Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: aiU2haGufP31GGX51XeSkPlJVaWbksL5YGa2a27zxFA=
Subject key identifier: 9F:7C:FF:73:52:37:CD:88:B5:4F:7A:FB:83:21:4E:C2:A3:5B:B7:5C
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 01A1366C5F432BF6042E975C73199DF8ED7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 0B39
Signing time: Tue 13 Oct 2026 18:00:34 +0000
Manifest this update: Tue 13 Oct 2026 18:00:34 +0000
Manifest next update: Wed 14 Oct 2026 18:00:34 +0000
Files and hashes: 1: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (hash: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=)
2: lfMrkwLp7hAwWVEeABAkFyae20g.roa (hash: /+dZbciWTAdNljkvx7xP06l/dJfOWpz054ogX8e4mqs=)
3: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: LfgagNr4PZNkWekkvTnb7vIQTBG7mnOl9IgCWjpC+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6c:5f:43:2b:f6:04:2e:97:5c:73:19:9d:f8:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Oct 13 18:00:34 2026 GMT
Not After : Oct 14 18:00:34 2026 GMT
Subject: CN=9f7cff735237cd88b54f7afb83214ec2a35bb75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:00:b8:92:63:98:fc:c5:41:c8:28:4f:78:
5a:5c:7c:ad:22:2a:44:0a:7c:d5:de:cb:9a:f9:e4:
8d:21:3b:55:a3:bb:71:d8:80:d0:d4:9b:de:3a:3b:
1e:ae:12:38:13:20:48:80:3d:b4:ff:2b:70:8a:95:
29:fa:d3:68:7e:16:44:20:53:77:6d:3d:77:25:73:
83:d2:25:db:f0:4a:80:4f:29:8b:0b:f2:5e:f9:c6:
f4:af:5a:82:b0:ba:8c:25:e4:2e:dd:17:4b:31:1a:
55:38:65:51:8e:09:07:49:36:a8:d0:46:4c:0e:e9:
07:de:fa:03:a5:53:c5:a0:1e:b9:4d:9b:8c:2d:79:
85:1d:13:8e:cd:d6:be:63:47:6f:9e:38:5b:bd:90:
0b:bb:fa:fc:72:ec:76:70:00:a8:46:5b:8d:b4:34:
dc:bf:60:8d:18:99:37:84:9c:c9:35:b3:2d:e2:a9:
46:65:8d:b1:35:f8:e1:02:a9:ce:9e:22:dc:e9:6b:
6c:2c:c9:f0:8f:c9:eb:dc:b1:09:b7:77:72:ad:e1:
64:d1:0c:b6:cd:1a:a4:a9:e8:70:a5:11:a1:54:5b:
61:10:5c:6d:db:bf:06:a8:f9:a1:a6:ab:b5:9e:6b:
74:86:cd:76:4a:1c:65:7b:84:73:e1:87:a1:10:cc:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:FF:73:52:37:CD:88:B5:4F:7A:FB:83:21:4E:C2:A3:5B:B7:5C
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:88:a9:b6:87:4d:37:ce:1a:b5:5b:2a:2e:a1:0f:ab:a7:7f:
2d:2e:7d:62:c3:7e:f4:2c:32:39:fb:26:fd:72:44:2c:35:b1:
df:f0:22:a7:76:4a:f9:41:02:ed:8f:ed:39:8f:c7:62:00:58:
fb:5e:48:c7:93:f6:e2:7e:44:61:30:b9:e9:ca:7f:48:3f:85:
61:fb:c0:00:47:27:85:ac:a4:14:64:4d:0a:11:7e:17:a1:66:
a4:88:cb:c2:71:dd:b0:a2:f8:84:d5:21:1e:85:00:7d:72:cd:
9b:fd:43:36:cc:66:fd:64:6a:1a:ee:4d:5c:41:00:b8:6b:13:
9b:df:9c:af:55:92:59:cd:27:e0:e8:ce:ee:a9:e0:ad:26:f3:
8f:35:cb:bf:4d:4c:e1:f5:00:c5:70:b4:44:4b:6e:85:41:21:
87:fc:c4:d5:02:cc:16:92:d9:bc:12:90:fa:ba:31:c1:71:74:
99:ad:7c:83:65:a2:ee:cd:46:2c:d2:09:93:b2:d7:9d:eb:be:
2b:ee:59:d3:26:59:d4:40:de:f8:98:5c:de:d5:d7:46:d8:e1:
74:a5:ae:42:fc:b2:d7:41:75:9e:30:9e:03:a9:b8:d3:71:cf:
20:6a:1e:75:9d:b5:4e:75:58:99:25:57:c4:4d:2f:6c:b3:a2:
78:fc:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:01:03 2026 by rpki-client