Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: QiLfs4plJGPokRoyZmWY2d8saei9hYyegpvdOYAL22E=
Subject key identifier: 05:C9:80:8E:E9:55:B4:CA:F2:55:B7:77:16:39:21:77:EC:0A:0F:93
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 019FAA887555B2C3FE1A247A9F51B5F10C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 21:01:37 +0000
Manifest this update: Tue 28 Jul 2026 21:01:37 +0000
Manifest next update: Wed 29 Jul 2026 21:01:37 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: o4cU1eCDM4+NL5DAsK1tKoPR5Jceed5UAnnw+6CUu+U=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:75:55:b2:c3:fe:1a:24:7a:9f:51:b5:f1:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: Jul 28 21:01:37 2026 GMT
Not After : Jul 29 21:01:37 2026 GMT
Subject: CN=05c9808ee955b4caf255b77716392177ec0a0f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:48:bd:a3:5d:20:13:d1:e7:31:6a:ab:00:7c:
2d:3f:b3:20:a8:bf:af:3e:79:f3:c0:ea:4b:dc:23:
45:ab:a6:b6:4a:00:8c:69:56:63:a4:19:63:5c:cb:
c3:c2:3c:ab:1b:b2:dc:d2:48:1d:5d:1f:3c:66:2d:
02:f5:9a:0e:82:4a:ff:4e:ec:6e:be:21:8b:78:ab:
bc:af:ef:e1:fd:09:43:5a:1a:e8:c1:87:80:6e:09:
1a:d3:5a:e4:dc:5b:04:b1:08:25:a7:7d:5e:b5:e4:
71:fb:75:79:35:6d:c4:9a:eb:6f:b7:dc:ad:68:91:
50:47:c0:4a:f6:79:07:bb:73:ec:d9:ba:80:75:94:
c0:41:7e:90:0f:31:99:ea:7a:83:b4:95:9d:46:67:
4c:cd:6c:c2:df:9f:ca:de:9b:51:3d:f2:04:89:8f:
26:a9:d8:2c:2f:b4:00:54:cd:5b:7e:cb:63:cb:75:
90:f2:16:3f:0c:f5:5d:d7:24:83:a1:ce:4e:db:83:
09:82:c5:0d:1e:8e:7d:c1:c5:a3:e3:74:5c:fe:31:
d4:24:20:04:a5:42:37:c2:1d:23:ad:70:53:be:e3:
ae:1f:2b:1d:6c:62:89:ed:d1:b9:3b:ee:00:65:c9:
a0:c6:9f:4b:06:ee:6e:73:f5:23:51:6f:d2:38:14:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:80:8E:E9:55:B4:CA:F2:55:B7:77:16:39:21:77:EC:0A:0F:93
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:13:8a:8b:ae:d2:8d:f2:91:e2:31:8e:72:c9:2e:3d:2b:
67:f2:1f:45:41:b4:86:ec:d0:f9:68:3d:87:ad:d1:57:a3:ad:
0f:db:93:0c:86:e5:0b:2c:6e:6e:c2:a0:cf:98:d3:59:7d:28:
1a:c6:cb:dd:f5:f0:b5:f3:22:f0:a4:7d:5d:97:7c:eb:f0:f2:
b8:96:41:04:59:b0:40:32:37:6b:a9:07:ae:01:0a:c2:30:07:
a6:94:2e:ac:fa:96:21:55:d3:d2:a0:76:37:3e:69:a5:86:b7:
04:1b:94:60:66:4c:15:d2:92:bd:ea:1a:85:fc:41:96:a9:63:
98:bc:15:da:65:4b:52:d5:af:69:c5:2b:3b:20:2f:04:52:12:
5d:e4:65:4e:3b:28:67:08:03:60:37:f5:68:c3:2f:fd:83:41:
32:74:01:ea:96:25:6e:e7:41:85:5c:6f:4d:b4:64:98:29:94:
c8:f7:9a:13:2b:de:d6:7a:a1:31:20:81:7f:01:c2:58:7f:30:
c2:8e:5a:64:63:37:d7:c5:6b:54:6f:f9:71:62:ce:3b:ce:b2:
2e:ac:33:81:ef:5d:fd:b8:1d:fd:af:71:79:dc:72:fe:63:ab:
65:f2:e8:ba:0b:2d:92:16:a9:fc:6c:7c:26:c4:30:bd:ad:99:
b7:eb:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:53 2026 by rpki-client