Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: OVmfOVifVAPqNNeGpuV3rgtxqiZ09lfoEzt5XyLmxpY=
Subject key identifier: 56:12:02:BF:39:D2:EC:26:D9:ED:B8:7E:7F:72:7B:8E:24:FD:1F:4D
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019E53A338DE7754CB0166E76012DD6D9B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 02C8
Signing time: Sat 23 May 2026 07:01:06 +0000
Manifest this update: Sat 23 May 2026 07:01:06 +0000
Manifest next update: Sun 24 May 2026 07:01:06 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: 03j/chNFE9mDWGLHyzm9V+K55z3Ti0fwKkul3qKO1kc=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:53:a3:38:de:77:54:cb:01:66:e7:60:12:dd:6d:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: May 23 07:01:06 2026 GMT
Not After : May 24 07:01:06 2026 GMT
Subject: CN=561202bf39d2ec26d9edb87e7f727b8e24fd1f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:93:a6:22:63:39:6b:0f:28:7e:f5:7e:35:
88:d7:72:db:82:1f:63:b0:00:de:24:93:da:95:6b:
66:b7:65:70:18:11:94:d2:03:d7:ae:74:62:64:6e:
84:3f:36:1d:36:86:93:b4:92:71:d5:61:5f:b3:a4:
2a:75:ad:42:87:9f:83:40:4f:34:ff:d4:ae:24:5e:
a3:08:67:f5:13:4d:46:73:29:de:4f:cc:67:62:77:
8c:ab:ce:f2:f5:c2:f0:8a:16:b5:00:b9:75:a1:5a:
9a:c8:32:b7:10:d4:3f:a7:ad:18:35:9f:85:27:36:
e6:dc:db:4d:f1:77:dd:81:78:f8:19:0e:43:96:79:
85:ab:20:b6:40:97:ff:59:97:bd:0e:0a:6f:d3:9e:
d7:d1:18:d9:05:5b:b4:9a:ba:63:fc:6f:47:80:76:
42:9a:30:82:5f:67:a2:22:da:2a:46:c4:f8:f8:d0:
85:59:dd:d3:e0:af:63:bd:3c:d2:74:70:43:a9:9c:
57:af:58:1d:75:73:6e:ea:2b:a9:4c:14:c0:15:5d:
b3:62:89:50:cc:80:6f:4f:ba:0a:5a:39:e4:14:18:
fe:21:25:ba:1e:c1:fd:58:6f:d2:b9:d6:98:ce:40:
a8:46:7e:da:1a:82:9d:b9:18:9f:51:39:3a:4c:98:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:02:BF:39:D2:EC:26:D9:ED:B8:7E:7F:72:7B:8E:24:FD:1F:4D
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ae:2d:97:60:9f:a8:65:79:8b:9a:20:b8:e1:9b:33:9d:0b:
2f:3c:2e:42:ce:a8:30:4c:28:db:d0:42:5c:9e:69:cf:78:a1:
bb:b9:8b:08:36:10:45:46:31:cd:65:17:19:82:ec:78:9e:5f:
b8:d3:f5:50:5a:90:3f:0c:55:c3:5d:69:16:d8:0e:72:51:4c:
15:39:72:a6:c2:af:77:78:41:73:5e:05:84:5e:2c:11:42:99:
3b:96:c8:2d:18:7f:ea:58:61:ab:ae:21:ae:60:cf:91:9a:65:
f8:3b:d6:08:33:1f:08:c0:80:e5:52:52:35:86:05:98:5e:a1:
1d:f2:ea:f4:5b:3c:6b:ca:83:09:7d:aa:e0:d2:dc:3f:9c:e3:
52:a2:7a:09:a0:d7:97:c5:c8:05:cd:5e:76:be:50:c8:c7:f5:
41:ad:ff:5a:d0:6e:ff:93:ac:38:ca:44:04:7b:0f:d8:fc:60:
2f:3c:af:01:41:85:22:91:47:22:8b:aa:a7:3c:14:40:13:bc:
47:c3:19:9d:ef:5c:8b:10:2b:cd:ea:83:e5:43:c6:96:ad:c4:
bf:e8:76:28:9d:7a:92:2a:3c:20:72:3e:1f:52:10:be:8f:2e:
e0:fd:0e:42:39:7a:0d:a3:df:05:8e:bc:8f:fa:e6:b0:98:98:
34:53:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:30:59 2026 by rpki-client