Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: cafePj7KKEGzdJs7LSrBbEWHuxrjXXp/OXVvdTrU/CY=
Subject key identifier: 8A:58:7A:83:F0:C3:37:43:85:05:16:9D:A5:79:B8:52:A7:9E:8A:C0
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019D9B195E46CE65955BEA80AF0E763D9313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 0268
Signing time: Fri 17 Apr 2026 11:00:24 +0000
Manifest this update: Fri 17 Apr 2026 11:00:24 +0000
Manifest next update: Sat 18 Apr 2026 11:00:24 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: lfLnk8+GlibMr7KfW9oRxZSLDzJcT/RH3gq/o6mTeFo=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
3: oUYxyz9K10owyMgLb9Tbkm17AiY.roa (hash: AGy37bHGmP4SIowccjLydimzeuBoQwkNyn1U3LuqE2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:5e:46:ce:65:95:5b:ea:80:af:0e:76:3d:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Apr 17 11:00:24 2026 GMT
Not After : Apr 18 11:00:24 2026 GMT
Subject: CN=8a587a83f0c337438505169da579b852a79e8ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:34:3d:2b:9d:74:99:b3:57:55:8a:c4:be:
51:82:0d:cd:a6:ed:3b:96:59:75:f7:bd:68:b5:8b:
7b:af:e1:2b:e7:7f:ec:bd:4d:b9:2a:db:36:7e:14:
62:dd:e6:03:af:c8:9d:a6:60:d8:5c:db:40:b9:72:
bd:3e:06:5d:ad:e8:9c:ef:73:36:74:f4:93:d8:d0:
13:32:16:db:89:ea:61:da:67:f9:41:42:5a:dc:36:
3d:52:70:25:8f:d9:06:6f:ad:54:d2:8a:9f:e0:71:
69:78:6b:54:23:dc:55:5a:75:e6:10:be:c1:02:0f:
a9:57:88:72:f8:b3:8e:3b:10:4a:34:8b:ab:9a:49:
f6:39:eb:87:a4:1f:23:59:90:06:c4:e6:d1:04:b8:
1c:5a:1f:e0:c2:5d:ae:f7:44:95:82:df:37:6a:c5:
c4:16:e8:1e:54:dc:c7:15:d7:d5:91:db:cf:72:28:
3b:18:44:ba:21:32:d6:b4:db:be:66:48:6a:3c:ec:
03:18:02:8c:51:0b:22:b9:b9:3e:cd:1d:9e:05:a8:
b7:71:a8:df:93:e8:84:54:a6:c6:75:91:95:20:dd:
cc:0e:9e:a9:82:0c:1d:87:5f:55:ab:fd:8b:09:9b:
43:d6:de:7e:b2:1a:68:50:73:d4:25:94:b7:c9:47:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:7A:83:F0:C3:37:43:85:05:16:9D:A5:79:B8:52:A7:9E:8A:C0
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:47:7d:9f:89:97:87:e5:7b:e6:21:bf:61:e3:7c:46:2b:19:
38:f2:92:c6:36:03:ff:50:e0:46:ed:d5:e0:c1:e3:09:f1:61:
af:a1:cb:83:69:b4:c7:08:63:29:db:e8:76:da:f2:5f:5e:c5:
b4:9f:2e:7c:a7:a5:c8:63:e2:de:82:c8:49:e8:26:be:28:d1:
01:31:c4:2a:55:e5:75:52:7e:2a:bb:f0:0f:00:31:98:5e:1a:
39:1b:3f:5b:fb:12:29:d0:08:51:af:02:b0:7b:16:cc:1f:94:
c0:43:e4:c3:d1:d2:42:dc:4b:59:d7:99:0b:db:10:b7:be:10:
ac:e9:9b:26:d7:c9:3a:75:11:e5:56:51:21:38:6b:30:c7:41:
c8:15:9e:71:55:76:7e:ed:24:e5:f0:b3:af:ee:46:9b:3f:90:
f4:6b:26:64:ce:cb:d8:9c:81:77:8a:35:d3:2d:a2:ec:1d:31:
d9:54:d9:21:0c:c4:7a:c8:a4:8d:e9:b9:e4:d9:7f:9a:a8:f2:
c3:18:e2:b4:9b:2d:0a:6d:0a:43:69:0b:5d:95:11:ac:79:5c:
35:a4:30:4e:bd:14:cd:80:f1:f9:30:bb:3b:39:ae:37:88:79:
ed:71:e4:a6:8a:40:01:ba:ca:d4:1c:aa:7d:5b:5a:73:a3:df:
00:2e:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:17 2026 by rpki-client