Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
File: V5G7EVC-rF6gxyTznSzn_M_BVGo.mft (raw, json)
Hash identifier: vQg0itWMr/6HXE2Y0gjW4922UztyVgv+u36GPgFWX00=
Subject key identifier: F9:E0:3F:AB:54:7F:2E:12:03:40:56:42:63:4C:9A:29:3C:FB:02:5C
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial: 019D3940A84C833F6EA115CFB8A8667E6D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
Manifest number: 17AA
Signing time: Sun 29 Mar 2026 11:00:31 +0000
Manifest this update: Sun 29 Mar 2026 11:00:31 +0000
Manifest next update: Mon 30 Mar 2026 11:00:31 +0000
Files and hashes: 1: UuWRn46MvNJXFTJ-RnJkgurOGVM.roa (hash: eEkLnHk0Njo0Q0StbkcpTu+aS62BjLKIvwib9SKKCcs=)
2: V5G7EVC-rF6gxyTznSzn_M_BVGo.crl (hash: VsW0t41/wTRJm34ASx2ktdM/ZC2ofaSGh51XhwU/sc0=)
3: e5B6UaZBynauNkkMPicw53NI3mU.roa (hash: 4DmDWJi04vm3aen2qoxWEPXJCD5rR8XX9hHzfX6WDXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a8:4c:83:3f:6e:a1:15:cf:b8:a8:66:7e:6d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Validity
Not Before: Mar 29 11:00:31 2026 GMT
Not After : Mar 30 11:00:31 2026 GMT
Subject: CN=f9e03fab547f2e1203405642634c9a293cfb025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:69:59:5c:91:a0:e0:3f:f2:5a:e5:0f:60:
99:af:58:3b:cc:96:d2:d4:c9:dc:7d:f6:46:cc:4d:
5f:ca:1f:a8:e8:71:81:be:95:c3:7d:c4:4b:49:fd:
b2:1c:52:46:5b:a2:e8:62:71:d6:3f:36:72:5e:b2:
ad:7a:f5:bf:cd:b9:d8:90:fa:07:4f:0a:97:ce:71:
69:64:ae:4c:bd:b8:4c:26:22:d0:93:61:0d:e9:d6:
fe:56:86:f6:1b:12:c1:49:be:79:22:07:83:19:e8:
7b:32:7f:af:13:36:f0:d0:2f:e9:e4:05:06:f4:95:
8b:f2:7a:aa:09:79:b6:62:7e:65:8d:59:24:2d:3f:
99:42:e4:8e:b4:a8:05:27:c6:bf:26:13:78:b0:be:
40:1e:aa:4d:24:10:98:03:bf:e6:a4:65:7d:05:ed:
93:94:46:d8:1e:c6:de:6f:6c:e2:1d:e3:fe:4e:c5:
a1:39:40:1c:6e:7f:f9:86:bd:18:29:60:bc:73:13:
ab:f8:ec:87:bf:42:e1:7c:15:d8:b9:1b:1d:d3:4c:
87:95:4b:be:ed:33:47:32:11:af:dc:c6:30:63:b9:
1e:29:8a:41:80:33:2c:f6:6c:f4:75:77:38:d6:a0:
ca:cd:90:a6:5c:23:98:5f:b6:ce:4f:7a:0f:f4:53:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:3F:AB:54:7F:2E:12:03:40:56:42:63:4C:9A:29:3C:FB:02:5C
X509v3 Authority Key Identifier:
keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:69:85:dc:af:e5:cc:8e:19:57:75:f6:4d:32:4f:b1:bc:4d:
bd:a5:a3:e2:cc:40:b4:eb:ca:3e:76:d8:44:df:c5:ab:5c:78:
92:4d:8d:3b:b1:5b:e9:b8:cc:e5:ae:d8:2d:59:be:da:b1:84:
01:e6:fe:cb:70:75:14:7f:e4:47:c4:60:a9:a7:fd:60:27:70:
f0:00:b8:b2:c1:57:66:aa:e5:0a:c4:6f:a3:20:24:cc:22:09:
b7:ca:f2:f9:88:cd:1a:3f:67:b7:83:02:25:a4:c7:59:1d:b7:
5b:6a:8b:35:34:8b:7f:04:c3:e1:5e:2b:26:91:a7:a4:61:f2:
cf:a3:97:46:ea:7c:15:7b:fb:97:d5:53:5f:eb:10:2f:90:c2:
59:76:f9:22:a0:a9:27:6d:26:92:b0:12:82:06:38:b4:15:a9:
8b:2a:da:e1:1a:99:05:cf:7b:eb:d3:f8:6d:d8:2a:cc:7b:1d:
67:ab:02:95:5c:f8:12:2f:09:b0:86:97:fd:b1:75:b3:08:37:
32:69:32:8b:01:b0:73:69:be:8e:cd:2f:dd:60:8a:01:cf:c1:
51:f2:5a:11:72:42:db:63:f0:21:be:39:4c:19:7d:42:cf:e5:
85:9b:13:62:b7:28:bc:68:34:14:2a:5b:75:0b:ca:32:11:ae:
09:3d:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:28 2026 by rpki-client