Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File: v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier: y+FPs814ZOEmdBoQu4Km2xeqsqrgyvI6z3pRP4iJ7+E=
Subject key identifier: 4D:68:D9:E5:0D:D4:E1:FC:1E:EE:BE:94:84:81:4D:FD:D9:51:5D:3C
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer: /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial: 019D254CAD444889AD48A3A0091A125EE398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 14:01:15 +0000
Manifest this update: Wed 25 Mar 2026 14:01:15 +0000
Manifest next update: Thu 26 Mar 2026 14:01:15 +0000
Files and hashes: 1: MavdUwtL9hXRYTucFdVXRHkrrIo.roa (hash: yraXNEacytf4HbmMAZg6e64667WxeEaDmWzKdMpCXxk=)
2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: QNxvVXZuBKMVQkgM03yMidHTl6RRm2yEp7j30/TSzjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ad:44:48:89:ad:48:a3:a0:09:1a:12:5e:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Validity
Not Before: Mar 25 14:01:15 2026 GMT
Not After : Mar 26 14:01:15 2026 GMT
Subject: CN=4d68d9e50dd4e1fc1eeebe9484814dfdd9515d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:6a:50:c5:b7:06:19:b4:48:a4:e3:d2:c2:
3e:1d:cd:d0:fe:91:a1:3b:f2:bc:d0:9d:b3:78:bb:
fb:8f:34:13:0c:98:20:80:3e:42:24:20:7b:e0:06:
12:5a:f6:35:e7:bd:16:d6:40:72:30:83:a4:be:be:
89:01:46:cc:63:ba:9e:ed:1a:ea:1d:03:8a:03:b1:
b8:9b:d7:36:58:0a:9a:de:f5:bf:7a:42:cd:00:88:
7d:4e:e2:b7:99:3a:81:cd:37:5c:b3:a8:a0:74:4b:
f1:f3:8f:b2:b1:ee:e2:58:c0:0d:f6:ef:01:83:da:
24:0f:4e:6d:aa:d9:20:43:1b:7f:38:3d:91:a6:39:
35:d0:b5:1b:3e:19:8d:d1:64:10:63:99:93:64:61:
df:3d:52:48:b2:a4:ba:da:63:e6:18:6f:c9:5d:22:
a0:13:66:14:b4:28:75:21:19:06:c0:ca:b8:99:14:
77:f7:69:6a:d3:da:20:15:51:9f:1e:74:91:60:75:
01:1b:bd:31:e5:e0:0a:b6:ef:67:83:bf:c6:fe:fe:
c1:18:6d:6e:7a:ab:e7:ab:5e:ed:dc:52:aa:29:d2:
c7:ce:bb:82:f5:12:c0:49:3b:33:8c:70:02:c7:60:
5c:fe:96:ca:7d:bb:cc:19:b1:97:2f:5c:c5:e2:f7:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:D9:E5:0D:D4:E1:FC:1E:EE:BE:94:84:81:4D:FD:D9:51:5D:3C
X509v3 Authority Key Identifier:
keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9a:eb:67:01:80:89:31:d5:1a:34:37:a9:d6:fa:23:f9:5e:
be:0d:39:42:b2:79:b0:c1:e8:e1:ae:7f:7f:25:58:b8:c8:ef:
d9:c6:dd:b5:9c:74:a0:d3:b1:30:fc:5c:3a:ac:f5:67:dd:fe:
a2:20:27:36:d3:98:7b:63:2d:e7:f0:e8:e4:46:40:cd:b3:0b:
f9:46:65:3b:de:1d:d5:82:a0:48:5e:b7:ea:33:b5:bd:e8:a7:
47:df:04:92:07:31:90:05:31:88:8d:7c:67:57:4f:93:99:e0:
a4:3e:e9:56:e2:8b:cd:2b:15:ec:bb:50:56:e3:0b:52:30:34:
9b:c0:52:0a:2c:68:08:17:5e:38:a5:d2:4a:f8:2b:d3:ad:a3:
0f:d7:2e:6f:66:52:fe:f0:f9:de:4b:2a:2c:8a:4d:38:7f:cd:
59:ea:6e:88:fe:2a:ec:ac:00:aa:23:67:e0:06:3f:70:24:25:
14:bf:f7:fd:64:d0:04:60:b8:e2:e1:6a:a3:ae:c4:58:88:b6:
5d:7d:8f:7f:53:59:2b:72:b9:6a:40:db:5f:9e:7c:f6:74:8a:
bc:a2:6d:3b:48:54:93:91:2e:51:22:ce:10:f5:11:2e:7f:43:
18:99:14:16:f2:14:16:70:84:0a:80:7d:4d:c6:8d:4f:9e:0a:
d8:44:f2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:26 2026 by rpki-client