Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: apLex19kXhxjgm1CbsXehExF+IUZBDS52tlZTL960LU=
Subject key identifier: 81:82:C3:E4:18:28:5F:B1:2A:45:4F:6B:CC:F4:87:09:AA:77:62:02
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 01A0CDB6907DD4EC20536E238708F12B9B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 10:01:28 +0000
Manifest this update: Wed 23 Sep 2026 10:01:28 +0000
Manifest next update: Thu 24 Sep 2026 10:01:28 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: +QBijVZVVt3p6NBLA01rQXHaf8VGtT4dkjRhOK0m0Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:90:7d:d4:ec:20:53:6e:23:87:08:f1:2b:9b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Sep 23 10:01:28 2026 GMT
Not After : Sep 24 10:01:28 2026 GMT
Subject: CN=8182c3e418285fb12a454f6bccf48709aa776202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:94:35:e5:04:fd:32:a2:a8:b5:41:86:24:
ed:01:66:37:4f:42:9d:85:3f:c9:4a:86:a9:fc:ed:
14:07:25:4a:26:6c:be:c4:e3:b4:e8:95:88:fe:04:
57:f1:3e:af:36:9f:fb:9f:c4:03:a9:19:06:44:8b:
e3:73:30:15:2d:5f:7d:43:42:1f:b8:13:f0:a3:e9:
93:67:fd:b9:e2:00:1f:e9:d3:e3:31:02:2f:f2:5c:
92:e8:c6:c3:65:39:d1:75:d4:d8:32:02:04:4f:84:
e9:18:7c:cf:60:a0:ef:e1:bb:87:7a:b3:f9:58:03:
dd:b3:12:36:bf:d8:8c:40:df:c5:9a:46:b8:a9:c2:
fe:30:bb:3d:03:ec:c8:74:7c:bd:a5:b9:2e:24:e7:
9b:ed:e7:1a:da:c4:76:87:00:58:95:b9:c0:4e:d2:
fa:37:43:da:59:5a:44:28:a6:68:94:f1:51:63:3d:
ed:55:6b:e3:4c:fa:25:0b:fc:dc:70:82:1a:8b:a5:
76:b3:c5:e3:06:37:e8:75:97:f4:82:cc:ae:92:28:
32:20:78:94:84:21:67:85:86:a3:9b:60:f0:eb:3f:
b4:96:1e:4f:d2:93:6a:d9:c6:87:8b:21:b6:ee:4f:
8c:ab:5a:fc:23:bc:cb:5e:4c:09:a6:ac:97:a8:d7:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:C3:E4:18:28:5F:B1:2A:45:4F:6B:CC:F4:87:09:AA:77:62:02
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:db:0f:97:cd:19:d1:72:65:c6:1f:35:52:3a:a7:34:7f:e3:
08:b4:0a:75:d5:84:f4:d9:35:cc:16:3d:86:32:52:3f:c7:08:
aa:e6:bc:85:dd:cf:5b:52:77:8c:48:cf:49:55:fb:b9:73:66:
35:4b:60:8a:02:28:8d:79:f0:f6:e5:fe:55:6e:a8:09:e9:c4:
7e:8b:29:9e:b0:e9:e0:36:1c:54:78:f3:6c:26:33:71:f0:40:
d5:db:ea:68:f7:86:cb:70:87:8b:e3:c6:cd:70:6c:8f:4b:ab:
1f:6a:3b:97:52:b6:85:85:0f:12:b2:7b:7f:23:ab:f1:7e:97:
e3:3c:79:83:b1:52:82:ba:44:e8:d4:49:ab:3e:6e:4a:c3:05:
29:10:de:16:1a:92:cf:bf:51:7d:0b:2d:4f:fb:58:fe:95:5f:
ca:dc:75:db:83:68:e0:48:5d:93:a2:93:3b:6f:bd:05:4e:10:
45:00:10:6e:92:c3:b8:29:e5:39:12:48:75:28:b3:de:b3:4f:
1c:cb:55:46:60:91:b8:56:e6:b8:e6:bd:0e:79:3c:bd:5f:57:
2b:57:d9:28:d4:27:4e:ef:99:d8:d2:ab:88:60:7b:90:f3:50:
a4:b9:a2:e1:f8:33:da:4a:53:fc:1f:f8:1e:d9:bc:d0:4d:36:
3d:ca:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:36:18 2026 by rpki-client