Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: oX4xyS8ytO3wotV2MuqNLoJWDw7rJNDDPRGChU6RyO4=
Subject key identifier: C0:AC:9E:E9:FF:AF:CE:7D:8E:B8:05:98:A9:0F:5A:A1:CC:1C:92:29
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019F946D5410D37144CD5B12A851CFF807AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 14:00:20 +0000
Manifest this update: Fri 24 Jul 2026 14:00:20 +0000
Manifest next update: Sat 25 Jul 2026 14:00:20 +0000
Files and hashes: 1: FyAQ7KHBcpPkx5U9fofY7rznr3Y.roa (hash: 8O/estrVT/MzJfWmoEYtW+DS6mw0QdLpZG0YuaeNrsU=)
2: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (hash: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: 2/xOvztN4EBj3KcLEN2JIxgbUqajuE04vEFVtC5mgLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:54:10:d3:71:44:cd:5b:12:a8:51:cf:f8:07:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jul 24 14:00:20 2026 GMT
Not After : Jul 25 14:00:20 2026 GMT
Subject: CN=c0ac9ee9ffafce7d8eb80598a90f5aa1cc1c9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:1a:52:62:dc:bb:b9:96:6c:91:2e:27:6b:
67:b1:e5:19:96:28:a2:55:d8:e0:0c:cf:5a:e0:19:
91:f9:91:39:74:ab:55:d5:b0:3d:ed:1a:2f:f3:41:
95:58:bd:e6:a0:c1:e4:2e:58:1b:b2:82:54:7c:2c:
45:2f:51:e2:7b:43:f7:1f:e1:9e:66:8f:b2:94:08:
ec:5e:ba:2a:50:16:e6:ed:07:34:50:a5:43:38:fd:
6e:f5:6c:ad:6f:d4:12:97:65:88:8a:d8:30:51:8e:
ca:b3:5e:0e:e4:7a:b4:54:2a:30:de:5c:d2:32:61:
cd:0d:97:a2:8b:a1:d4:9d:5d:a0:79:20:cf:78:6f:
b9:ee:d8:81:ae:97:5e:02:21:ad:05:e8:af:96:be:
58:e0:97:91:6e:ea:c5:45:57:5d:18:1c:01:4b:1d:
1f:f6:e8:05:2f:55:57:12:5c:6f:41:08:ae:19:6b:
22:e6:7d:13:52:c3:ed:af:02:82:b4:70:92:98:b9:
e6:fa:b3:6f:c7:f8:20:31:a9:f9:13:61:61:57:18:
ef:d2:15:c0:8a:04:fb:14:94:39:93:6b:ac:ae:d3:
ea:de:dc:7e:7b:08:14:17:f6:80:e7:1a:f3:37:15:
db:2c:b2:08:98:ed:db:cf:3b:7a:06:38:39:7a:4f:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AC:9E:E9:FF:AF:CE:7D:8E:B8:05:98:A9:0F:5A:A1:CC:1C:92:29
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:a5:0d:c0:b6:20:9e:2e:f2:95:46:a1:f0:83:0e:70:b6:
96:70:16:4b:2d:b8:75:0f:34:c8:15:c0:1d:ed:f5:56:eb:7a:
32:d1:8e:53:14:b7:76:a8:b9:8c:b9:42:ae:01:70:60:e0:86:
76:24:bb:6d:b7:c9:a9:aa:d8:b7:69:07:ec:14:34:f8:bd:ab:
6c:30:9c:c0:72:dc:4c:33:ae:52:d6:7e:df:d7:9d:6f:0f:57:
b8:89:c2:f7:94:f3:3c:4b:50:0b:16:5c:11:24:02:44:12:4b:
ee:b6:08:11:b3:d3:22:8d:d8:14:6d:e3:ad:5c:92:ee:6a:80:
4b:3e:fd:51:e9:8d:be:c4:cb:0e:7f:d6:18:cb:00:c6:7f:ba:
4d:27:fd:a1:3f:70:01:89:9a:86:2b:f5:07:cb:cd:b4:16:b3:
bb:b1:af:9f:da:f4:64:a6:5d:b6:62:07:92:2f:a2:7e:7a:ee:
38:0c:90:f8:a4:8c:2f:d9:13:e6:5f:be:d5:39:0d:78:84:45:
08:f7:19:f1:75:ec:9c:2d:a7:dd:09:40:32:5f:92:01:e4:50:
6a:30:bd:df:81:d8:6d:89:7d:f4:72:20:9a:25:fe:94:19:06:
e8:8d:8a:d8:4b:00:6a:29:a1:eb:52:8e:bc:e2:94:c9:8d:08:
c5:0c:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:14 2026 by rpki-client