Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: XF9ZgMwLXNg1pPPMm/x08lDazsCE/faSUhRON2GgxKs=
Subject key identifier: 07:F4:11:C7:9D:BC:65:E9:F9:25:57:09:D1:A3:3B:6B:B5:92:BB:60
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 01A13DB7C2774C05B29DA0173561324C5959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:00:15 +0000
Manifest this update: Thu 15 Oct 2026 04:00:15 +0000
Manifest next update: Fri 16 Oct 2026 04:00:15 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: kJGtaXiF4I23QmPjDPuwXfbEgBpQg8zm8MD1wDS7IKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:c2:77:4c:05:b2:9d:a0:17:35:61:32:4c:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Oct 15 04:00:15 2026 GMT
Not After : Oct 16 04:00:15 2026 GMT
Subject: CN=07f411c79dbc65e9f9255709d1a33b6bb592bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:35:1b:bb:20:1f:b8:13:26:23:fc:61:45:
3b:90:8d:bb:d5:ab:67:4c:c3:bf:7c:24:3c:74:54:
d5:f0:68:16:be:41:f9:d8:f6:ba:f5:bd:3f:19:09:
e1:e5:ea:29:90:63:6a:db:c0:9f:1b:4c:6a:78:a0:
27:e5:d9:12:29:02:24:c9:db:26:72:5f:21:38:e0:
51:bc:7f:b8:2f:ed:63:c1:20:da:b7:50:b6:1c:36:
85:d6:6e:08:18:bb:25:a7:f8:47:bb:31:cd:1a:bc:
24:86:7c:34:66:0e:5c:2f:96:23:45:62:c0:f1:de:
8a:47:2a:e5:9d:4a:29:1d:79:fd:94:a5:50:1f:85:
f1:a5:d3:04:c5:96:d1:0a:e0:27:11:99:04:5c:47:
9d:d6:dc:fa:3e:fa:7e:d0:ac:38:b9:85:b4:44:ce:
a9:52:0d:7a:6f:4f:df:d9:c5:fc:6a:ac:d5:31:b6:
5d:e6:c4:d3:05:c7:52:c7:0e:cd:62:74:9e:81:99:
01:1f:b9:97:29:fd:21:a2:da:d9:fd:ba:cf:76:1d:
a6:b8:e5:37:5e:f7:81:da:ce:5e:31:23:90:25:23:
bc:fa:bb:59:be:bb:3b:a3:12:f5:9f:1d:03:28:4d:
74:cd:3d:c7:6f:62:9b:06:5c:43:e9:d6:2a:86:fa:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F4:11:C7:9D:BC:65:E9:F9:25:57:09:D1:A3:3B:6B:B5:92:BB:60
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f6:51:4c:01:92:f6:b4:ad:db:49:84:e3:c7:b1:52:e2:f3:
b8:dd:53:fd:61:5d:3f:fe:7f:6d:5d:5a:aa:10:17:17:56:c9:
b0:89:c3:28:a0:8a:51:50:52:f1:b0:2a:08:5b:1b:ba:3d:98:
71:ee:65:a0:74:aa:c6:08:e5:a4:0c:67:f0:c2:25:09:68:3d:
24:eb:38:f4:5a:1c:fe:0f:12:03:c8:ea:7a:f0:99:71:06:bf:
55:3d:c0:f0:bd:f2:9a:5f:9d:ed:dc:24:09:a1:2d:82:e5:24:
09:8a:f7:75:3d:77:5b:02:38:d9:88:33:fd:e3:be:e6:10:29:
3a:53:88:63:9e:89:e3:a5:f4:d4:cc:c7:4b:ae:46:51:40:40:
a4:ea:07:7e:b1:14:c2:6d:6c:49:0e:9a:6e:93:b5:83:b7:26:
41:b8:43:03:64:45:ea:07:39:6f:3b:8b:74:57:25:dc:27:9f:
5c:98:22:ea:1c:2f:f1:4f:38:73:dc:17:6f:e7:99:6f:ed:bf:
ea:62:42:27:32:15:d8:b2:e8:7b:2f:d1:2a:67:38:88:91:31:
58:21:06:7d:12:75:bd:5f:92:aa:dd:cf:b5:11:92:2d:9c:c7:
87:f8:ed:1d:ff:57:0d:01:8d:e1:2c:9b:df:8a:ad:1f:d2:14:
6e:76:1f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t8J3TAWynaAXNWEyTFlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YTRmZjY2M2ZhNjcxNWRiMGM2YmZlNzlhOTI4N2VhZGE2
Y2IzZTYwHhcNMjYxMDE1MDQwMDE1WhcNMjYxMDE2MDQwMDE1WjAzMTEwLwYDVQQD
EygwN2Y0MTFjNzlkYmM2NWU5ZjkyNTU3MDlkMWEzM2I2YmI1OTJiYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysk1G7sgH7gTJiP8YUU7kI271atn
TMO/fCQ8dFTV8GgWvkH52Pa69b0/GQnh5eopkGNq28CfG0xqeKAn5dkSKQIkydsm
cl8hOOBRvH+4L+1jwSDat1C2HDaF1m4IGLslp/hHuzHNGrwkhnw0Zg5cL5YjRWLA
8d6KRyrlnUopHXn9lKVQH4XxpdMExZbRCuAnEZkEXEed1tz6Pvp+0Kw4uYW0RM6p
Ug16b0/f2cX8aqzVMbZd5sTTBcdSxw7NYnSegZkBH7mXKf0hotrZ/brPdh2muOU3
XveB2s5eMSOQJSO8+rtZvrs7oxL1nx0DKE10zT3Hb2KbBlxD6dYqhvrfawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf0EcedvGXp+SVXCdGjO2u1krtgMB8GA1UdIwQY
MBaAFNek/2Y/pnFdsMa/55qSh+rabLPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUt
NmNlNjdlMGYyNTkzLzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUtNmNlNjdlMGYyNTkz
LzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPZRTAGS
9rSt20mE48exUuLzuN1T/WFdP/5/bV1aqhAXF1bJsInDKKCKUVBS8bAqCFsbuj2Y
ce5loHSqxgjlpAxn8MIlCWg9JOs49Foc/g8SA8jqevCZcQa/VT3A8L3yml+d7dwk
CaEtguUkCYr3dT13WwI42Ygz/eO+5hApOlOIY56J46X01MzHS65GUUBApOoHfrEU
wm1sSQ6abpO1g7cmQbhDA2RF6gc5bzuLdFcl3CefXJgi6hwv8U84c9wXb+eZb+2/
6mJCJzIV2LLoey/RKmc4iJExWCEGfRJ1vV+Sqt3PtRGSLZzHh/jtHf9XDQGN4Syb
34qtH9IUbnYfJw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:13 2026 by rpki-client