Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: vxQir+CgjGhLi/Vag6nRCfUoRQ6yU1SvJ1Dy+FH3QMc=
Subject key identifier: 83:11:A2:B8:49:C0:3A:42:31:B0:94:45:37:F9:DE:4F:5A:62:19:31
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 019DA4F82DA98FBB6EB26F718BE11EAD53F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 09:00:21 +0000
Manifest this update: Sun 19 Apr 2026 09:00:21 +0000
Manifest next update: Mon 20 Apr 2026 09:00:21 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: ZmwCkcfSCusVDf+p/pROIB9T5xFNi765TWswCJJdJ7Y=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:2d:a9:8f:bb:6e:b2:6f:71:8b:e1:1e:ad:53:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: Apr 19 09:00:21 2026 GMT
Not After : Apr 20 09:00:21 2026 GMT
Subject: CN=8311a2b849c03a4231b0944537f9de4f5a621931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:60:47:bd:b9:5f:52:a5:2f:f1:0e:d9:a2:
b9:43:60:6c:dc:57:9c:86:32:4d:e3:25:36:ce:ee:
78:fb:fb:2f:32:1c:d6:ea:96:98:ad:eb:ed:03:21:
26:aa:48:56:30:a8:43:9e:e6:f2:63:a5:d2:81:d3:
35:07:26:c9:c8:36:89:32:c2:62:f7:41:82:c0:bb:
a0:96:cb:88:2a:69:1e:d7:d1:5b:e8:60:c4:e4:d1:
52:84:76:1d:f1:d5:f8:b4:40:84:3b:5c:0d:33:27:
da:59:d9:c1:97:c5:b0:4e:36:be:de:37:45:05:a0:
16:03:82:62:9a:62:85:0b:09:aa:4e:2f:ee:0c:fe:
15:fb:d2:49:5f:57:7d:2b:2b:ad:e1:ff:2c:67:db:
2e:f5:67:e5:d7:b1:18:f0:4b:88:b3:99:8d:da:ec:
be:f3:dd:be:f5:9a:23:b9:4d:29:cc:41:fe:5a:4b:
31:3b:2b:0d:0b:20:1f:36:a4:be:79:4e:fd:7b:24:
05:8f:19:51:e2:dd:86:d6:00:b5:a4:f8:ff:73:38:
e8:db:63:e8:f7:7b:d5:7c:89:22:ea:62:50:7a:3c:
72:2d:a2:e1:84:a3:19:ab:b5:ea:38:58:23:65:10:
2e:b1:4f:f3:33:81:ce:5b:e6:5f:67:dd:11:0d:76:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:A2:B8:49:C0:3A:42:31:B0:94:45:37:F9:DE:4F:5A:62:19:31
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cf:3a:29:4c:a5:78:9b:f3:23:48:0c:12:9e:de:d7:12:0f:
0d:ac:9f:be:ac:42:da:9f:2d:95:55:eb:b1:9b:d3:0e:ea:53:
85:9f:99:6f:46:0e:61:ea:ff:53:48:e8:18:21:a5:54:87:ca:
d4:9e:18:94:e3:3f:df:71:22:83:f9:49:1a:19:a2:27:49:99:
76:b3:35:e2:05:99:57:69:20:73:90:92:2f:72:33:1f:56:99:
a4:bb:73:43:f5:0f:02:7d:01:88:3a:ac:c3:b1:30:1a:d8:86:
24:05:1b:8c:a6:5e:54:ae:c7:b8:50:ed:37:83:b2:1b:bb:cb:
73:e5:cb:23:b1:ec:7a:d6:60:3b:9b:f1:10:07:4e:2f:dd:d3:
c7:3d:5c:02:bc:7c:c8:f7:af:6d:d5:09:de:f1:4f:51:d1:b7:
cf:9d:ed:64:61:ee:fa:af:80:e4:e1:ab:19:89:58:af:be:2e:
82:ca:4c:88:16:ab:d6:4f:a4:49:c5:a5:45:03:91:7e:bd:5f:
5c:cc:30:ac:5d:18:c0:61:fe:00:14:62:f8:69:69:eb:46:34:
f0:b4:15:d1:3f:55:46:29:b9:fa:21:51:88:06:4e:70:17:32:
c3:e3:72:b1:df:8a:6a:4e:4f:b5:e1:f0:44:66:7e:7b:b5:11:
80:bf:6f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:15 2026 by rpki-client