Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: JjGctVswk48e6a+h81BpC4IGBAGWe/3yKlRlDefOO1g=
Subject key identifier: 29:41:A4:3C:34:D9:EB:F0:24:01:68:1B:B6:70:DB:CF:01:03:0D:23
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 019D273ABCDD30D8453573102AB6EDEC16CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 091D
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: FT8Fb1uEN5rTmEy+J3aH1gxUmd9XxTj45+fUlAa5VBw=)
2: wVNpm-1J5NTytyjtGnQX6j1BkDg.roa (hash: QtG2sWben/myYIuxaHxhV/nd4dmlFHcHKMY3zMny2lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bc:dd:30:d8:45:35:73:10:2a:b6:ed:ec:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=2941a43c34d9ebf02401681bb670dbcf01030d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:02:65:96:cc:f4:f0:f4:04:50:03:ee:da:
d2:27:c4:52:18:c5:6d:29:4a:6b:b6:d4:91:d3:0a:
96:26:64:63:53:fb:48:3c:ec:6e:c2:5a:5d:19:30:
e7:94:c2:06:c7:e3:6b:80:81:44:50:f2:fd:f4:fd:
0f:f1:7b:d6:4b:73:75:77:f8:dd:b0:61:4d:7e:47:
bb:31:54:ae:c5:57:23:a1:cf:28:05:27:a7:ca:16:
97:99:3e:0a:5f:49:c8:4e:c7:60:6a:fb:74:e4:e0:
7e:85:83:63:c7:cf:d8:33:6b:81:c3:b3:51:f1:1f:
9e:ee:72:d8:f5:e8:f4:6d:94:f7:5b:63:c7:a5:7e:
5c:66:f4:0a:84:ce:c5:ef:10:91:bb:50:ab:06:b9:
40:c2:60:b7:9a:01:35:2f:ab:72:48:39:08:4e:63:
35:c7:e1:dc:58:b3:bd:db:cf:5b:04:e1:21:eb:dc:
b1:be:4a:1a:61:12:46:b8:63:cb:d7:2e:17:41:4a:
b0:97:56:1f:cd:a4:c4:27:9f:c6:aa:fe:72:9f:5c:
4d:83:dc:82:fe:4a:f9:c8:6e:6d:f3:e0:ca:ac:3a:
86:8b:5f:67:ce:ad:c7:57:50:85:27:6f:1c:31:ad:
ae:8b:48:00:e5:f2:81:64:64:01:c6:a3:8a:25:23:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:A4:3C:34:D9:EB:F0:24:01:68:1B:B6:70:DB:CF:01:03:0D:23
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:82:c7:8f:9a:1c:27:cf:6d:92:a1:9e:f3:f9:38:5a:6d:0d:
fb:9b:42:dd:15:d2:95:0a:8b:d4:ac:95:ff:4a:44:17:1f:b5:
14:2e:6f:cf:7d:b3:da:52:34:08:31:5d:16:da:91:aa:cb:bd:
3a:9a:19:f7:cc:d7:06:49:d0:79:a5:54:ac:f5:19:5e:f6:43:
d7:d3:2b:46:2d:85:51:e6:59:47:ed:bf:8b:24:65:bc:3e:8f:
e9:c8:3b:0d:7a:b0:2a:ff:59:71:8b:66:b1:a9:b0:44:8c:60:
93:c3:37:f8:59:be:55:eb:fa:7c:b8:40:b4:2a:73:75:d6:4e:
4d:0b:8b:f4:2e:f2:e8:ce:37:73:50:b3:2e:57:3a:ae:f1:23:
a9:7e:b0:71:76:c7:a1:02:5a:f4:16:b0:1b:06:08:8a:57:d0:
0c:07:f0:f0:78:49:81:58:d5:bc:6d:14:48:74:d1:4b:72:41:
c2:2e:b2:f1:53:be:c8:91:f9:ca:89:df:34:68:7f:e7:c7:9b:
60:da:5e:41:2a:4f:16:0c:3b:8c:a7:6a:30:15:73:4b:ee:31:
f2:79:3f:63:cb:aa:42:15:55:6b:5f:66:b7:04:2f:c4:a1:1b:
21:15:e7:7e:28:c3:84:ff:c1:1a:f3:91:fc:60:db:9b:c3:2c:
71:82:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:52 2026 by rpki-client