Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: iAVTYZTebBwJXndm0SM0JuSRFLu7fSgfJDJJhihAzu4=
Subject key identifier: 9E:75:38:66:C7:7D:90:CB:F0:09:A0:AD:AF:3F:60:9E:17:DA:8A:C0
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 01A1328FB2D61ABDE8EB6A96BCDD96F14BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 0B37
Signing time: Tue 13 Oct 2026 00:00:40 +0000
Manifest this update: Tue 13 Oct 2026 00:00:40 +0000
Manifest next update: Wed 14 Oct 2026 00:00:40 +0000
Files and hashes: 1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
2: lfMrkwLp7hAwWVEeABAkFyae20g.roa (hash: /+dZbciWTAdNljkvx7xP06l/dJfOWpz054ogX8e4mqs=)
3: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: QXh5LfvbvZ/SEQjoayMkZiIX9BkD6XuydZhdvWtHA94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:8f:b2:d6:1a:bd:e8:eb:6a:96:bc:dd:96:f1:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Oct 13 00:00:40 2026 GMT
Not After : Oct 14 00:00:40 2026 GMT
Subject: CN=9e753866c77d90cbf009a0adaf3f609e17da8ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:a4:7a:4f:2b:ba:ff:fd:b6:e8:53:45:79:
97:9e:ad:0d:30:45:54:a5:6e:55:d4:bb:bc:d5:46:
53:f4:f7:fa:52:d1:86:d0:c7:0a:5e:60:58:4f:db:
67:70:d6:70:67:30:24:f8:e0:4a:11:7e:28:e6:0c:
31:d1:a7:67:c6:45:bb:da:1b:f0:38:e7:48:a9:aa:
61:d3:b9:ec:cc:98:9e:e7:27:31:c5:d4:34:14:73:
51:56:7d:3a:99:85:7f:6c:9b:4e:6a:cb:5a:3c:82:
86:6c:f5:d2:18:a0:26:2f:d5:0f:54:fa:e9:3c:e3:
d5:ce:e2:d4:1a:9f:c8:2e:ea:22:0d:c5:5a:9b:df:
d5:09:49:f3:34:90:01:31:36:5c:58:5c:65:55:c6:
d3:fa:08:0a:0b:e9:26:8c:17:9c:e0:57:5f:fb:cc:
67:78:73:81:78:6f:0c:ac:be:2d:b0:9c:a5:5a:ae:
52:6a:58:f2:17:74:3b:03:dc:44:fd:3c:36:a5:ee:
a4:7c:8c:eb:8f:49:aa:f9:5c:42:c4:0d:e0:63:38:
1a:f2:89:af:0f:69:b8:c3:43:cc:ee:db:2b:a4:d6:
2b:16:84:d4:17:ba:d3:bd:06:cf:b5:4e:15:8a:62:
5b:71:34:30:44:9b:f5:a9:4b:a1:f8:2b:14:d3:1e:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:38:66:C7:7D:90:CB:F0:09:A0:AD:AF:3F:60:9E:17:DA:8A:C0
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:48:97:53:86:26:b1:83:12:b8:93:80:3c:eb:86:b0:8d:d2:
1d:9f:61:10:ab:24:77:d5:5f:ba:a1:3b:82:b9:f0:04:29:dc:
48:42:7e:62:2d:f2:d1:17:2e:72:0e:41:0f:b8:36:cd:f9:28:
ff:95:e9:b8:89:72:fa:fa:51:0a:cd:75:89:d0:b9:17:fd:19:
05:7b:a3:db:71:86:8a:93:6f:62:f5:b3:98:48:fb:43:96:23:
67:f0:41:2c:b8:47:14:35:6e:77:3b:ba:12:b4:ca:7f:70:a9:
3a:8e:47:ce:21:b2:58:3e:6f:db:b0:cd:17:ec:37:ca:02:92:
27:49:b6:61:04:27:3d:49:a6:21:83:c8:39:08:ef:2b:b6:12:
a9:25:47:37:78:e3:21:9a:e5:12:0c:be:38:cd:37:35:5a:88:
ef:07:26:6a:ae:89:fd:5b:e9:d7:00:ff:75:8f:d4:5c:1a:26:
a4:d0:21:bb:b2:b5:d4:f4:27:e4:73:8d:42:6d:18:d4:9d:00:
42:0d:e4:61:0a:04:6a:51:33:eb:7f:bf:bc:a3:c2:fb:75:e3:
e2:bf:19:a7:e3:57:5d:7e:b6:28:8c:16:8b:50:ca:ce:54:a7:
a9:1f:ea:a5:05:c5:cd:b6:ae:93:96:8d:a8:85:f1:4b:cc:82:
c4:9e:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:33:55 2026 by rpki-client