Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: OKcm7L39eKIJxhfcqLh77Do2M2F5VjsBbH1fszMXqOg=
Subject key identifier: DE:11:D8:FB:82:5B:68:19:0C:8B:B7:6A:73:B9:A6:F3:13:66:3A:18
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019E2392A79334D5FE131AF9593242A63392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 23:01:14 +0000
Manifest this update: Wed 13 May 2026 23:01:14 +0000
Manifest next update: Thu 14 May 2026 23:01:14 +0000
Files and hashes: 1: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (hash: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU=)
2: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (hash: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: S1mO3ydXktdezlfzEchKboX7AS7jtjq88/DU7K9/Ifk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 22:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:92:a7:93:34:d5:fe:13:1a:f9:59:32:42:a6:33:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: May 13 23:01:14 2026 GMT
Not After : May 14 23:01:14 2026 GMT
Subject: CN=de11d8fb825b68190c8bb76a73b9a6f313663a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:98:1b:24:c0:57:bf:02:a5:03:5d:cc:62:
6d:a9:e6:6a:64:a8:52:1b:16:e0:1b:1a:5f:1e:8e:
c6:ee:5e:a6:3e:6c:75:95:97:6d:ea:8f:6e:1b:52:
dd:d0:82:72:ad:c8:44:dc:22:0c:c1:2e:5a:f1:a2:
92:2a:15:70:56:0f:89:f7:81:b7:c7:d5:4f:2e:06:
58:31:ff:52:47:a5:67:35:90:5c:2e:c3:95:07:38:
9f:77:0e:62:d3:13:bc:8b:05:9a:20:0b:47:b6:4c:
f2:41:62:24:c0:ca:12:1b:4d:b3:a0:e5:be:dc:05:
dc:22:33:a1:85:41:50:68:54:48:cd:8d:22:79:ea:
ab:02:ad:b0:cc:dd:cf:e3:2a:71:c8:72:bf:27:c5:
09:8d:28:cf:e1:0b:b0:a2:fe:0b:ec:06:6f:8a:95:
0c:09:0b:6f:75:f9:3f:fb:3f:7b:0a:45:83:8c:ee:
46:f3:2f:d7:77:b3:ac:66:b7:28:71:47:9b:2c:4c:
0c:48:bb:c8:5b:db:9a:b8:44:e2:05:4e:4a:b1:47:
72:44:0f:75:5b:e3:41:64:55:a6:12:6d:49:f8:f6:
a1:c3:86:6c:91:58:46:49:70:d2:d1:0b:4c:ec:27:
5e:16:df:3d:a3:90:6d:57:9f:ab:1b:f6:ba:2d:21:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:D8:FB:82:5B:68:19:0C:8B:B7:6A:73:B9:A6:F3:13:66:3A:18
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f9:c7:c4:76:60:70:9f:ad:af:5a:d9:8e:a5:e3:1d:18:a7:
8e:53:6a:42:77:6c:b1:30:c6:07:e2:d7:3c:75:b8:95:9b:a4:
3b:9d:6e:a3:2f:af:60:33:df:2c:ca:e1:65:fc:5b:64:da:e4:
17:c3:9b:45:01:97:4c:fd:b7:e7:75:21:6c:5d:5f:5f:ec:59:
6c:64:40:93:d9:a1:97:7e:39:87:24:c0:5c:06:e3:d1:64:eb:
9a:f8:4b:b4:fb:8d:a1:ea:c6:ed:e3:be:90:4c:b2:f1:7b:12:
8e:71:19:87:90:f9:48:24:cb:06:29:70:71:96:aa:30:35:33:
c7:4e:d6:89:c1:39:1c:40:08:c4:b6:7c:bb:64:e9:3f:55:ea:
be:eb:9c:37:1c:8e:19:89:8d:2f:50:20:4e:f1:3b:a0:a9:3d:
6b:b6:a9:ee:59:18:14:cd:b4:c6:21:04:b5:ec:2f:91:0e:68:
c9:dc:62:8e:de:19:de:2b:a7:2e:44:53:6c:42:0f:5e:f0:43:
9b:7a:32:c0:d3:83:47:4b:81:91:06:48:75:72:5c:11:97:67:
c9:3b:bb:a3:07:f9:97:72:9a:97:77:85:e6:91:44:03:08:80:
a7:7b:f2:f5:0f:79:fa:03:e5:5e:ad:62:91:43:ed:c4:5f:33:
8c:e7:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 00:55:26 2026 by rpki-client