Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier: 0NGA5Ylp76quZxmydw+8ODg2big2TJNL9LLaCdk98yY=
Subject key identifier: D2:42:AA:94:4D:10:5A:C4:ED:B7:3D:F1:92:77:62:FD:08:94:6A:F4
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 019F91A3872F8C7631FFDC230E303F1D88E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 01:00:40 +0000
Manifest this update: Fri 24 Jul 2026 01:00:40 +0000
Manifest next update: Sat 25 Jul 2026 01:00:40 +0000
Files and hashes: 1: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: bkzaNc+SvOlHZtibHoHDEb739ylKTYk+/zdB/rp3z7M=)
2: xeXCbVKY1aKRd_SKGWbXuWly3_c.roa (hash: J4/1RyC+BzOI0zgjFlq8W2+RGutyBb0pM27EguLaw5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:87:2f:8c:76:31:ff:dc:23:0e:30:3f:1d:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Jul 24 01:00:40 2026 GMT
Not After : Jul 25 01:00:40 2026 GMT
Subject: CN=d242aa944d105ac4edb73df1927762fd08946af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:f4:c8:8b:28:5a:76:83:aa:41:74:da:d3:
05:c6:92:1c:59:71:fc:70:d4:c4:9d:7b:81:96:d1:
b3:55:8d:4d:d1:2d:9a:73:92:cf:13:72:05:b8:c7:
82:92:6f:4c:25:31:d3:34:73:81:4a:fe:53:3f:4d:
e8:b5:35:55:e4:72:54:8f:05:cf:0f:45:85:61:60:
27:f3:2f:ff:a2:88:79:cc:3f:e0:9c:2d:cc:59:27:
71:ea:13:c2:8c:61:c2:ea:29:50:07:cc:f4:6d:a8:
d9:3e:e6:2f:be:90:ab:28:f8:56:fb:bc:67:02:25:
e2:7d:b8:8f:d6:2c:80:05:1b:07:e0:a2:55:05:10:
c4:11:d3:3e:99:8a:4c:3e:b9:25:13:ef:e2:3d:76:
a2:30:53:3f:d4:91:61:94:35:7b:0a:0f:1b:b7:77:
0a:4d:27:36:8a:84:e6:65:a2:9f:14:0a:c1:d9:10:
b9:a3:f2:ba:a4:b8:27:10:3d:4a:2e:f6:cb:d7:63:
2e:ab:75:b2:fb:a8:c5:bd:69:c2:b3:e9:5e:4d:98:
d4:39:fa:5b:b0:35:49:24:47:72:62:f4:95:32:b1:
c7:cf:d9:22:89:74:bb:9d:e0:61:cd:8e:94:38:41:
c9:3e:6f:45:63:b9:ca:34:79:5f:5d:a1:34:57:38:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:AA:94:4D:10:5A:C4:ED:B7:3D:F1:92:77:62:FD:08:94:6A:F4
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e4:eb:d7:3b:d5:79:3e:86:e9:b2:c5:9d:47:c3:61:a2:c1:
a2:be:47:d8:ab:fd:a6:38:b1:c2:c3:47:f5:eb:c3:e8:97:88:
d2:07:b5:8e:a2:66:7b:ad:f1:6a:e5:0c:8a:4a:bb:26:f6:33:
58:6d:46:12:f9:50:d8:2e:b9:7a:53:81:30:74:ca:a6:8f:25:
48:df:60:52:03:15:4f:f9:3e:5f:cc:03:ea:f8:09:7c:22:c5:
9d:cc:f6:16:67:e4:4e:ad:39:06:38:92:68:08:a0:ab:1b:e1:
74:e3:3b:b7:9d:b3:75:7c:01:6a:c5:60:30:a8:c7:92:fb:43:
c2:f8:4e:ca:18:7b:58:a2:3b:06:63:d4:19:7a:1c:1a:01:d9:
ab:02:d8:41:fa:35:ae:12:fa:45:40:0a:ec:f7:78:1e:6c:a6:
27:44:22:86:d9:a0:b8:62:52:49:a7:8d:4c:6e:9c:2c:f5:07:
01:0f:f2:74:3b:82:bd:4e:f4:49:6b:20:4e:fa:61:7a:c2:ad:
0e:40:68:9d:4b:46:3c:08:2e:7c:9f:b8:bd:4a:03:d3:1d:bd:
e1:cf:13:31:ed:98:7f:10:56:a9:97:8f:41:06:5b:7a:4a:fb:
1c:c5:3e:94:2a:ec:66:95:06:7c:88:c5:ff:86:4d:8e:05:0b:
f3:a7:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:19:19 2026 by rpki-client