Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: NEOI0zWF+S7c7zmginjfW0PUbbQT5K0dEqmW5a7RicI=
Subject key identifier: 5D:C4:34:03:A4:7C:A5:B4:70:00:87:B7:00:41:BC:93:2D:CD:A9:95
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019CAB34654BFC3C05EAC994127DBC72D4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 01E9
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: vZiC4jr5DxBr/+UqT9jrfy8xGVqOC+kcw4pEEsXNh+o=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
3: Ga3UDOpYfgNzEoEP6SCJ3qpT1GI.roa (hash: l0pSXZWDcOE87oqHCiYGC4+D1pIC7qRKEwvtCxYBnHM=)
4: p5Wte5KuVonuaL_tZSX57RTdUT4.roa (hash: qSw05xyX0DIMUSTujhOo8yXFH7V8hwTiYDbx9AgCqbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:65:4b:fc:3c:05:ea:c9:94:12:7d:bc:72:d4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=5dc43403a47ca5b4700087b70041bc932dcda995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:3c:ce:0e:cf:4d:45:0d:28:94:13:58:82:
e9:ba:ac:02:39:9d:c3:5a:6e:e7:bd:6a:b5:60:8d:
d0:d8:83:cd:bd:5c:20:67:62:a4:88:56:a7:ce:84:
15:23:bd:54:80:87:f7:f9:51:18:e4:c8:82:51:7c:
23:58:5a:5c:eb:8c:80:56:39:75:d0:85:48:93:63:
8f:43:61:03:6d:f7:81:a8:e6:9c:86:fa:12:a2:0b:
b1:e7:ac:fa:85:c7:af:60:63:44:db:40:e0:13:f0:
5f:0b:fd:bd:49:ec:f0:14:5f:98:a6:6d:a7:83:73:
48:53:88:b7:71:78:30:61:77:1f:6a:0e:2e:22:9d:
15:6c:18:09:06:c5:a9:f7:74:93:bb:65:8a:33:2c:
e4:20:57:1e:c4:43:74:d6:75:11:02:d9:2a:94:cc:
21:00:a2:cd:51:ca:4b:40:40:ae:13:53:40:12:c5:
ce:5d:77:de:ee:18:db:74:99:7c:a2:bd:65:02:7a:
cc:33:73:c4:03:f0:54:21:e9:05:75:61:17:70:70:
f8:79:f4:5c:be:ec:10:e6:4e:a7:fb:a7:93:da:4b:
33:1c:94:22:7c:42:3c:c2:49:a8:9c:25:12:20:9e:
68:67:31:2b:c4:51:7f:c1:6f:64:f1:42:31:97:b0:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C4:34:03:A4:7C:A5:B4:70:00:87:B7:00:41:BC:93:2D:CD:A9:95
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:8f:9d:f1:de:f1:71:5b:53:75:b7:0f:44:2f:19:b8:a0:
18:05:3a:3c:c0:0d:d1:00:e6:60:5b:55:79:e1:70:d5:36:1f:
15:ee:31:39:2a:84:89:24:66:ad:f9:b0:f5:33:b9:e6:31:f6:
8e:0f:ae:9a:9c:1a:87:ff:24:37:52:f1:45:dc:fe:55:80:18:
57:4a:16:9b:63:65:c2:4b:51:30:3d:ae:47:a9:ac:3a:00:21:
41:d1:14:2b:3d:76:95:66:04:b8:27:a3:47:b2:a1:1f:53:f6:
e8:d0:b9:a9:17:33:a3:f2:81:b9:ff:c5:17:cf:d1:eb:7b:ea:
45:2e:95:c8:a3:2f:70:87:47:ff:df:cf:f6:af:ab:e0:17:50:
94:97:ef:d6:13:b7:8a:ee:54:2b:98:fc:a0:cc:e4:43:80:c2:
ea:9f:2a:4a:13:5a:ab:7d:1b:ed:10:f5:e6:b3:12:3c:b6:48:
64:bd:f3:a5:83:e7:b0:97:d6:c2:a7:d4:bf:ad:6a:db:ac:89:
c1:8e:d6:7c:fb:a6:d9:e5:91:b9:b8:d4:9b:1c:b2:59:c4:fd:
31:7d:f5:91:06:20:68:2d:23:d7:da:66:ea:b7:d0:d2:aa:70:
24:04:7b:be:c3:34:13:b9:c5:f3:ce:6e:d0:6d:6e:ff:d0:da:
40:74:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:56 2026 by rpki-client