Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: hag8JELD8GrnAhtGViwf9pO6V6NRmDpdKG0ttjy43Fg=
Subject key identifier: 21:16:A7:52:8F:4F:8D:1D:68:EF:EF:35:6B:05:7D:69:5B:5A:16:D5
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 019E209172A42615C719351542BF19CB6750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 099F
Signing time: Wed 13 May 2026 09:01:03 +0000
Manifest this update: Wed 13 May 2026 09:01:03 +0000
Manifest next update: Thu 14 May 2026 09:01:03 +0000
Files and hashes: 1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
2: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: t26zK1i7Ppc0MZvltCUnYjqKfZsQRpR3teY4DXyJkKI=)
3: wVNpm-1J5NTytyjtGnQX6j1BkDg.roa (hash: QtG2sWben/myYIuxaHxhV/nd4dmlFHcHKMY3zMny2lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:72:a4:26:15:c7:19:35:15:42:bf:19:cb:67:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: May 13 09:01:03 2026 GMT
Not After : May 14 09:01:03 2026 GMT
Subject: CN=2116a7528f4f8d1d68efef356b057d695b5a16d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:5a:bd:07:f1:de:c6:2b:85:1f:f3:99:09:
8f:35:24:e9:75:60:4d:c4:83:73:17:ab:cc:c2:05:
b8:9b:0c:5a:23:12:5a:be:5b:98:15:7f:d8:58:81:
3c:03:13:fa:3f:be:3f:9c:be:b0:39:eb:07:b4:a5:
6f:0f:1c:ba:cc:17:dd:cd:16:12:73:01:4a:6b:e2:
5d:25:80:a0:c8:d6:90:76:6f:ad:77:55:3f:dd:2c:
84:51:d5:23:84:c9:7a:62:5f:71:99:90:47:98:d9:
f7:e6:3f:f6:7f:ca:d9:57:ef:44:b2:56:79:c2:35:
40:17:8b:b0:42:c4:76:f6:8c:f5:85:38:a5:bc:c5:
2c:f9:6c:a5:61:13:83:5e:2e:a1:30:b3:cd:d8:50:
08:07:5c:12:aa:72:1e:a2:dc:7c:2f:1c:40:9a:f8:
79:65:91:c7:57:7b:1b:ac:f5:8c:05:eb:2e:c7:0f:
a2:f3:d9:41:8b:48:97:de:26:04:4f:c8:95:ff:39:
ba:59:aa:76:16:fa:e6:6f:03:1d:38:7f:d2:be:26:
ed:a6:d0:8e:84:9b:0b:00:58:28:5c:61:5c:7f:12:
26:ed:d3:e6:08:69:15:72:27:85:1a:52:0e:bd:d6:
e8:4c:8f:9d:e5:f3:15:52:ab:87:50:2c:e5:39:53:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:16:A7:52:8F:4F:8D:1D:68:EF:EF:35:6B:05:7D:69:5B:5A:16:D5
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:66:e1:1f:79:21:d0:59:fa:15:7d:7b:bb:93:a8:c4:30:13:
0e:9f:94:c9:52:45:9a:1f:0d:0f:3c:28:8b:21:8c:29:50:85:
3e:60:15:0d:fe:73:34:c7:a9:55:87:23:f3:cb:3e:04:33:f6:
2f:80:35:86:08:ef:6e:d3:9f:54:28:f9:2e:45:7a:02:c1:df:
d8:d9:79:53:a8:2c:fb:43:5c:9f:ca:ab:fc:b7:1d:81:a4:7e:
af:3f:70:c5:e2:23:34:75:55:fb:d7:18:16:06:b4:5f:00:f5:
b8:33:3f:c1:95:c7:eb:2c:24:0f:2e:ae:bc:77:a2:27:0d:90:
d8:5c:68:d3:cf:90:c9:51:6d:85:2a:65:03:43:00:04:15:87:
a4:f9:2f:4d:93:b3:6d:48:09:07:c1:15:62:8f:7a:da:33:6f:
91:2d:b0:f2:ec:21:85:f0:33:66:d2:2d:63:de:42:b3:84:c1:
e0:94:24:db:e4:d4:cd:69:8f:68:b6:91:5a:43:f8:8e:e5:f0:
27:4c:98:ba:49:67:60:26:e8:de:8f:7d:a7:6a:79:6f:10:11:
67:bc:3e:f3:75:70:be:2b:f0:61:c4:60:ea:8d:bc:93:61:bc:
40:f0:1a:59:67:17:29:6d:6e:eb:2a:60:0d:9d:c2:80:31:5e:
07:73:e4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:43 2026 by rpki-client