Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
File: 16hoOwl9FdzRS1loqwnToxRI-Jw.mft (raw, json)
Hash identifier: O7SmCVlsi2Rv7xfPgoS0x6K3aDR0G8pI+cD78Lsvp+w=
Subject key identifier: A1:1C:D9:F1:D1:FB:A7:81:58:AA:C1:A7:41:DF:EC:2A:76:85:BB:4C
Authority key identifier: D7:A8:68:3B:09:7D:15:DC:D1:4B:59:68:AB:09:D3:A3:14:48:F8:9C
Certificate issuer: /CN=d7a8683b097d15dcd14b5968ab09d3a31448f89c
Certificate serial: 01A1656B15A09DC701AF8C72B9A6574159B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
Manifest number: C4
Signing time: Thu 22 Oct 2026 21:01:18 +0000
Manifest this update: Thu 22 Oct 2026 21:01:18 +0000
Manifest next update: Fri 23 Oct 2026 21:01:18 +0000
Files and hashes: 1: 16hoOwl9FdzRS1loqwnToxRI-Jw.crl (hash: ja5L5U8USF5IhoiQi7nPKklRC7wgQ38xU5bhy3Dmkgc=)
2: FG2fvuiwp7rqompvefOiSI8QnF0.roa (hash: 3LkpAB/M9ovIHrFGP+zRRz3e056sUShpO6CYwHOnLkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:6b:15:a0:9d:c7:01:af:8c:72:b9:a6:57:41:59:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a8683b097d15dcd14b5968ab09d3a31448f89c
Validity
Not Before: Oct 22 21:01:18 2026 GMT
Not After : Oct 23 21:01:18 2026 GMT
Subject: CN=a11cd9f1d1fba78158aac1a741dfec2a7685bb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:89:c8:28:35:bf:ee:49:17:8a:0f:66:30:
be:8d:03:68:e3:d7:70:26:b1:5e:85:3a:bd:2c:d8:
fa:c6:16:75:b1:9b:5e:53:61:8b:1f:2f:b5:e3:44:
89:96:e1:96:e0:14:62:db:65:42:25:a5:ac:cd:df:
bd:e9:65:23:8d:74:6b:d2:89:54:7d:17:a6:b1:19:
ee:7e:46:62:ac:2a:2e:e6:43:30:04:a7:fc:42:86:
fb:65:af:6c:e9:a5:5b:87:ff:09:d2:8f:31:51:dc:
c8:83:22:f1:af:14:63:9d:22:3a:de:5a:52:1f:b0:
ca:4b:97:bd:d2:01:e5:c7:76:08:b5:c6:5f:b8:c8:
1d:24:fb:76:dd:a2:e6:a5:e8:9e:9e:56:95:47:36:
3c:97:76:e2:8d:40:f2:11:ff:da:1d:82:20:2d:73:
3c:fe:37:01:e1:5e:1c:08:39:93:d7:09:25:5b:5a:
0d:b6:7f:cb:3e:a6:70:b9:ac:c3:38:51:c6:57:73:
db:09:84:bb:1c:7d:a2:05:fe:c1:39:10:3f:b9:92:
8e:e4:54:c8:fe:52:a8:03:df:b5:0c:4c:00:af:a8:
92:53:81:c8:43:cb:e6:af:32:a4:fd:65:f9:3c:8a:
d5:78:83:a5:6a:68:ce:3b:ae:ed:22:2a:54:9d:34:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1C:D9:F1:D1:FB:A7:81:58:AA:C1:A7:41:DF:EC:2A:76:85:BB:4C
X509v3 Authority Key Identifier:
keyid:D7:A8:68:3B:09:7D:15:DC:D1:4B:59:68:AB:09:D3:A3:14:48:F8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:e9:6d:2b:67:ca:ad:8e:bf:ad:83:c8:05:50:09:68:d0:
47:54:0a:ea:9c:25:db:c8:a6:85:fa:02:9b:d3:6e:04:fe:96:
89:26:f2:24:4e:04:cf:af:ff:91:f1:99:ab:3b:c5:49:a7:62:
65:f2:e8:7a:35:da:33:5d:87:33:e9:5b:97:5a:bb:86:91:68:
12:d8:5f:25:ce:5b:34:6a:e9:47:08:90:e1:80:b2:34:3a:20:
1b:78:a5:aa:5c:bb:9d:b8:57:b7:f3:03:6d:d1:31:b5:1f:3a:
d6:8f:25:6b:4f:4e:60:37:49:e0:ee:c4:2a:35:a1:0a:42:14:
46:d4:92:cb:4d:8b:fb:2c:84:bc:05:bf:06:66:9c:a1:bd:04:
38:2c:31:7e:3a:6a:49:13:36:80:00:93:87:c5:41:83:88:18:
75:91:f5:8a:ef:f3:49:74:37:c8:74:c0:92:c5:d3:0d:74:5a:
ee:a8:c8:f1:5e:fc:e1:30:bb:0b:72:9f:48:ce:35:4c:6c:c2:
b5:fb:c9:c7:85:d0:40:25:d6:04:db:a0:d8:e5:31:19:a0:f7:
32:a5:a5:ff:85:d7:17:78:80:5a:14:7a:ae:fd:42:a9:c4:25:
c5:ce:dd:51:1f:fe:2c:d4:75:55:5a:40:97:d9:8c:1a:b7:97:
22:9d:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:11:46 2026 by rpki-client