Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: NlQTCOBfDmCaygR+C8JOzz71wYhyl3qBQVQDmUhvY7w=
Subject key identifier: C5:F3:6F:2D:CA:3B:12:10:4F:7E:54:32:3E:29:E1:29:1E:7B:2D:53
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019D288490C479E5D457E08C0B4911387F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:09 +0000
Manifest this update: Thu 26 Mar 2026 05:01:09 +0000
Manifest next update: Fri 27 Mar 2026 05:01:09 +0000
Files and hashes: 1: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (hash: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU=)
2: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (hash: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: VfiYIj5iCygw4t1btXQxjxxOZXWWFrXF+1wsYuf/GvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:90:c4:79:e5:d4:57:e0:8c:0b:49:11:38:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Mar 26 05:01:09 2026 GMT
Not After : Mar 27 05:01:09 2026 GMT
Subject: CN=c5f36f2dca3b12104f7e54323e29e1291e7b2d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:7f:1c:16:6f:10:1e:85:d8:a7:f3:c6:09:
ba:0c:cf:6e:9a:5d:55:f8:7a:d5:33:35:45:13:31:
4d:73:32:c1:93:30:95:b3:88:4f:0e:c9:5d:33:61:
44:14:29:61:de:78:0d:51:00:1a:ce:08:e7:c7:33:
c8:95:94:08:7c:97:2e:30:c8:05:1a:3f:cb:52:60:
15:00:a6:bb:af:7d:81:af:77:7b:6e:f4:93:80:d9:
da:66:4b:58:f4:2a:d7:81:98:37:49:1e:4c:14:fe:
ee:63:fd:83:3d:39:05:7c:69:9a:16:80:08:1c:ec:
2c:b5:ab:0c:f7:c8:8b:e5:f2:f9:98:f1:cc:dc:14:
a1:45:0f:d5:40:29:12:45:47:de:09:ad:a6:e7:65:
70:da:ed:be:15:9c:21:89:1a:8f:8a:b9:af:06:89:
cf:fc:c6:79:a3:f6:f8:23:a6:d3:97:36:53:b4:bc:
53:79:bc:ee:09:72:f8:c0:c2:cf:84:c1:92:51:b9:
4d:52:07:55:05:f1:ed:1f:0e:20:cd:25:71:2f:dd:
91:ba:70:b0:b4:60:48:00:87:39:a9:3f:db:b2:cf:
25:fb:38:eb:b5:82:a6:ba:d0:99:89:a6:27:ff:16:
8d:13:dd:f0:34:61:30:15:bf:cf:de:e6:61:cb:a0:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:6F:2D:CA:3B:12:10:4F:7E:54:32:3E:29:E1:29:1E:7B:2D:53
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:73:96:58:3b:90:17:19:3b:6d:22:f7:2e:fc:f5:ab:87:66:
b7:2c:5f:64:da:05:34:ee:75:f3:53:80:7c:25:78:24:6d:0b:
25:d7:80:3a:9b:11:af:0e:84:6d:46:fc:5a:61:e2:50:80:76:
cc:05:12:c6:ed:11:c4:e9:31:c4:5a:f3:25:f9:b7:6a:19:70:
44:73:0b:06:46:76:fe:67:c7:76:3d:01:32:39:fd:49:84:42:
bc:ad:99:95:ca:8e:6c:02:c0:d6:0b:9e:d1:92:02:4a:0d:3b:
5a:81:7c:66:b1:ca:ae:20:0b:ae:2d:fa:8d:ab:88:a1:9a:ab:
21:ed:3f:3e:7c:5a:c0:59:df:45:96:f3:93:ae:60:41:8a:9b:
13:19:43:9d:7e:66:dd:a1:89:04:22:5a:de:05:79:25:f7:78:
df:c7:ed:bc:9d:2e:b3:8e:4f:10:02:51:30:9e:58:21:cb:b9:
f5:04:0c:c8:05:df:c4:08:e5:4b:c8:ed:0d:7b:bb:fd:89:3b:
54:c0:1f:a8:70:5f:01:ce:02:5b:82:0b:ff:10:5e:1b:1b:b3:
66:0a:84:0f:de:da:c6:3f:e6:fa:bb:98:66:be:0f:77:e0:c6:
d5:17:a8:1d:41:7b:b2:0d:24:c3:3f:30:60:c3:72:84:bf:1b:
01:9e:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:08 2026 by rpki-client