Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File: V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier: E2+kKu5g1m5zdQZDB1Qfh4B2k9gGInDp1kzROrcnziE=
Subject key identifier: A7:68:6A:A2:7F:A5:39:29:6C:2A:5A:2A:A5:25:B8:DB:4B:6C:50:71
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 019D2A045B40DB8CD92CEB5B37FC035AC2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number: 16D1
Signing time: Thu 26 Mar 2026 12:00:21 +0000
Manifest this update: Thu 26 Mar 2026 12:00:21 +0000
Manifest next update: Fri 27 Mar 2026 12:00:21 +0000
Files and hashes: 1: Sq8Hay0mGsBowKqwtDZvadunGsM.roa (hash: X7j1mWxjchwdoCNGDPezAH5d5ppHerhR7WmtyOb/ZCk=)
2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: F4P04yp6BOc8sOraScKTESHkj7NFFmElBqb+0zEY9+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:5b:40:db:8c:d9:2c:eb:5b:37:fc:03:5a:c2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Mar 26 12:00:21 2026 GMT
Not After : Mar 27 12:00:21 2026 GMT
Subject: CN=a7686aa27fa539296c2a5a2aa525b8db4b6c5071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:68:76:c8:48:c8:6e:46:b7:3b:7b:15:dd:
4e:bd:59:5d:70:cf:1a:64:8c:1b:f0:63:64:1a:95:
4a:67:a3:05:dc:b4:6a:de:15:e3:29:c3:d7:d5:98:
26:f2:02:5b:70:a1:ae:38:8b:07:70:17:0a:d7:0f:
0b:3d:8e:b5:cb:48:0b:2d:82:c9:6a:fd:a2:28:3d:
15:9d:38:48:8d:67:15:f8:90:dc:c1:5c:ab:61:94:
f3:d7:c5:d9:ec:8a:4e:de:a9:bf:ae:e2:05:99:e2:
f4:8c:61:b4:48:50:91:79:4a:06:4a:de:5f:31:86:
2f:de:d3:cd:b0:12:d7:19:3b:3a:86:cb:c5:b5:ba:
3a:4e:96:24:2f:21:eb:ba:1c:e3:c7:dc:87:74:0b:
96:38:6a:75:8f:4a:3d:70:dc:f9:c0:b7:47:35:75:
08:03:c1:b7:fd:e9:87:74:bf:e7:f8:61:5b:d4:03:
8b:19:3f:00:89:57:2d:ad:cf:f7:31:38:03:74:29:
1b:cd:fc:3f:2c:1a:96:83:43:ce:48:30:c9:31:4f:
20:fa:9c:d9:a9:9f:be:e1:b0:89:74:9d:43:db:b7:
1f:37:ef:b4:33:e2:b2:cb:26:f7:8c:b6:87:c8:30:
95:fd:21:f6:26:74:05:47:e3:18:89:29:a8:21:cf:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:68:6A:A2:7F:A5:39:29:6C:2A:5A:2A:A5:25:B8:DB:4B:6C:50:71
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:11:38:0a:7e:37:62:fe:63:7a:c7:88:ff:51:8f:77:b1:62:
b2:34:7c:56:23:30:83:ba:33:7d:bf:11:36:2d:b4:50:de:a7:
3f:bf:1a:cf:0a:a8:68:c1:d1:73:1b:22:ca:41:21:b5:bd:13:
a1:3c:76:f0:13:e5:ed:dd:9e:ad:c1:b7:fe:7c:c5:5c:84:b5:
71:66:c2:6f:5e:28:5f:05:8d:df:d8:3d:f4:c1:1b:bd:e6:59:
55:75:8b:17:47:39:a1:11:47:44:ed:06:9a:24:b9:96:c5:e1:
78:70:0f:71:64:b1:84:78:17:8c:8e:e5:75:91:d6:74:bc:c2:
ca:0a:b9:b8:cd:0e:c9:e8:d5:57:af:3a:cf:b5:9d:1d:85:cf:
32:d6:a5:bf:d1:fe:cb:f4:56:8b:bc:fe:50:17:1d:33:12:2a:
68:dc:1a:e2:53:e1:97:fe:6a:d7:6d:b2:66:df:55:0a:48:11:
2d:84:a7:ad:e6:eb:6d:66:d0:10:b1:32:16:21:55:0d:05:b3:
45:36:ce:d5:bf:82:9a:c2:9e:68:c6:e6:01:3f:76:f1:cc:28:
54:35:a7:0d:fb:2f:f7:59:ec:64:3e:31:16:63:4f:cf:74:f4:
3a:f9:0d:12:36:d6:2a:e3:f1:a1:a6:ee:0e:d1:8b:06:39:fb:
6a:dc:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:45 2026 by rpki-client