
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: 3tj3GvGXoZVjWc43QftHObu+MuseoIFunCZzFGB1T3w=
Subject key identifier: 38:5E:40:24:8C:26:AA:02:B8:59:A5:67:C3:BD:72:F4:FE:7A:F4:A1
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 019EC0DBAC7E89EC04E9610D62B8D80F6E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 12:01:22 +0000
Manifest this update: Sat 13 Jun 2026 12:01:22 +0000
Manifest next update: Sun 14 Jun 2026 12:01:22 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: vmsvFpdfatwAT6DIj6k6NGzL6d+EUjgfHiu98BxT0Ts=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:ac:7e:89:ec:04:e9:61:0d:62:b8:d8:0f:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: Jun 13 12:01:22 2026 GMT
Not After : Jun 14 12:01:22 2026 GMT
Subject: CN=385e40248c26aa02b859a567c3bd72f4fe7af4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:09:8f:c9:a8:2c:69:5a:d7:00:9e:b8:fe:
c6:7a:0d:18:54:5a:40:3e:66:bf:87:1d:4e:43:e4:
a6:fd:d6:b3:c5:a7:ec:ce:41:1c:ae:72:9b:4d:18:
88:44:95:7c:35:e1:89:02:92:f4:08:56:06:09:23:
e7:39:6f:de:9e:58:5e:91:46:7b:a8:f7:5a:b1:88:
4e:00:ab:67:d2:af:e2:d8:18:d5:c0:b3:d5:8f:80:
fd:f0:12:74:92:b7:3f:c9:95:d0:eb:04:77:02:66:
fa:31:12:34:3a:0c:d8:fd:91:ef:a8:99:89:58:e7:
a3:39:63:b2:d9:fb:74:28:c7:b9:d4:62:10:a1:7c:
d9:07:c2:4e:13:d4:e9:53:18:42:17:49:5d:4f:74:
a3:63:8d:17:e1:e6:85:fc:68:ca:6c:ac:2b:49:e3:
9d:4f:99:d2:c4:75:e1:bc:9e:b5:67:70:8c:14:5b:
e5:89:35:7b:bb:cd:c8:34:84:23:7f:bb:9d:20:d0:
a1:9c:1f:24:ab:70:80:51:2f:79:52:31:19:f3:57:
fb:e6:1c:43:43:e1:9f:1f:59:17:f1:49:ed:d3:bf:
cd:50:92:d6:c6:02:06:4c:cb:52:ed:74:86:00:0b:
a7:7e:07:ef:42:85:8a:87:2e:bb:d4:f6:f3:af:d6:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5E:40:24:8C:26:AA:02:B8:59:A5:67:C3:BD:72:F4:FE:7A:F4:A1
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:28:2e:6c:da:62:39:9b:23:f4:2b:00:94:a2:3a:b9:73:2d:
7c:40:df:00:c3:3e:d6:20:22:9e:ab:a0:85:df:a2:fd:fe:b8:
ef:30:16:37:89:5a:59:fd:ac:6e:06:19:6c:a9:ef:f3:db:ef:
35:4f:0f:ab:58:66:12:aa:1c:4a:1b:ad:84:3c:23:08:70:5f:
49:9e:d2:25:c2:e8:cf:44:ee:f5:c2:32:2f:de:51:bc:bb:5b:
e7:83:69:71:ae:00:8b:02:68:d5:0f:f3:70:ac:ab:55:70:70:
f7:9d:cd:c6:e7:92:1e:79:96:62:94:94:b8:85:e3:48:3a:5b:
dc:f6:09:4a:d9:ec:22:95:a4:10:7c:59:b0:dc:0e:b0:ae:28:
69:01:2c:c6:fd:c7:83:6d:90:3c:4b:b0:6d:4e:0f:ae:ce:49:
0e:67:71:3b:e8:2d:e3:77:df:fe:ed:e8:89:6c:71:d7:53:8e:
f4:f0:14:60:26:e0:b8:da:f7:81:de:2f:e8:72:4a:36:95:10:
70:2f:af:3a:71:90:b6:b9:c8:4b:60:23:bb:e7:78:56:a0:69:
a7:d3:b6:58:78:65:a5:1d:01:cd:6c:0f:c4:95:52:2d:ac:53:
9a:eb:a8:9c:b3:5f:9a:1c:c9:aa:6b:e6:b8:f9:ae:98:a8:8b:
fd:6e:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:10 2026 by rpki-client