Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
File: B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft (raw, json)
Hash identifier: pZtm/npUZaLY3zEW6biu3BMheB0Qc6RDID9re+pOO0M=
Subject key identifier: AF:67:FD:10:B8:40:68:FC:84:A6:A7:74:C1:C5:77:B1:E2:35:41:5A
Authority key identifier: B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB
Certificate issuer: /CN=b16b56a21df7bed8b9a754d84fe593127361d6ab
Certificate serial: 1520BD016A096575911FBE1AA9CB1C91A2F45BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
Manifest number: 8C
Signing time: Sun 29 Mar 2026 02:10:51 +0000
Manifest this update: Sun 29 Mar 2026 02:05:51 +0000
Manifest next update: Mon 30 Mar 2026 02:23:51 +0000
Files and hashes: 1: B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl (hash: r9V0kVwMeH8gtSSx9NgmnviD5q9VKr2woofJPsyukIw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:20:bd:01:6a:09:65:75:91:1f:be:1a:a9:cb:1c:91:a2:f4:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16b56a21df7bed8b9a754d84fe593127361d6ab
Validity
Not Before: Mar 29 02:05:51 2026 GMT
Not After : Mar 30 02:23:51 2026 GMT
Subject: CN=AF67FD10B84068FC84A6A774C1C577B1E235415A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:03:6e:c1:af:11:67:f1:1f:b4:87:13:9e:
a0:61:37:a0:4d:b3:96:c4:5d:6c:98:ee:74:c5:db:
4d:97:29:aa:0d:32:ff:b4:21:bb:13:15:e4:c6:84:
f4:90:e4:c4:64:1e:65:74:bc:52:27:4a:92:c5:12:
76:19:50:7f:c0:cd:3a:b7:59:14:0a:ab:2e:38:7f:
e6:17:d4:b1:1a:b4:35:9a:35:a7:96:07:83:cf:53:
1e:e0:82:07:ec:b5:7a:07:b3:bd:ea:21:47:2e:8c:
32:48:b8:47:d1:65:cd:b5:82:63:f4:1f:63:d4:d9:
65:22:60:37:3e:c8:20:44:1a:5d:5c:0c:37:43:19:
2a:c4:9a:d4:ef:d4:f9:8c:36:20:ef:e6:58:32:38:
97:9d:3b:68:d3:85:2a:a7:62:31:d1:42:d6:a5:ac:
78:3f:9e:a4:5c:1d:00:d7:a9:d1:91:4a:7f:93:37:
e7:65:6f:1a:d0:64:d7:79:75:79:d9:60:e6:b0:5e:
4b:0a:da:02:35:c7:b0:ee:d6:3e:0a:9a:2e:f7:98:
b9:4c:20:ee:ea:a6:fb:aa:d6:9a:7b:2e:ab:37:ea:
31:28:5a:c8:3a:b2:b1:8b:03:b3:98:0a:4c:10:3e:
8c:df:6f:13:12:79:66:34:17:51:be:b0:55:2b:ab:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:FD:10:B8:40:68:FC:84:A6:A7:74:C1:C5:77:B1:E2:35:41:5A
X509v3 Authority Key Identifier:
keyid:B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f6:ce:84:65:d6:fe:aa:8a:9e:07:e9:4e:04:87:92:cd:a4:
6b:43:4c:34:8c:6f:0e:65:9a:4d:05:65:5b:a3:a8:be:39:86:
f5:2b:f7:05:70:99:2d:5f:31:6a:13:68:df:f7:7b:16:78:10:
83:ea:e0:36:43:6a:5c:ce:e5:0c:c7:3c:7b:e3:b0:5a:3e:05:
1f:9c:78:6c:b9:e3:ce:61:e7:72:88:5a:fc:0b:7a:79:5c:30:
ed:10:79:72:0a:f4:6b:53:d4:f6:57:d4:0d:3c:a2:9f:1a:54:
f0:71:32:68:ae:31:04:c0:74:1b:6f:48:dd:80:a1:65:32:39:
0f:94:b3:86:9e:a1:75:56:19:c7:39:25:13:3b:18:bc:4e:75:
bb:e5:4d:6b:8a:58:a7:3c:57:87:9d:d4:39:b2:98:03:19:8d:
dc:8f:9b:fd:95:05:20:72:8f:94:e2:6f:76:b7:24:59:fc:70:
53:53:c9:2c:70:92:3c:61:10:64:49:35:9a:80:8a:70:f5:c3:
ff:0a:d2:b3:4d:11:fb:9c:c7:b7:4f:5d:c2:5b:46:8d:d3:5f:
06:89:40:be:97:58:6a:bc:d7:f3:da:c9:df:a5:42:be:0f:08:
ed:35:28:0a:15:e9:89:cd:6f:1d:a4:b2:3a:35:12:68:e6:3f:
d8:ad:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:05 2026 by rpki-client