Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: unT2VfTUQ3XQuNhd4ssTlu9z6nuKeoa3cD+jQsu+BIM=
Subject key identifier: 8B:8E:30:EE:A7:B1:25:59:5C:F2:16:36:E5:6D:9A:87:10:FB:6B:A9
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 019CAD908CA9532E9365077BEA1F016D87D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 08DE
Signing time: Mon 02 Mar 2026 08:00:57 +0000
Manifest this update: Mon 02 Mar 2026 08:00:57 +0000
Manifest next update: Tue 03 Mar 2026 08:00:57 +0000
Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: 6a8WpnZ62l907kRZ3rGr7bQv1krSVRHDtXb8xRqN/2c=)
2: wVNpm-1J5NTytyjtGnQX6j1BkDg.roa (hash: QtG2sWben/myYIuxaHxhV/nd4dmlFHcHKMY3zMny2lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8c:a9:53:2e:93:65:07:7b:ea:1f:01:6d:87:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Mar 2 08:00:57 2026 GMT
Not After : Mar 3 08:00:57 2026 GMT
Subject: CN=8b8e30eea7b125595cf21636e56d9a8710fb6ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:a2:e6:3f:79:8c:42:e9:aa:17:74:eb:a2:
93:31:87:ce:9e:cd:68:65:d2:eb:ae:bb:0a:5e:72:
cf:37:78:89:df:00:49:11:5d:45:d2:6a:68:90:0c:
3b:72:ca:4e:29:36:34:b6:83:bc:fd:d3:0e:72:58:
30:d1:92:32:0b:7a:26:37:0f:a7:77:a8:18:e2:01:
11:f3:20:77:00:27:cb:68:dc:97:15:22:51:1d:0e:
44:05:23:99:9c:80:01:1f:19:2f:f2:bf:a3:55:93:
e6:30:45:39:f7:63:85:fc:39:ed:6e:e7:7e:21:f9:
be:84:08:a2:b0:53:22:fd:c4:95:d3:e3:92:89:8d:
e0:49:7a:36:47:80:39:1c:40:f8:7e:31:01:a5:59:
31:ac:b1:b2:98:ba:e9:91:9d:d5:75:ac:9b:06:65:
3b:0f:37:ea:74:93:67:b5:a2:89:f4:5a:8a:35:50:
6d:71:1b:89:12:c3:99:3a:85:df:ed:70:40:fa:1f:
55:0e:69:79:fe:e0:93:3b:f7:d1:57:34:52:2b:28:
43:3b:28:97:3d:23:57:60:38:45:40:70:1b:56:93:
34:d9:cf:d6:5d:75:b8:6a:f8:34:1e:9c:7c:9a:35:
13:d7:1a:b9:81:18:d2:2d:dd:f3:0e:03:9c:90:cc:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:30:EE:A7:B1:25:59:5C:F2:16:36:E5:6D:9A:87:10:FB:6B:A9
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:0b:c9:53:e0:76:4a:fe:c1:7e:a2:fd:67:c6:14:ab:10:
f6:64:40:08:b3:6f:78:52:5d:4e:24:3e:75:b3:f5:28:a1:f8:
60:25:9d:ca:94:51:e5:e6:4d:35:f4:f3:c5:d2:35:5f:42:e5:
3e:f5:fc:da:b3:f9:16:9f:87:49:c1:fb:3c:d6:9b:77:7a:ff:
d8:25:9b:0b:d3:c1:be:db:3d:a5:5e:f4:04:3c:3c:ff:ef:cb:
93:a1:29:6c:2b:42:81:e3:c7:27:74:1c:82:98:25:15:55:dc:
65:3b:31:a9:74:a2:8a:4f:fa:fe:13:54:e2:64:f4:61:b7:39:
0d:8b:3e:bb:c0:75:90:50:1e:39:b0:e4:2b:3b:97:22:c5:3e:
87:43:d3:55:c6:c1:b0:e3:16:87:90:17:00:be:07:8f:38:c2:
9e:09:6b:63:5b:00:44:e2:2f:62:e9:71:70:e7:d8:7c:a4:dc:
09:17:90:53:1c:62:29:75:98:79:3c:21:1d:91:21:06:e3:b7:
c3:c7:47:d5:8b:97:93:ad:21:dd:5a:54:88:b9:f9:e9:83:ef:
e2:11:81:82:e9:71:64:93:95:23:b2:21:70:a8:59:95:02:eb:
f0:6e:b6:34:aa:11:b3:95:cc:13:65:b8:81:89:60:1c:4d:f5:
58:0b:6f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:17 2026 by rpki-client