Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: +KpDM4/ZVLWj7+RUrWNzJ5QwPaEOnB8MXXMzu+1PutI=
Subject key identifier: 21:96:E9:4B:B9:BD:72:75:BF:A3:63:C3:9D:87:91:39:85:F6:5E:C6
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 019D38664CA97F9E64C5BEBE6CF4D189A1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: +AKZTjwexBpnFuOMxqOAKlHEsUW7xFGbD+iNQIe2Rtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4c:a9:7f:9e:64:c5:be:be:6c:f4:d1:89:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=2196e94bb9bd7275bfa363c39d87913985f65ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:10:45:ee:13:34:ab:a1:98:f9:71:f3:39:
14:f9:97:e9:3a:bc:86:6b:7e:f9:c6:89:aa:fc:ce:
28:67:27:8a:70:bb:26:1d:30:96:ed:cd:a7:2a:f2:
6b:5e:3e:75:ed:09:67:f4:1f:cb:0e:08:13:83:90:
0f:5b:18:37:8c:46:da:0b:a5:36:f4:4d:44:f5:14:
93:3e:3f:2a:b7:a8:e7:cd:26:19:64:43:42:0e:39:
dd:51:e5:9c:ee:a3:53:9d:bc:9c:31:72:4b:34:5d:
04:99:98:5d:34:f4:93:63:5f:8b:b0:ef:a6:e6:fb:
d4:88:83:cf:a0:59:08:d9:e4:b1:4f:c0:75:48:ee:
8e:b1:9d:1f:cc:fc:a9:0d:09:33:a3:2e:18:2b:81:
47:ff:39:f9:97:e1:c4:58:0d:22:fa:29:95:60:43:
62:81:45:2f:b2:93:65:c0:84:8c:0a:3e:73:97:49:
be:cb:74:d4:a6:82:6c:09:00:39:b8:9a:81:4d:6f:
9a:a8:ae:2f:2f:37:df:5a:15:51:33:4a:5b:b6:e1:
2a:7b:a9:1f:9d:b8:e7:af:17:42:21:2a:e6:8b:73:
b8:25:ab:28:5e:4e:d6:61:77:44:a6:9a:13:7a:ea:
3e:d3:89:3f:64:52:75:4d:2d:eb:e6:1b:92:23:94:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:E9:4B:B9:BD:72:75:BF:A3:63:C3:9D:87:91:39:85:F6:5E:C6
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8d:a1:4e:74:02:64:06:20:06:44:0a:8f:b3:06:04:96:59:
58:00:c3:35:e7:cf:85:e9:cc:32:be:7a:7d:f2:fa:93:b0:b0:
89:25:48:35:c7:dc:db:02:62:ca:5b:b5:8d:1b:1e:c5:96:d0:
da:ee:b3:81:26:bb:f9:85:3f:85:e9:ee:21:5a:14:23:fd:8b:
15:e6:aa:b1:38:c9:cc:1c:45:0e:8f:2f:c0:d0:2e:52:91:1f:
84:84:b9:91:30:02:e2:26:49:93:d9:1b:4f:f9:46:b1:5c:e3:
04:d2:49:06:48:93:73:40:7d:10:61:08:f0:37:e6:bf:1e:88:
82:ab:a1:6b:1a:fd:5d:2b:22:9b:00:01:d3:05:28:33:32:5e:
94:61:85:ad:34:d2:1c:c3:ec:47:55:a8:5f:62:05:ea:57:a3:
5a:ce:93:10:82:b1:d0:40:40:7d:d9:a1:2a:ef:aa:8a:16:f2:
76:b2:47:bd:82:7f:62:dd:09:29:2f:d5:a1:23:f5:c8:91:1f:
1c:49:4c:4b:d2:ec:4c:59:fe:09:3e:70:58:cd:8c:e3:dd:a6:
9e:3d:57:2a:88:bb:fb:fa:e2:95:67:5a:36:fe:78:a0:d6:d5:
a1:7c:c8:81:85:54:8b:a5:e4:80:b2:49:9f:e0:01:41:ad:bb:
70:61:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:25 2026 by rpki-client