Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: RB5q2PcXEErEtg1uK40nyL0SIPLwEkPgAY7SxZj0Ukk=
Subject key identifier: 94:30:C5:54:72:48:DF:70:62:AB:3E:5D:F8:FC:A9:35:82:14:93:B7
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 01A06D95210A531FA6D6F8A6679D3BC70DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 0AD1
Signing time: Fri 04 Sep 2026 18:01:24 +0000
Manifest this update: Fri 04 Sep 2026 18:01:24 +0000
Manifest next update: Sat 05 Sep 2026 18:01:24 +0000
Files and hashes: 1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
2: lfMrkwLp7hAwWVEeABAkFyae20g.roa (hash: /+dZbciWTAdNljkvx7xP06l/dJfOWpz054ogX8e4mqs=)
3: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: KCtzKT17fam7ZgQEYYU7jR0GVvuPId5D8pqrGJgMhm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:21:0a:53:1f:a6:d6:f8:a6:67:9d:3b:c7:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Sep 4 18:01:24 2026 GMT
Not After : Sep 5 18:01:24 2026 GMT
Subject: CN=9430c5547248df7062ab3e5df8fca935821493b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:3a:5e:0f:32:67:ae:35:2f:73:ce:a5:02:
3e:db:48:0a:9b:4a:73:f1:e1:91:1d:0e:d6:75:57:
9c:94:3b:7b:48:43:dc:9b:eb:c2:c3:95:d8:64:b9:
ce:ed:e1:7d:0d:c2:94:d1:bf:ad:ad:f9:f9:78:42:
23:4f:7d:04:fe:5b:db:e1:8e:6f:87:ea:6b:f5:db:
cb:4c:5f:05:d3:57:9e:10:92:46:35:f0:65:64:a9:
4f:56:25:e1:0f:1e:a0:31:09:09:df:79:10:ae:5f:
b0:b6:3d:34:46:a1:a9:fd:39:6d:90:1a:44:60:f5:
ce:c6:3a:f7:49:90:87:a1:0a:ea:dc:71:fa:73:66:
1f:69:c8:7b:62:e0:91:48:2e:b6:40:6e:bb:b1:22:
84:41:30:f7:fd:d9:c7:14:45:62:0e:93:d8:3f:16:
5d:ee:5f:bc:8a:61:99:80:ed:e7:96:b0:92:07:62:
40:d5:70:62:b0:b9:c1:31:3e:f0:2a:42:82:3f:51:
98:c4:fd:bb:49:37:2e:d9:c6:46:c3:bc:d0:ef:76:
30:05:49:41:47:5d:98:6a:00:bf:55:00:39:50:7d:
f9:ae:0c:9f:7a:8c:45:56:1d:15:07:3d:bb:13:28:
88:12:62:10:84:63:e5:32:bb:cb:f2:8c:8b:71:aa:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:30:C5:54:72:48:DF:70:62:AB:3E:5D:F8:FC:A9:35:82:14:93:B7
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8f:3d:bc:8b:98:76:84:a2:78:a7:a0:e2:7b:95:b7:20:b5:
52:a1:7a:42:10:e1:60:2f:ed:8a:67:62:4a:95:3c:92:36:77:
61:49:54:f4:8b:e8:13:14:04:ff:b1:df:c6:0d:c1:9a:25:23:
b4:15:ba:f9:03:15:83:93:b5:88:46:61:4d:7d:cf:45:cc:b9:
25:12:ab:ae:de:23:8b:cd:98:ae:ed:57:ed:73:2b:fa:4c:b5:
77:23:e1:27:76:47:e1:1e:58:65:56:bd:ed:ed:de:02:3e:a1:
57:73:19:38:87:e3:6a:c3:2a:c2:b0:c2:6d:88:68:8b:62:df:
2f:da:19:09:3f:a4:bc:da:4f:cd:ee:32:96:5f:0e:28:46:94:
e9:dc:b0:f9:59:80:fa:e2:8d:33:fd:7c:9c:4f:79:79:fb:06:
9b:cd:1d:61:8f:ab:4a:36:d2:72:a5:15:ed:89:1e:65:f4:95:
21:93:27:96:b8:c9:a0:1f:49:1a:d1:6c:40:2f:4d:d0:be:84:
ed:55:82:dd:ef:ae:47:92:8a:60:fe:1e:13:55:f0:49:fd:df:
ad:1b:6b:42:0f:2b:b6:4e:c2:24:91:1f:fe:3a:f1:f4:36:c1:
91:a8:99:29:e0:84:ec:fc:46:e4:7c:dc:07:71:2e:2b:5b:0c:
63:47:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:03:36 2026 by rpki-client