Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: W4Pc0wtUHo5RMLq9CcaiwVHK5xjCPlgLtVlENv7soiA=
Subject key identifier: 0A:8E:C3:92:20:9A:F8:2A:CC:99:F3:6C:62:F8:24:20:74:4E:B5:1D
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 01A13C37466FA3E2711648B8E979F7867541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 0B3C
Signing time: Wed 14 Oct 2026 21:00:17 +0000
Manifest this update: Wed 14 Oct 2026 21:00:17 +0000
Manifest next update: Thu 15 Oct 2026 21:00:17 +0000
Files and hashes: 1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
2: lfMrkwLp7hAwWVEeABAkFyae20g.roa (hash: /+dZbciWTAdNljkvx7xP06l/dJfOWpz054ogX8e4mqs=)
3: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: ANVmNxzq+8gylBEbc0yrpkcgnQX8Q4AW9+IXBV/Txhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:46:6f:a3:e2:71:16:48:b8:e9:79:f7:86:75:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Oct 14 21:00:17 2026 GMT
Not After : Oct 15 21:00:17 2026 GMT
Subject: CN=0a8ec392209af82acc99f36c62f82420744eb51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:cd:e3:f7:68:2c:0e:ae:39:98:ea:37:88:
06:2b:ce:f2:ca:7c:8f:78:61:16:f7:99:72:c2:3b:
91:43:82:6b:fd:f6:4c:ec:56:03:e8:02:2a:2d:1d:
c6:79:67:50:3a:71:4d:36:24:69:bc:c1:db:d5:0c:
bd:c2:90:d0:36:5b:88:40:da:ab:20:c9:62:dd:7e:
9e:ba:91:ea:81:f3:84:39:c8:0e:dc:5b:5f:28:75:
a6:d8:48:1b:51:6e:59:9b:ea:62:1d:d0:a5:ab:bd:
00:4f:d8:71:00:2e:7d:61:dc:fe:5a:36:7a:96:e3:
43:95:28:68:d1:7c:5e:79:ee:e6:14:d8:d7:b6:a9:
b4:ee:31:90:bd:34:02:9e:0e:83:3f:ec:b4:16:ef:
12:19:4c:8d:d8:ce:90:83:b0:24:a0:24:b2:5f:a1:
f5:6f:d1:0e:98:42:53:c2:96:1b:db:74:ed:48:dc:
4d:a0:b0:42:e3:23:ae:81:95:8c:74:7e:c7:60:dd:
ba:38:2e:35:82:90:37:07:2f:ec:e1:e6:a2:ac:51:
80:3d:d7:37:8a:94:af:54:42:51:fa:dc:5d:29:65:
71:ab:c0:ad:e9:b2:b7:5f:54:37:f4:bd:6e:e1:36:
f4:54:db:ce:8d:db:d2:0d:3a:fb:e2:e0:de:6c:e2:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:C3:92:20:9A:F8:2A:CC:99:F3:6C:62:F8:24:20:74:4E:B5:1D
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:45:c6:76:54:09:b3:fa:45:84:3b:8a:7f:59:e0:16:3c:ad:
2c:4c:ec:a7:07:9c:71:75:31:74:5f:6f:f5:49:79:93:c3:81:
e3:f3:94:65:f3:11:0e:ce:6f:78:c7:24:1f:59:3f:3d:b7:c9:
a7:7a:fe:7a:f5:be:b1:04:42:4d:d7:73:78:9c:8c:5e:9b:79:
a6:f7:ae:5d:50:1f:9d:8b:59:85:97:13:96:91:50:a4:e1:5c:
0e:4a:0e:4c:da:6b:28:b7:43:10:a2:70:fa:c6:65:4e:de:e9:
61:c2:e5:01:9d:d2:1c:7c:83:c6:f4:3d:ae:d2:25:9e:e7:3c:
d8:e0:3f:70:ab:c2:ff:71:06:ff:21:6a:4e:b0:07:bb:13:27:
4e:f4:06:57:b0:7a:8b:16:8a:7c:3f:27:24:df:85:66:d4:9b:
c8:70:93:da:e1:11:d9:0a:ff:19:a6:7c:a1:ae:a7:29:3a:82:
f6:01:ee:fa:9e:86:f1:31:08:3b:b6:9f:98:e9:09:fe:00:9d:
1e:d9:f2:38:e3:29:e4:d1:3e:cc:fe:c0:58:a3:ae:d6:60:22:
74:19:9a:59:27:9d:88:26:b5:e9:6e:d0:97:ca:15:30:c2:b7:
79:24:d1:9f:dd:33:1f:6d:7e:f5:16:a2:15:38:06:49:cd:e3:
b8:2c:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:20:53 2026 by rpki-client