Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier: 4e6cs1uAMEd/uGoQEuhiirsSf1gxnR3eqVr8jHiMS9Q=
Subject key identifier: 27:E8:5A:5C:1A:10:18:7B:9F:59:C8:3A:EC:0A:45:C6:06:C3:3F:AF
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 019D2997A30B3F1D176CFACAECC036B181F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 10:01:36 +0000
Manifest this update: Thu 26 Mar 2026 10:01:36 +0000
Manifest next update: Fri 27 Mar 2026 10:01:36 +0000
Files and hashes: 1: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: Tw5FezCSME4hCy+0/qUX5Iw9zLO9KBqg+PRynWipP70=)
2: xeXCbVKY1aKRd_SKGWbXuWly3_c.roa (hash: J4/1RyC+BzOI0zgjFlq8W2+RGutyBb0pM27EguLaw5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a3:0b:3f:1d:17:6c:fa:ca:ec:c0:36:b1:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Mar 26 10:01:36 2026 GMT
Not After : Mar 27 10:01:36 2026 GMT
Subject: CN=27e85a5c1a10187b9f59c83aec0a45c606c33faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:4c:f3:ba:21:a9:2f:3a:22:d0:ae:38:96:
23:72:7c:99:d9:12:46:aa:5d:97:81:38:40:d2:f5:
a1:be:81:f6:9a:b6:a3:1b:78:35:7f:cd:bb:0b:99:
ae:66:1d:bf:ea:96:5c:c9:cc:f3:20:fa:f8:56:b5:
31:8d:a7:85:76:20:95:4a:f1:83:27:37:9c:42:42:
61:94:55:cd:74:57:67:58:34:0c:9a:e4:96:dd:d6:
95:e8:b8:83:94:60:e2:d9:dc:11:9a:75:ce:2f:0e:
1e:94:d7:77:dc:93:7d:5a:79:be:53:d7:3d:f8:3d:
93:53:df:65:ed:e4:c5:ab:79:8e:c8:a8:26:b5:b1:
64:8c:56:4b:5a:63:ad:de:78:6a:c4:e8:1c:66:9d:
0d:56:0a:8f:1f:e6:45:fd:04:82:4c:eb:f5:a8:fa:
80:2c:16:56:30:d7:c1:05:b5:10:14:ef:51:29:3c:
9b:0a:0e:86:3a:7b:f0:bd:fb:f5:ac:e1:c7:08:5e:
98:17:06:3e:98:da:d4:f2:40:82:7a:c6:1e:7d:1a:
68:8f:06:d0:a6:63:7d:a4:44:5a:be:6a:e8:3c:b8:
f3:cc:e7:e3:1c:1d:fb:96:9e:67:85:f5:b0:e2:96:
0f:47:ab:eb:45:98:74:be:d8:75:b3:d5:18:7d:61:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:5A:5C:1A:10:18:7B:9F:59:C8:3A:EC:0A:45:C6:06:C3:3F:AF
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b6:6c:0c:83:9b:a6:0a:2e:af:dc:b1:28:eb:52:52:3c:5e:
a5:61:c4:a8:b9:6e:20:05:5e:44:7f:6d:66:9a:ef:bd:e7:73:
94:7c:f9:0f:4c:c3:94:04:f2:b4:ae:81:ee:d7:d0:63:78:9d:
43:20:43:ca:5f:e2:98:57:27:22:2b:92:70:de:5d:91:74:25:
d4:7d:7b:ed:ef:1f:b1:20:33:b4:6c:69:30:b8:9a:24:cb:0d:
f5:97:30:a6:a3:a9:53:19:78:09:56:3e:c6:7b:b6:06:2a:ae:
94:06:66:3c:4f:ce:38:3d:46:08:28:08:a3:fe:1f:51:36:a3:
09:43:76:23:6a:7c:78:d2:28:81:ef:cb:ae:f5:35:15:0c:be:
94:3a:84:51:35:b0:52:3e:30:89:13:71:25:59:8e:5b:8e:fa:
bf:34:d4:a7:ea:1d:11:b3:ca:7b:28:83:f4:71:50:01:5d:7b:
0f:cf:0b:31:99:85:cb:07:40:ba:a6:bd:78:f7:bf:c7:a9:0f:
1b:e4:1c:d2:e1:32:8e:0c:98:01:86:99:7c:87:af:5d:d7:7a:
2d:8a:e3:6c:a4:90:c3:e3:69:2e:58:e7:dc:95:29:a9:2b:54:
c2:5d:a2:73:c7:04:a8:7d:68:f7:0d:5b:28:47:fb:bd:38:ab:
e8:a4:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:45 2026 by rpki-client