026 GMT
Not After : Oct 11 05:00:44 2026 GMT
Subject: CN=d5b6643ffa3e941d0e6a18c50ad39033b56e11f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:b2:0f:b7:35:59:a4:52:7c:8f:b0:f9:a6:
15:77:b4:39:15:55:4f:3b:f0:de:a1:a6:ea:65:0f:
26:4c:bf:e2:d5:6d:2c:52:c9:17:33:cc:3d:cd:64:
75:7a:fb:2c:e6:77:db:3a:aa:73:c5:9e:e2:b1:c2:
78:a0:d6:f2:45:e2:67:45:c8:b7:83:a6:30:d0:6f:
b2:f2:d3:60:e8:c0:e3:38:16:37:55:bc:9b:17:46:
cb:1e:62:dc:b7:ee:5e:2c:b5:36:1d:89:df:4a:c6:
7a:08:51:cb:d3:08:67:d9:1b:97:75:14:91:d7:d6:
c0:d7:86:ab:e1:ef:cf:6f:7c:6f:b2:de:2c:cd:04:
4d:4a:2f:96:73:98:11:f3:be:4e:2f:7d:ef:05:a1:
7b:26:21:de:3a:dc:7d:52:4d:11:b4:90:2c:de:e1:
00:99:f6:b3:e0:96:08:f1:bb:98:8c:bb:7a:b5:4d:
35:6c:f5:8e:31:8a:c1:01:ac:ed:90:5e:86:0b:93:
f3:9c:59:cc:d1:a5:66:2f:e7:8c:58:a0:0d:c9:be:
05:fd:a5:7c:46:c2:69:8f:4a:8f:d2:3f:c5:f1:92:
4e:b5:6c:65:38:e7:34:e8:5d:48:2a:42:f0:d3:db:
c7:85:df:74:ca:c3:9d:90:18:73:1c:ba:bd:42:79:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:64:3F:FA:3E:94:1D:0E:6A:18:C5:0A:D3:90:33:B5:6E:11:F2
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7b:93:73:a6:9a:25:c7:a8:1b:04:40:73:e4:0f:33:08:4e:
b9:af:2d:1b:fe:da:69:ce:ca:85:51:3f:eb:24:b1:44:c3:25:
03:b6:5e:ba:a0:87:65:21:54:77:02:71:c3:f7:cb:ac:57:e2:
fd:cd:45:47:48:8c:8f:e0:96:d4:b8:9e:05:ea:ec:2d:da:50:
ef:f6:bb:36:22:e8:14:0c:a2:0b:b4:57:e3:31:ce:e9:cb:13:
9b:da:2f:d1:81:2a:d2:4f:16:94:db:e3:cd:00:b4:b4:04:ed:
a8:84:dc:de:2c:e6:89:eb:07:94:63:93:77:4d:37:76:85:0b:
56:44:1b:90:37:cb:05:f9:2b:f8:9a:c0:af:f4:96:e7:aa:f1:
4a:d4:9c:be:ef:f3:ff:00:40:d3:1f:8e:cb:32:bf:29:03:12:
75:80:b4:21:fa:6e:04:ea:19:0d:2a:5f:79:23:f7:e9:60:d3:
43:9b:3f:50:17:67:39:cf:ac:2c:2a:16:f3:b4:f7:64:1b:93:
8e:32:34:db:ee:95:83:51:e4:3d:c0:04:00:0f:55:50:1d:82:
aa:b3:cf:e2:00:ab:60:c4:52:54:d0:87:4d:d1:95:23:2e:ad:
36:a2:ee:8c:43:c2:df:02:cd:9f:25:a0:5f:af:9c:74:24:67:
5c:d0:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:57:27 2026 by rpki-client