Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: iquUYq3cyUGZUQKL9RItcda9X5YCbIX879izDwT6uag=
Subject key identifier: 6E:8B:08:28:94:E0:55:C4:A1:8F:5E:4D:9D:FB:B0:20:2D:A5:FF:79
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019EBFC9302B7F24C5622E0E92233FCFE9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 0300
Signing time: Sat 13 Jun 2026 07:01:33 +0000
Manifest this update: Sat 13 Jun 2026 07:01:33 +0000
Manifest next update: Sun 14 Jun 2026 07:01:33 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: h5zNFQMoP1ytXWnMCPhg+1Xksk8GkAnPq3SEL4hoGyI=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:30:2b:7f:24:c5:62:2e:0e:92:23:3f:cf:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Jun 13 07:01:33 2026 GMT
Not After : Jun 14 07:01:33 2026 GMT
Subject: CN=6e8b082894e055c4a18f5e4d9dfbb0202da5ff79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:42:a3:70:65:e4:1b:23:ca:96:2e:cf:62:
54:2e:b7:18:f2:de:2e:12:02:72:ea:3b:78:4c:c6:
25:46:3c:de:1f:b2:58:97:08:89:79:52:ed:73:cc:
e9:9c:9c:1d:63:c8:97:0a:1c:3b:00:bf:ce:b1:91:
06:d6:14:6f:1f:81:fd:ce:a7:23:ca:c9:59:33:5e:
ee:d8:79:89:3e:60:bf:99:09:a2:8e:94:6f:69:61:
5a:21:fe:bb:5e:99:47:8d:e3:ec:cd:34:da:55:1f:
7d:21:38:bb:06:de:f4:7f:6d:db:20:6f:7b:b8:95:
c2:f6:fc:5c:e6:8f:04:99:ea:77:35:b0:c1:3c:af:
a1:db:b6:dc:6b:28:2c:3b:fa:97:99:87:2d:bb:5f:
75:d5:ae:69:ed:89:58:a5:50:96:83:92:ca:52:e7:
11:1e:8e:0a:09:d1:e0:7c:bc:1c:7b:90:b1:08:fb:
6a:c0:01:85:fa:06:c4:11:87:59:89:07:5f:ff:7b:
69:a2:5e:5c:e2:c4:43:8f:9d:de:b0:2c:9b:5f:0d:
f2:59:ad:b8:27:a3:97:26:83:74:6f:b2:fe:bb:6a:
62:5f:0f:1f:ee:93:02:f9:aa:dc:22:2b:88:3f:0c:
e8:f1:10:90:99:d1:21:6a:40:ba:48:5d:2a:ce:7b:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:08:28:94:E0:55:C4:A1:8F:5E:4D:9D:FB:B0:20:2D:A5:FF:79
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:9c:85:75:a0:e1:f7:54:77:ed:57:5c:2b:fb:8d:b2:61:
ff:ed:cc:31:6a:17:18:bf:f1:c8:63:4f:9d:6d:87:ea:46:d3:
77:9a:6a:97:f5:83:f0:97:76:20:bd:9a:1d:42:2c:54:2f:a7:
98:31:f0:93:a5:93:bd:ea:8e:be:06:71:c5:66:b2:1d:a0:83:
9c:f8:2c:ec:3c:48:ac:1f:80:08:e1:ff:3f:6c:e6:5d:02:b6:
bd:ea:eb:43:04:84:d4:2a:fe:4b:78:18:e9:cf:5f:13:9a:35:
31:be:21:13:b4:aa:68:02:48:44:9f:73:b1:51:5d:2e:7f:37:
ec:b6:4a:17:13:df:0f:c5:db:70:c4:60:b0:ae:76:de:dd:80:
2c:f6:ee:e6:46:03:f2:71:11:3c:af:7e:7c:06:61:a1:cd:5f:
ca:2c:99:b5:70:12:70:98:f2:34:49:79:96:52:bf:9d:29:5b:
83:43:29:44:80:c7:7d:85:ba:ae:30:56:22:52:5d:04:c0:3c:
d2:38:a9:0a:4b:0a:8f:e4:46:bd:da:37:ff:d4:a0:12:95:f1:
f8:b2:90:15:d2:c9:5b:80:b6:9a:ac:7b:68:d6:e0:aa:db:48:
57:0b:74:f7:e0:22:57:de:f6:d6:51:65:b2:ad:bb:2e:44:e4:
59:33:54:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:25:26 2026 by rpki-client