Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier: svK5+JJJBos892pgZgt220FM54aAOv4d9DLp7/lsWAE=
Subject key identifier: 03:6A:8C:01:91:AB:0F:88:34:F7:48:D2:42:41:32:13:63:54:AB:16
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial: 019D38D2DA03C80BDDA805338709AEA5F149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number: 1764
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: 5XjYwbEkEWe5OjD3sfMI0P+UQDsozwS1DylbGeBTOQI=)
2: rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa (hash: +JefNV5OaeJsN9RpkGDkCiA4z+6Up7RrUi0ftPxyKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:da:03:c8:0b:dd:a8:05:33:87:09:ae:a5:f1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=036a8c0191ab0f8834f748d2424132136354ab16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:b4:6d:81:cc:f1:ae:a5:8e:19:e6:47:1c:
cd:39:34:15:43:d4:50:8c:b2:fc:fa:97:53:33:13:
2c:7b:54:0f:a9:7c:5b:91:0a:36:a9:d1:42:20:d1:
e5:ea:88:d1:dd:fb:b0:b4:0c:3e:1b:9f:e6:3c:df:
82:93:20:b9:fb:2c:56:05:75:5c:2e:da:26:95:b3:
72:fe:f8:62:9e:36:86:39:f7:71:c5:de:6b:fe:bd:
ad:62:18:74:70:f4:90:b0:25:75:fa:f3:45:23:8e:
f7:b8:58:a9:93:02:b7:f7:1d:83:c1:5d:65:84:4d:
c1:9d:fc:b1:3a:b6:8b:ba:28:8c:a6:d5:d4:d6:44:
e5:e2:1d:99:d0:15:2b:4e:54:8b:40:0f:29:94:05:
64:7c:75:5b:2b:b2:cf:f7:4e:93:9f:e5:51:aa:62:
9e:0e:0b:c4:db:ef:b3:ab:16:6f:8a:69:bc:13:eb:
5f:fa:43:3c:d2:f1:73:5c:f9:ca:a0:1e:c5:b8:9f:
df:79:51:48:6e:32:d1:68:10:e8:66:90:fd:33:f6:
77:42:bc:cf:f8:20:82:71:7a:35:28:f5:88:cb:15:
39:32:ec:22:49:b7:0b:9f:ff:68:19:1f:ac:fb:07:
24:90:d0:14:70:14:93:c8:69:04:e9:35:ff:28:f6:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:8C:01:91:AB:0F:88:34:F7:48:D2:42:41:32:13:63:54:AB:16
X509v3 Authority Key Identifier:
keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:6f:ea:f2:ae:56:bd:b5:f6:38:06:2e:65:99:19:a8:d7:
d3:bd:7d:c7:a1:6d:76:e5:0e:d6:85:19:ac:ed:b5:74:f1:35:
51:f9:1b:83:16:92:8e:ee:da:ac:ff:f9:8d:fc:17:9f:45:eb:
02:12:66:0d:4d:91:9a:42:23:81:9c:3b:33:4a:42:ca:fa:19:
68:30:97:21:dd:7c:8a:47:5a:fb:87:50:89:0f:33:8a:bb:2d:
c2:5f:b4:8f:94:23:55:e8:ca:72:4a:d8:4c:84:c2:8f:e0:35:
ef:29:70:15:9b:14:d3:61:b4:a5:f5:ce:77:f6:40:a1:46:65:
eb:25:14:c8:e4:c8:13:c6:74:32:27:62:ee:19:0e:28:67:5e:
e4:0e:25:78:aa:56:ba:6a:bd:e7:30:4a:f3:74:54:42:86:2d:
71:d7:86:a9:e9:35:5c:4a:9a:49:41:10:2f:cf:ea:bc:ec:34:
4c:3b:92:11:3b:fc:ac:71:dd:de:c3:73:2b:15:21:ff:a4:76:
d7:c4:8d:ba:df:df:3d:0e:b4:fe:09:74:be:ff:35:c9:8d:43:
de:15:af:e2:5c:90:4d:fc:9a:13:93:b6:67:33:49:8b:e6:9b:
2b:48:2f:4d:52:03:8a:62:a2:9d:79:99:77:0c:0b:84:eb:d2:
38:08:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:22 2026 by rpki-client