Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: xewJT1CwYWRWNAwUdko347Y1YJv7YA9qhYUQScmQ66Y=
Subject key identifier: CB:E8:09:77:72:FF:8B:51:FA:96:C5:C4:56:D4:27:D3:8A:B7:A5:E0
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 019E8EA50655290949C114898475A0519E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 09D8
Signing time: Wed 03 Jun 2026 18:00:40 +0000
Manifest this update: Wed 03 Jun 2026 18:00:40 +0000
Manifest next update: Thu 04 Jun 2026 18:00:40 +0000
Files and hashes: 1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
2: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: 9mqF+bb3p+9kYwuRLbp+BEb5JDmr7iSWsPY084neGVY=)
3: wVNpm-1J5NTytyjtGnQX6j1BkDg.roa (hash: QtG2sWben/myYIuxaHxhV/nd4dmlFHcHKMY3zMny2lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:06:55:29:09:49:c1:14:89:84:75:a0:51:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Jun 3 18:00:40 2026 GMT
Not After : Jun 4 18:00:40 2026 GMT
Subject: CN=cbe8097772ff8b51fa96c5c456d427d38ab7a5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:be:78:59:93:1e:69:76:3a:73:54:71:c6:
d4:96:5c:e3:06:58:5b:3e:7e:bc:61:54:01:80:27:
cc:3e:37:cb:c0:77:b5:66:b7:d4:bb:58:3f:f5:b5:
aa:43:dd:60:95:b7:69:b4:9a:71:1c:9b:ef:8b:ae:
75:16:a2:c3:d1:88:f4:76:2a:cc:47:42:f9:20:a3:
59:75:02:b1:90:d2:98:88:c6:e6:ab:50:ef:30:08:
c8:c7:00:d5:ea:e0:cd:f2:bb:b9:08:ab:9e:bd:9d:
f5:76:60:b1:63:08:3e:6a:6f:af:c4:66:e5:ed:ea:
b7:0a:4c:b7:ba:78:29:7a:83:7b:66:ec:1c:d8:9d:
f6:f0:83:25:8c:e2:40:96:dc:09:17:de:a0:54:f8:
28:d7:1e:30:ca:78:09:b6:c3:c2:7d:2d:41:bb:f9:
f3:46:55:d1:0f:cf:1f:0d:7d:31:5f:60:31:2c:d0:
a9:17:08:af:7f:ca:91:de:b8:88:1c:67:f7:16:67:
12:98:b2:36:da:e0:7e:57:d6:af:f1:21:0d:a9:a2:
62:93:2d:7c:74:17:c0:9c:cd:f0:72:ca:a6:b2:45:
f4:f0:da:98:1d:af:44:92:68:e9:21:e4:30:56:50:
e9:e1:56:10:67:a4:38:9c:b4:52:cd:90:0f:0d:7e:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E8:09:77:72:FF:8B:51:FA:96:C5:C4:56:D4:27:D3:8A:B7:A5:E0
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:4d:ed:bf:3e:ca:32:c6:c8:5d:df:6f:a6:34:91:f5:fd:
44:ca:ee:36:ba:33:f8:c2:95:e9:e6:42:bf:99:f6:0e:54:ae:
90:e7:48:b0:14:88:c2:96:93:28:2d:d4:6f:0b:66:a7:be:21:
35:42:0a:2d:02:5a:eb:f2:7c:dc:9c:2b:df:83:bd:c7:6b:df:
9d:44:1a:85:d0:ad:9d:2f:f6:8e:6d:39:a5:ad:c7:d3:db:92:
b5:dd:19:51:fb:5b:e7:04:88:69:77:a8:bc:e0:66:0c:71:b8:
f0:12:dc:c7:11:85:15:d3:ee:79:9a:3f:33:aa:bc:a6:e7:1e:
19:42:92:da:86:be:22:f9:4e:0b:0f:3c:60:62:5e:28:25:e9:
b3:b0:94:a3:47:ca:91:0e:02:9f:f5:47:8c:8c:42:ce:5b:4c:
d7:47:3c:c2:d9:51:eb:a3:98:ec:64:3a:8e:9c:25:1b:0f:81:
3e:1b:db:df:5b:a7:5f:93:7c:ac:03:bb:bd:3b:a6:82:79:56:
66:7d:42:2e:cf:18:ea:09:c1:86:87:34:96:a6:53:01:ec:88:
09:2e:69:6c:41:ca:08:30:34:23:a0:b6:82:cd:a9:e2:f1:34:
d2:b7:cf:f8:e0:ce:96:48:9b:12:44:89:b3:b5:ab:d4:6a:7d:
fa:29:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:58:09 2026 by rpki-client