Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: TW/+GUtdq0miHfOdMZnAhInV3GkK46Ud3Y/7kT7z/s8=
Subject key identifier: 94:F6:63:CE:F7:68:B1:96:09:D7:5B:90:98:A8:E2:AB:E8:0B:6C:8B
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019D389C58D3C442B9A9813C86FB14C67F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 0235
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: K1Do0/TAQb5vRJLpZPSPNAw65M9N33e44TdO/GHPpRw=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
3: oUYxyz9K10owyMgLb9Tbkm17AiY.roa (hash: AGy37bHGmP4SIowccjLydimzeuBoQwkNyn1U3LuqE2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:58:d3:c4:42:b9:a9:81:3c:86:fb:14:c6:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=94f663cef768b19609d75b9098a8e2abe80b6c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:15:a0:bf:2e:06:13:82:17:e9:94:e4:3b:
3a:5d:0f:34:1e:a3:09:53:24:a4:c2:58:14:7b:cd:
ce:4f:3e:89:6f:23:22:55:85:d4:a4:82:a4:1d:fd:
58:0b:4d:73:33:0b:ec:6e:9b:ab:43:ff:19:69:ba:
88:95:2a:fa:3f:e6:7f:bc:13:67:d9:98:15:24:c9:
bb:86:8a:af:64:0c:ae:c7:91:75:a3:f6:ea:a8:29:
29:5e:87:6e:ef:ab:b2:0c:a7:ab:66:54:d2:a4:db:
a9:38:bd:31:cb:59:89:52:03:ad:1d:2f:22:fc:10:
9a:e0:f8:51:5b:2d:8e:58:f7:05:ed:d3:8e:b0:7b:
8b:97:21:37:c2:c9:79:d5:29:ad:02:c8:cc:1e:c3:
37:c0:84:dc:32:18:f6:f6:88:f8:fb:55:8f:87:06:
9a:4c:75:f6:ee:ac:97:02:ac:01:6e:b7:ff:70:7a:
cf:e1:1d:e8:5c:34:ba:54:6e:0f:fd:35:d5:22:24:
df:66:66:6f:df:48:7b:14:0b:92:e5:f1:3a:eb:25:
7c:b7:60:46:34:ae:a8:ea:e2:bb:b5:9e:3f:c6:ca:
a6:79:5f:8b:f9:3c:38:24:82:2c:ae:b3:53:ed:f5:
88:c4:15:8e:bb:ce:18:11:31:e6:99:b4:30:c3:2b:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:63:CE:F7:68:B1:96:09:D7:5B:90:98:A8:E2:AB:E8:0B:6C:8B
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:e5:9d:af:18:43:a7:2e:dd:92:79:0e:cb:c1:26:84:ba:
93:1d:6f:34:90:5e:bd:6f:18:ee:65:b1:14:93:96:71:32:67:
64:ac:ff:aa:af:a1:d5:30:d6:3b:05:67:43:0a:21:b3:14:a6:
6c:85:0d:95:b3:8d:42:79:04:50:70:29:76:31:96:a6:2a:00:
7d:08:0f:7a:0a:16:7d:4f:32:26:a6:27:f6:72:ab:57:36:d1:
d4:e1:64:8d:6d:eb:38:d3:01:0a:de:ff:59:fc:84:09:0e:8e:
49:e6:a5:03:96:82:ef:de:14:e0:fe:b6:8e:3c:2e:8b:b5:6b:
6e:77:76:8f:9e:aa:a5:1b:7b:ef:de:46:cf:d4:53:5d:3d:da:
c3:73:81:d7:6c:f0:ec:10:2e:0a:b8:de:3b:9c:00:34:e7:08:
ea:22:9b:c5:4b:31:08:76:c2:21:54:47:32:08:02:18:3a:e2:
10:0f:8f:c3:4f:24:98:de:1a:b5:9c:9a:4c:1a:3f:12:f2:5b:
a5:f3:ed:26:4f:3a:fd:47:df:e8:9c:c5:fe:55:78:f9:79:b8:
39:4a:68:83:8d:f0:27:10:09:3b:62:93:5d:fd:de:0c:30:d3:
7a:60:ee:23:9a:51:fb:45:60:0d:fa:22:eb:fc:c9:35:36:d0:
31:f5:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:30 2026 by rpki-client