Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier: 5Jr6Uvuug+7kqDLVZiwO1plmX814sb7eENlEblYFOGU=
Subject key identifier: 53:22:21:15:14:07:CA:0D:5D:26:FD:EE:70:64:19:7D:1F:5B:F5:3B
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial: 019CA9EB362DD2B2463EDF61B024040B2CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number: 171A
Signing time: Sun 01 Mar 2026 15:01:30 +0000
Manifest this update: Sun 01 Mar 2026 15:01:30 +0000
Manifest next update: Mon 02 Mar 2026 15:01:30 +0000
Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: AOXYmJ6MBNBsTcFmn4pRLg3UOw5dmt7XkiDtLHKOfRY=)
2: rQy2SPGFQEjuSOt_AqL8QZIw6H0.roa (hash: +JefNV5OaeJsN9RpkGDkCiA4z+6Up7RrUi0ftPxyKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:36:2d:d2:b2:46:3e:df:61:b0:24:04:0b:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Validity
Not Before: Mar 1 15:01:30 2026 GMT
Not After : Mar 2 15:01:30 2026 GMT
Subject: CN=532221151407ca0d5d26fdee7064197d1f5bf53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:e4:f5:cd:9f:cb:eb:d2:69:60:46:9e:3e:
2a:f8:d7:f8:ad:d8:fa:15:2a:19:af:9b:ee:ae:4f:
c6:51:0e:af:45:3d:ac:07:d7:55:44:c6:72:db:12:
98:1a:6f:72:d4:fd:64:f0:07:67:e8:bd:ff:16:27:
0a:ca:49:74:9e:ff:be:81:49:13:e7:c5:cc:75:66:
9f:1a:be:26:8b:21:07:b7:d5:0f:e8:34:02:96:00:
6a:8a:2a:76:62:cd:43:d5:93:ac:5c:ed:ab:13:6f:
60:e6:45:db:4d:ac:32:2d:90:94:c0:71:88:10:1e:
f7:32:f2:e6:ee:ce:88:55:1c:a7:c0:b8:1a:bc:29:
26:ee:e5:f5:7c:8b:ee:e2:ec:1a:6f:73:1b:0c:46:
18:d9:58:67:c5:22:30:9d:0d:a1:31:a4:76:96:de:
16:94:ce:e2:54:b6:9f:3b:2b:a9:31:15:df:1f:9b:
30:38:d0:f7:8c:7e:36:ef:22:a6:22:c0:8c:86:bc:
09:c5:31:df:8f:31:fa:f7:60:a5:98:59:94:b2:e7:
31:75:d1:e3:1c:d7:0d:a7:6f:0a:31:b1:80:b5:6e:
cd:24:6b:d3:f4:56:aa:2e:c7:c0:cf:56:12:b3:1c:
42:13:e4:c3:aa:70:fe:97:8a:c1:8c:cc:e2:84:03:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:21:15:14:07:CA:0D:5D:26:FD:EE:70:64:19:7D:1F:5B:F5:3B
X509v3 Authority Key Identifier:
keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4f:ac:07:3e:60:6a:e3:31:e1:02:f5:54:1a:e1:2e:66:69:
3d:e7:b9:70:24:74:fa:20:57:f1:84:5d:0b:26:29:dd:6e:a3:
05:77:a8:ab:fc:2c:55:74:d0:47:c7:70:25:56:a1:4f:c9:a4:
33:86:77:9d:34:a0:d0:dc:25:36:d3:66:96:de:d1:68:55:fd:
b6:7d:9c:12:d0:38:be:1b:57:c1:c0:11:fa:98:6e:16:7c:91:
56:8e:a6:e6:97:ce:da:13:b3:a8:31:93:3f:87:7a:db:ec:18:
49:4e:0d:9b:50:80:17:8d:e3:95:3d:fe:35:80:56:cf:d3:ce:
4a:2a:14:18:0e:b7:6e:b6:c4:74:aa:f4:fd:79:cc:f5:3e:fa:
bb:aa:2f:91:06:57:a3:b0:77:00:d3:c4:33:7a:c5:c7:e4:ab:
7d:63:67:f7:97:1a:dd:49:29:ef:55:f1:1e:b2:29:c2:b7:5b:
fd:c9:3e:fd:e5:51:3a:ee:0f:4c:3b:99:a7:b9:c2:a9:80:bb:
f1:86:ae:02:ec:7f:57:ed:45:7c:fd:25:35:dc:2c:bb:eb:57:
f4:ec:62:a2:0a:09:16:9d:23:07:dc:13:0d:b9:00:9f:df:a6:
6d:7b:89:35:ed:4a:29:cd:65:26:19:9a:a1:8e:31:08:f7:a6:
ac:92:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:07 2026 by rpki-client