Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: pJC+fcIH016ZPLZ8kDawziLV9s57PS3CaQwSlZVvTw4=
Subject key identifier: D5:20:EE:3A:C9:04:23:11:4E:AB:51:91:C1:D4:C6:EA:47:F0:A0:65
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 01A183ACC2ED22B092DC0D8AB469B3D7B1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 0B61
Signing time: Wed 28 Oct 2026 18:01:39 +0000
Manifest this update: Wed 28 Oct 2026 18:01:39 +0000
Manifest next update: Thu 29 Oct 2026 18:01:39 +0000
Files and hashes: 1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
2: lfMrkwLp7hAwWVEeABAkFyae20g.roa (hash: /+dZbciWTAdNljkvx7xP06l/dJfOWpz054ogX8e4mqs=)
3: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: CflC3cK0s0HiIMwdkymPXRl5VogWAodEb5bBJflrcDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:c2:ed:22:b0:92:dc:0d:8a:b4:69:b3:d7:b1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Oct 28 18:01:39 2026 GMT
Not After : Oct 29 18:01:39 2026 GMT
Subject: CN=d520ee3ac90423114eab5191c1d4c6ea47f0a065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:e2:e9:d3:36:ad:02:05:12:f6:8b:a0:bf:
b0:4e:23:96:cd:87:02:34:88:11:76:db:f2:9a:49:
78:11:64:d2:65:f7:da:31:6a:8a:a6:bb:9f:07:8d:
c6:c6:24:5e:ee:00:e9:ba:1d:60:ed:f7:46:97:df:
fe:23:4f:c4:14:c1:a8:0c:c4:72:4d:44:50:e4:65:
22:0c:21:a0:ca:54:d4:1e:4c:c1:44:9a:e0:d0:8e:
0f:64:6f:60:64:eb:60:2d:b4:ae:44:7c:32:0b:f6:
bc:94:60:ff:c0:ff:f7:02:55:e0:3d:ac:ce:06:cf:
43:73:16:53:44:89:00:d3:27:f4:0e:0a:ea:7e:02:
d7:88:e0:16:39:a4:b5:fc:d6:93:5c:89:61:bb:d4:
a2:5d:bf:3a:d4:9c:03:5b:e3:de:15:71:a6:25:91:
5b:1b:90:99:6d:a1:a0:73:1b:53:30:65:e2:77:17:
aa:34:c2:d0:78:dd:d0:4b:64:09:28:fe:09:e5:7a:
f2:47:29:e6:b7:4d:15:21:c6:d6:6a:5b:1a:1c:4c:
1a:21:e5:73:25:0a:ce:3f:a6:69:a6:c0:f8:39:e0:
b2:26:3b:3c:89:28:b7:bc:26:98:e5:7e:66:b6:a0:
a2:2b:5a:67:fe:74:7e:ad:23:e4:4f:7e:13:a7:7f:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:20:EE:3A:C9:04:23:11:4E:AB:51:91:C1:D4:C6:EA:47:F0:A0:65
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:63:83:43:76:08:4b:72:f5:7e:82:60:f2:ab:7f:47:9b:c7:
55:21:57:cf:a6:71:d3:4d:5c:67:b2:fd:f4:83:e3:f1:4e:f9:
c7:45:e9:e2:2f:9c:e1:45:84:4e:ce:6e:73:70:05:34:03:3c:
7f:72:a9:d3:1b:ba:1d:45:29:df:cb:79:15:74:3d:2b:b8:53:
4f:53:ab:34:c2:33:bb:ee:e1:cb:ba:97:24:83:2c:5e:e5:67:
6f:d2:d7:8d:f3:42:94:f2:55:08:b9:0e:3a:3a:9d:97:98:b3:
52:45:29:11:7f:a5:c3:f9:d3:fb:e3:af:8e:7e:f7:90:e4:b2:
86:a2:c9:62:71:0e:55:7a:e8:af:f8:c7:97:57:1c:51:bf:7c:
85:41:57:a4:5f:49:6d:50:46:6e:07:94:76:8c:96:58:ad:2e:
3d:2b:a1:45:13:90:7b:ce:3c:63:c6:fb:e6:e8:67:ca:6e:02:
5e:87:8a:0e:1a:87:4c:93:18:28:44:21:ec:fa:38:4b:dc:de:
93:36:22:b8:b3:52:87:27:35:38:46:2b:28:db:fa:c1:cb:a4:
72:b5:f5:1a:0f:50:61:a9:60:20:22:21:f9:66:1e:6d:5d:72:
ea:c2:fe:79:1c:ea:6c:aa:06:c5:44:a7:75:ef:b9:40:43:18:
db:f4:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:54:38 2026 by rpki-client