Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
File: 16hoOwl9FdzRS1loqwnToxRI-Jw.mft (raw, json)
Hash identifier: ipanDWu240xjiJtVetlA1Qdjhexd0p+fzqrz6D3K8oY=
Subject key identifier: 29:BD:55:7E:14:C0:54:EA:00:DC:0D:AE:91:F1:3E:1E:15:5A:40:0B
Authority key identifier: D7:A8:68:3B:09:7D:15:DC:D1:4B:59:68:AB:09:D3:A3:14:48:F8:9C
Certificate issuer: /CN=d7a8683b097d15dcd14b5968ab09d3a31448f89c
Certificate serial: 01A0C70F207C4DF6BB927F727A7866734658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
Manifest number: 72
Signing time: Tue 22 Sep 2026 03:00:52 +0000
Manifest this update: Tue 22 Sep 2026 03:00:52 +0000
Manifest next update: Wed 23 Sep 2026 03:00:52 +0000
Files and hashes: 1: 16hoOwl9FdzRS1loqwnToxRI-Jw.crl (hash: oVGsQOIfHcR2KmpjGvDlUj25gFv5r2aJAjnxbEyJXEo=)
2: FG2fvuiwp7rqompvefOiSI8QnF0.roa (hash: 3LkpAB/M9ovIHrFGP+zRRz3e056sUShpO6CYwHOnLkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:20:7c:4d:f6:bb:92:7f:72:7a:78:66:73:46:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a8683b097d15dcd14b5968ab09d3a31448f89c
Validity
Not Before: Sep 22 03:00:52 2026 GMT
Not After : Sep 23 03:00:52 2026 GMT
Subject: CN=29bd557e14c054ea00dc0dae91f13e1e155a400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:49:3e:37:11:a9:e1:d1:03:45:ca:42:0c:
ed:75:04:29:e8:b2:19:c2:d6:94:88:7c:c0:3e:22:
8b:6d:5a:27:05:00:5f:9e:bf:7f:29:b9:b5:ed:0b:
2e:87:b3:ac:26:26:23:8a:e1:88:a2:e7:36:a2:07:
6c:86:1b:97:e7:4b:d2:1f:60:fb:0f:42:fb:c0:3d:
74:b5:ce:7e:7e:94:d0:ab:86:ce:3d:62:17:e6:c0:
ac:de:49:9d:c2:63:dc:c5:22:18:2a:f3:23:29:1b:
29:71:46:70:1d:14:bc:56:ad:15:1a:c6:3c:1c:f5:
36:03:4f:c9:73:82:e4:a6:6e:3f:2d:b5:18:07:24:
8a:e1:1a:66:93:25:79:19:65:d4:ba:34:b3:ca:b7:
c0:13:df:7f:01:be:2d:4a:fc:2d:95:66:ee:90:a7:
1d:80:fd:27:e2:1a:64:84:7e:bf:fa:28:6d:6f:e2:
bf:ce:a1:0a:aa:ca:f4:6b:59:b3:1f:69:51:25:30:
12:05:90:fd:1f:7a:dd:71:93:89:15:01:b0:07:53:
75:ba:1a:ac:b2:2c:f0:58:00:c1:4c:33:58:67:76:
e8:fc:af:73:38:51:d1:bc:3f:a7:26:2b:00:d5:28:
ce:9e:c8:16:fb:b1:04:e0:41:b4:57:1d:f2:f0:51:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:55:7E:14:C0:54:EA:00:DC:0D:AE:91:F1:3E:1E:15:5A:40:0B
X509v3 Authority Key Identifier:
keyid:D7:A8:68:3B:09:7D:15:DC:D1:4B:59:68:AB:09:D3:A3:14:48:F8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16hoOwl9FdzRS1loqwnToxRI-Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c420b2-1b15-47a2-8909-af2e6d5f5804/1/16hoOwl9FdzRS1loqwnToxRI-Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:bf:e7:4b:1d:32:59:cf:8d:e6:7a:b2:8d:a7:71:16:31:
3c:8e:4a:5e:9a:9d:98:af:86:a4:c2:9b:b8:cc:52:c0:b7:13:
a0:51:dc:3a:c5:a3:f0:65:c7:93:29:85:81:c2:1b:9e:aa:1b:
22:31:a7:f8:f7:af:b5:8d:6f:bc:ff:3d:cb:fe:17:fc:27:bc:
0a:bb:4b:70:25:aa:4c:07:3c:f3:7b:85:9c:47:af:df:18:49:
1e:04:df:29:8c:3f:ec:8a:2a:b4:f9:cd:21:c9:b8:5f:25:7e:
ab:79:7a:94:e8:10:03:7a:05:7d:e6:6f:29:78:e0:01:01:07:
7d:86:cc:b4:93:85:ec:07:2e:c6:ef:81:e6:96:60:29:7d:26:
5b:cf:af:85:00:24:e6:d2:92:d7:b6:5a:83:a8:84:82:90:57:
61:a1:01:a0:73:ed:b4:0f:79:72:43:73:81:ce:87:48:bf:cd:
09:6d:68:76:1d:fd:b7:b6:18:01:29:10:42:99:df:37:75:ac:
68:63:36:11:9d:18:1e:e7:cc:2b:18:d5:cb:51:b0:e3:a2:57:
3a:06:96:4f:86:10:ed:20:f8:bb:10:4c:fc:ae:5a:36:1e:d1:
2b:fd:6e:0e:f2:8a:1d:35:b4:1f:06:b5:3a:bb:b3:b6:78:58:
d2:ee:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:04:51 2026 by rpki-client