Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: AvpMoUkDxsdb5hZ2FE6+EObZYj2nqyKH0O7pjDI7L9o=
Subject key identifier: E8:FB:9C:B6:9C:FB:A3:23:78:F2:26:B7:CC:90:4D:BB:AF:F2:CF:43
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 01A17BF2C19D0903FA2BEB8B339D5538F48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: 02DC
Signing time: Tue 27 Oct 2026 06:01:08 +0000
Manifest this update: Tue 27 Oct 2026 06:01:08 +0000
Manifest next update: Wed 28 Oct 2026 06:01:08 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: XG5vTLao5ueqSqSKj57P2akU/yLIDhCUD9VuZkZyY14=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:c1:9d:09:03:fa:2b:eb:8b:33:9d:55:38:f4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: Oct 27 06:01:08 2026 GMT
Not After : Oct 28 06:01:08 2026 GMT
Subject: CN=e8fb9cb69cfba32378f226b7cc904dbbaff2cf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:a3:98:de:fb:80:9c:2b:8e:e4:f4:3d:dd:
b4:f0:3b:f9:56:5d:4e:f8:81:8d:b8:67:17:39:14:
a2:78:cf:f8:fa:60:a1:c9:29:f0:7f:41:0b:31:91:
cd:7f:3a:51:35:02:7e:6e:17:4c:a8:9e:88:bc:03:
7c:95:3c:17:82:92:fe:ca:8c:29:51:4d:6b:74:99:
25:8e:4e:b6:f1:f8:ab:c4:af:b3:17:1e:76:e9:24:
f4:09:74:3a:82:6c:9f:09:87:e6:22:18:65:c7:43:
99:99:be:df:4e:f4:f5:b8:f0:9f:be:37:fb:e4:26:
9a:49:0b:84:2f:9a:d8:f8:bb:0f:e9:da:51:c9:54:
60:8f:04:ff:0e:52:31:96:7d:a7:80:86:53:a4:cf:
e4:d3:12:a9:83:2b:40:7d:9f:51:d6:2a:fe:4b:01:
4a:e0:61:66:3a:6b:5d:ab:e6:22:16:6e:89:c2:20:
be:fa:dc:c0:49:0d:d8:3a:85:64:f1:79:df:9c:d9:
98:83:b2:f9:e0:98:22:37:89:3f:c2:c8:05:ba:5a:
3f:89:64:30:2d:4f:c2:f7:77:e2:fa:dd:3f:40:22:
6f:68:8d:f6:dd:50:93:d3:a1:a9:d5:4f:93:02:97:
42:5b:a8:7c:c6:23:c2:09:9c:ae:b5:2c:37:bb:ee:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:9C:B6:9C:FB:A3:23:78:F2:26:B7:CC:90:4D:BB:AF:F2:CF:43
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:06:42:40:1f:6c:f6:d8:9f:86:7a:32:7d:e4:2b:39:9e:fd:
e6:82:5d:0d:ee:97:e3:b6:05:f7:84:25:74:10:54:e3:30:dd:
51:4d:6a:bf:f5:ff:08:53:b9:cd:30:66:c3:87:cc:e6:fb:fc:
2a:bd:d8:dd:d9:6b:88:ca:b0:4d:72:5d:fa:88:bd:69:e2:23:
ef:c0:d2:81:b1:a0:11:79:2b:99:52:cf:b5:a0:93:86:36:bd:
ad:19:5e:84:d2:22:9b:c7:fa:bf:5d:75:57:dd:0b:53:61:91:
3d:38:1d:87:33:0a:2c:1d:aa:88:0a:90:9f:7a:dd:51:72:0a:
c1:fe:72:d8:f2:b5:f9:62:61:55:a4:7b:8c:69:0e:4c:3f:b1:
e7:d8:48:a1:89:31:4b:7a:26:c6:17:ab:89:eb:50:ae:3b:a6:
6e:24:07:40:a3:81:ee:77:75:fa:cc:0d:bb:69:ce:27:26:27:
a3:2c:8c:95:e2:79:1c:78:4d:ed:54:43:95:fd:4f:75:22:ae:
de:fd:76:3d:10:ad:6c:61:ea:d1:07:4f:53:87:9e:09:a2:82:
8a:92:ef:9f:6e:ee:3b:c3:75:06:f0:b0:92:bd:7f:32:c0:f0:
e3:5b:f4:0d:3f:b2:5b:2e:18:fa:12:35:22:a9:d6:b8:38:d0:
d7:14:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:21 2026 by rpki-client