Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File: w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier: kLn40WcJWqscCe0oci57qterkqPwtccPnDQqkQwxpCk=
Subject key identifier: 35:CB:5B:F9:81:F2:65:6D:46:63:6E:C9:BC:AE:72:06:53:4D:6B:2C
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer: /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial: 019CAEA306643AAE33D963A96432133B6ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number: 16C9
Signing time: Mon 02 Mar 2026 13:00:45 +0000
Manifest this update: Mon 02 Mar 2026 13:00:45 +0000
Manifest next update: Tue 03 Mar 2026 13:00:45 +0000
Files and hashes: 1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: ZeYG9nbvhYoHKaegZ56G6c4OgRNqK9QGm0HRi/0i4fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:06:64:3a:ae:33:d9:63:a9:64:32:13:3b:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Validity
Not Before: Mar 2 13:00:45 2026 GMT
Not After : Mar 3 13:00:45 2026 GMT
Subject: CN=35cb5bf981f2656d46636ec9bcae7206534d6b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:d4:f4:92:cf:0c:dd:a1:9d:5e:20:c3:87:
67:30:c2:23:48:2a:c8:e5:01:bf:f2:6e:70:d3:6c:
93:54:aa:c8:5f:c8:33:7d:86:8e:d1:a8:93:d8:93:
85:60:14:5d:18:be:a7:11:59:3d:9d:79:b8:f2:3a:
53:48:5b:4f:b5:44:5a:c9:18:39:69:14:94:f9:55:
3f:ef:2e:f5:ef:98:04:10:f4:0e:67:c6:f7:3e:67:
b9:97:9f:84:31:30:85:23:24:e5:85:54:8e:ba:00:
6c:09:40:ad:da:6e:68:bb:28:97:7e:3f:e9:9c:66:
d2:5a:d4:9f:85:3a:5c:89:2f:63:bf:40:5a:3c:71:
b5:d6:52:79:61:e6:5e:45:cf:e0:4e:1e:dc:ab:c7:
86:52:c2:09:ed:50:27:d1:44:22:b0:3e:e8:d0:6c:
5f:29:6b:8b:26:c6:a8:3e:04:62:f6:12:2a:a5:f5:
ed:76:4d:31:1d:b3:33:92:8e:76:1e:30:24:af:c0:
96:63:e2:1e:94:3e:c7:80:87:11:89:cd:ff:a8:3a:
79:78:94:0d:51:d8:ad:90:92:b9:c1:42:63:bc:3b:
84:86:58:c2:36:4d:ba:aa:37:ce:1a:a9:7f:70:76:
fc:c1:75:d4:7e:4a:59:86:3b:c4:24:2f:38:2a:b0:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:5B:F9:81:F2:65:6D:46:63:6E:C9:BC:AE:72:06:53:4D:6B:2C
X509v3 Authority Key Identifier:
keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:2a:cc:a7:6b:7b:ed:f6:72:d5:ef:40:93:b6:78:15:c6:
e6:c1:c0:6c:6c:d9:f7:0a:8a:30:ea:2d:f2:94:01:dd:e0:8d:
c8:26:2b:8b:86:d4:04:77:52:7f:b2:eb:65:8d:5e:fa:ad:3c:
8c:fd:6c:c5:33:57:c0:71:33:a8:94:91:95:2d:50:27:4f:b8:
16:ae:ca:c8:cd:bb:30:2a:50:04:cd:eb:f5:7c:25:e7:75:2e:
4c:40:83:a9:27:ed:05:29:2f:2d:73:0e:28:46:35:54:cb:74:
f4:ff:6c:bc:f3:05:f4:a8:b4:35:f7:d5:a5:89:97:e1:96:25:
75:ba:90:11:f8:14:24:17:23:33:ea:e4:14:e6:04:ad:c2:3d:
00:2e:fa:ea:24:40:1b:4d:78:71:b0:f1:23:1d:09:e9:af:eb:
b5:d0:e6:1e:e3:b2:c4:f1:e5:f9:c7:e3:98:b5:99:12:d5:4e:
7b:bd:90:78:82:e1:a4:4a:7e:5f:e7:b2:62:ae:37:67:a6:b9:
06:43:0a:ae:7a:76:d4:49:38:3b:25:3c:23:b7:8d:99:60:e0:
b4:ab:e2:55:03:a0:57:da:59:2f:fd:29:ff:99:a3:c0:72:fb:
e0:45:46:c2:05:5e:ca:2d:2a:4b:b2:d1:c1:28:c1:d5:98:0d:
4a:69:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:45 2026 by rpki-client