Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: Gu/7i1onEkbdLLqYlFeH4ud8oAg0QKqdjMED7Flu9dc=
Subject key identifier: 7C:9D:75:A5:EC:33:89:4A:3B:E6:3E:87:D6:42:83:96:FB:3D:9D:EC
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019FA975A757597BE40D258B5FE9BCA2E7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 0379
Signing time: Tue 28 Jul 2026 16:01:27 +0000
Manifest this update: Tue 28 Jul 2026 16:01:27 +0000
Manifest next update: Wed 29 Jul 2026 16:01:27 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: 96FxQ6QUQ1QPf6qk77yl3RhjG6OArjuXJnvr2P18dEc=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a7:57:59:7b:e4:0d:25:8b:5f:e9:bc:a2:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Jul 28 16:01:27 2026 GMT
Not After : Jul 29 16:01:27 2026 GMT
Subject: CN=7c9d75a5ec33894a3be63e87d6428396fb3d9dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:d8:aa:31:f3:fc:20:e7:fe:b0:f9:10:64:
16:03:1b:f6:ff:c6:23:2d:66:82:2e:ed:a6:df:94:
85:68:6e:d6:b9:69:21:c1:75:0f:ca:37:75:a4:ea:
92:95:38:8a:9d:41:22:86:0e:17:8a:23:59:33:20:
0b:ce:5b:a2:7c:7c:cc:92:1b:97:cb:75:55:4e:79:
34:8b:9e:e0:ef:77:91:5b:ed:fb:9f:c6:27:57:a4:
c2:c3:98:8e:c5:ff:bc:b2:f0:b1:a9:d2:b2:e4:ce:
92:04:59:56:fe:87:0f:0e:d8:26:46:97:43:c5:0b:
f3:d6:83:99:0d:e6:52:ad:4f:80:11:25:c6:90:c2:
e7:58:dd:38:5f:23:ba:c5:25:4b:c9:b1:b5:81:0c:
d6:13:77:27:de:2b:6d:37:a1:a8:01:9b:76:af:00:
a5:54:b5:af:1f:21:bf:e6:06:3f:dc:71:9b:18:03:
02:7d:c9:7e:df:ad:ae:26:4a:91:05:8b:24:59:be:
37:fe:71:86:10:41:b5:e6:af:62:19:24:7b:6e:92:
22:0c:4b:e7:bb:73:91:ea:bb:9c:b0:0f:79:13:a9:
b1:36:c9:79:65:1f:05:92:e8:4c:15:de:f6:25:0c:
7f:2c:fc:bf:a7:8a:cf:c4:1d:fd:15:e6:f6:33:b8:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:75:A5:EC:33:89:4A:3B:E6:3E:87:D6:42:83:96:FB:3D:9D:EC
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ac:35:54:18:07:7e:2c:87:9a:83:9a:9d:dc:44:69:c3:ae:
28:e1:e1:a0:43:31:b7:70:d2:fb:f2:81:93:f7:c0:a9:8e:2a:
cc:5b:7f:e3:70:e1:9e:4b:00:54:30:c1:e4:b4:fe:9a:cc:1c:
ef:a7:25:4c:3b:fb:b1:55:08:5e:fb:56:5d:3d:8c:81:80:30:
b8:4f:57:1b:b7:d7:fb:c4:ae:1d:ca:07:ff:d2:f6:53:f7:db:
79:d7:7b:36:85:81:d8:f9:20:18:75:3a:6e:29:fd:47:2b:8d:
f8:96:8c:cf:62:ca:a7:d1:0e:28:c7:48:51:c0:f3:fd:2f:7c:
df:27:ac:96:97:df:85:af:e0:78:57:54:92:56:94:71:c7:d2:
6a:c9:95:76:f4:ba:39:76:4b:76:17:51:08:68:ec:ed:5d:3c:
57:50:43:05:f6:55:af:81:cc:e6:ef:a0:46:03:06:65:2c:f0:
c5:65:25:02:5d:60:a0:43:a6:15:fe:43:28:de:bb:38:49:3b:
88:28:fd:98:6f:aa:8a:17:29:12:a7:2c:73:a7:c3:af:0f:f0:
34:93:2d:19:07:46:37:aa:0b:77:a8:6c:8f:0e:8f:de:97:57:
4d:0d:ca:75:64:96:d0:7b:af:e6:b7:2c:12:10:e8:db:a0:d0:
4c:18:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:44 2026 by rpki-client