Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: rG+9BkSrVwh2jk4dZ4levQPT/Q3RZLh5z6bDpvubH3E=
Subject key identifier: 79:B5:BD:F6:D9:14:01:1E:D6:D9:13:68:8E:11:7A:B9:58:26:A4:BA
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019D37F74A22F7851DE35A35976D283AAC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:46 +0000
Manifest this update: Sun 29 Mar 2026 05:00:46 +0000
Manifest next update: Mon 30 Mar 2026 05:00:46 +0000
Files and hashes: 1: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (hash: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU=)
2: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (hash: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: hlRF6m7auS9H3MEChzh5fBgpwQrZtbI/doECMIkHZJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4a:22:f7:85:1d:e3:5a:35:97:6d:28:3a:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Mar 29 05:00:46 2026 GMT
Not After : Mar 30 05:00:46 2026 GMT
Subject: CN=79b5bdf6d914011ed6d913688e117ab95826a4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:05:bc:6d:af:2d:ee:4e:f0:b3:35:78:66:
c8:14:80:06:8f:e0:03:f6:22:29:bf:f2:76:97:4e:
f7:e9:0a:07:29:2e:6e:9f:2c:b9:8f:3d:0d:d9:0d:
ed:bc:9b:f6:7b:b7:50:9d:f1:ed:bd:e6:d7:6b:7d:
5c:f3:58:6e:59:3f:9d:a7:15:fd:4d:e8:d6:01:02:
5c:cc:67:3c:83:b7:3e:2d:39:df:84:70:ab:3e:fd:
40:db:af:af:4b:6e:66:fc:5b:79:db:fd:15:c4:fc:
30:35:81:a1:e0:a0:1b:77:52:d6:60:4a:98:ee:5b:
73:94:7a:fb:92:3b:32:22:95:23:25:ef:2b:7f:75:
16:bb:4d:69:c0:35:85:92:30:07:77:f8:6d:d9:d7:
1a:90:97:05:46:97:b2:c9:25:bc:bb:44:bb:69:80:
c4:5c:b3:82:ec:34:fd:9e:c2:3e:f8:29:0f:9b:3f:
68:12:a2:17:6b:13:c8:7a:cc:16:43:4d:d1:99:96:
eb:47:88:b1:e4:15:2a:33:f3:16:eb:83:3a:a2:82:
b3:6c:33:eb:1f:e7:56:8e:24:bc:b3:be:09:85:70:
cc:2d:50:5d:51:ea:ef:47:47:19:26:a4:da:84:7e:
72:7e:b6:e9:99:fc:5f:91:5c:e1:a7:ab:e5:d2:c5:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:BD:F6:D9:14:01:1E:D6:D9:13:68:8E:11:7A:B9:58:26:A4:BA
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d1:91:68:b3:ca:ce:8e:16:0a:cd:4d:4b:64:57:0f:06:b4:
af:ab:90:8d:0d:27:fa:4c:e6:20:64:a4:61:92:15:01:e4:87:
88:67:fd:02:5f:41:9c:78:2f:f4:ef:21:9d:99:ac:0b:50:d6:
de:61:dd:87:45:b5:ee:5b:f8:cc:d4:4c:77:7c:91:08:e6:6d:
05:1c:77:14:2d:06:14:26:e1:42:9b:c8:e4:04:8b:c2:ed:f6:
68:3e:bc:a5:a9:f8:06:7f:7c:d3:cc:be:16:de:49:98:94:13:
94:61:db:a8:26:f1:df:40:df:27:3f:cc:59:2b:06:ce:b2:c0:
65:61:fe:3a:5c:ed:7a:6c:fb:19:aa:87:20:48:e9:ae:43:79:
77:33:d3:82:31:2d:9a:ed:a5:15:23:f4:83:0b:f6:a7:49:69:
37:75:9f:ae:21:16:86:70:09:53:5c:15:1f:6b:fb:18:fd:45:
f6:e8:ef:e2:f9:aa:2a:f5:60:bb:05:00:9f:de:f0:47:ba:ea:
7d:2b:19:53:dc:33:4d:ac:09:7d:a2:a0:5a:cb:9f:fc:57:c2:
d4:da:1c:40:9f:49:21:80:b4:91:7b:9e:64:40:4f:9c:bc:fa:
f1:4a:92:0b:f4:ab:91:e9:d2:19:cc:11:c0:7c:48:18:4d:0b:
0a:6d:9a:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390oi94Ud41o1l20oOqxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOThlODE3MDk1OWI1ZTYwMThmNjAyYjNhNzQ4N2IyZDgw
MjgxMDYwHhcNMjYwMzI5MDUwMDQ2WhcNMjYwMzMwMDUwMDQ2WjAzMTEwLwYDVQQD
Eyg3OWI1YmRmNmQ5MTQwMTFlZDZkOTEzNjg4ZTExN2FiOTU4MjZhNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLkFvG2vLe5O8LM1eGbIFIAGj+AD
9iIpv/J2l0736QoHKS5unyy5jz0N2Q3tvJv2e7dQnfHtvebXa31c81huWT+dpxX9
TejWAQJczGc8g7c+LTnfhHCrPv1A26+vS25m/Ft52/0VxPwwNYGh4KAbd1LWYEqY
7ltzlHr7kjsyIpUjJe8rf3UWu01pwDWFkjAHd/ht2dcakJcFRpeyySW8u0S7aYDE
XLOC7DT9nsI++CkPmz9oEqIXaxPIeswWQ03RmZbrR4ix5BUqM/MW64M6ooKzbDPr
H+dWjiS8s74JhXDMLVBdUervR0cZJqTahH5yfrbpmfxfkVzhp6vl0sXGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHm1vfbZFAEe1tkTaI4RerlYJqS6MB8GA1UdIwQY
MBaAFL+Y6BcJWbXmAY9gKzp0h7LYAoEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEt
NDhjZWVkNWU0MzhlLzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEtNDhjZWVkNWU0Mzhl
LzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9GRaLPK
zo4WCs1NS2RXDwa0r6uQjQ0n+kzmIGSkYZIVAeSHiGf9Al9BnHgv9O8hnZmsC1DW
3mHdh0W17lv4zNRMd3yRCOZtBRx3FC0GFCbhQpvI5ASLwu32aD68pan4Bn9808y+
Ft5JmJQTlGHbqCbx30DfJz/MWSsGzrLAZWH+Olztemz7GaqHIEjprkN5dzPTgjEt
mu2lFSP0gwv2p0lpN3WfriEWhnAJU1wVH2v7GP1F9ujv4vmqKvVguwUAn97wR7rq
fSsZU9wzTawJfaKgWsuf/FfC1NocQJ9JIYC0kXueZEBPnLz68UqSC/SrkenSGcwR
wHxIGE0LCm2a+w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:41 2026 by rpki-client