Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: 8C/crH/yCvIfVk92KwUodBk+lU8wfMYAELsh7MUEQ9w=
Subject key identifier: 00:36:27:C5:2D:53:30:0E:CB:D0:66:D5:79:58:4E:8F:83:08:9E:F5
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 01A0ED0B68BDA98E72B144A73B50E6AC03DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: 0292
Signing time: Tue 29 Sep 2026 12:02:22 +0000
Manifest this update: Tue 29 Sep 2026 12:02:22 +0000
Manifest next update: Wed 30 Sep 2026 12:02:22 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: C5+aHfyLY36HNtYvX8F3l0HzhKX29xVAORKzRVhD/MA=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:68:bd:a9:8e:72:b1:44:a7:3b:50:e6:ac:03:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: Sep 29 12:02:22 2026 GMT
Not After : Sep 30 12:02:22 2026 GMT
Subject: CN=003627c52d53300ecbd066d579584e8f83089ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:db:ce:37:6d:d7:9e:48:a5:df:fb:04:2d:
45:52:c8:eb:71:c4:6f:ee:82:a6:5f:45:ac:e3:17:
69:61:22:9c:8b:4b:78:1d:30:52:00:9e:7b:d4:f3:
77:a7:c8:0f:76:a7:74:0c:ce:95:26:6e:99:ec:61:
89:8d:35:5e:11:1b:7c:02:bd:5f:31:3e:22:38:4f:
e4:e6:34:13:8b:ec:64:04:f9:8f:f9:54:ac:38:58:
32:a2:61:38:1d:a2:8d:57:f5:a6:84:1b:69:9e:21:
e7:06:5d:a0:5d:ce:04:8f:64:d3:74:9d:7f:6e:3e:
d6:d8:33:fb:67:eb:3d:b3:cb:35:65:40:27:07:8b:
13:dd:12:da:cd:f6:31:a1:74:d1:d1:ad:b5:77:a6:
61:d6:2c:78:71:f3:18:2b:13:58:9b:74:e6:9f:70:
0c:f4:32:ae:a9:77:fb:62:1a:e7:e9:43:89:e2:99:
77:a2:f7:24:36:50:9c:28:46:39:45:c4:4d:26:7d:
b0:bb:d3:70:6f:84:46:2a:24:50:87:bd:ba:4e:f5:
c6:af:78:9b:a7:ce:6e:71:50:35:51:50:db:41:60:
1c:c9:b3:18:a7:97:18:a8:8b:bc:ae:b8:9b:87:61:
1f:e8:a3:d9:8b:ff:50:65:5e:73:93:0f:3c:aa:9f:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:36:27:C5:2D:53:30:0E:CB:D0:66:D5:79:58:4E:8F:83:08:9E:F5
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:60:93:ec:24:38:0f:c3:8d:26:7b:48:75:33:78:56:53:4a:
c6:f9:d2:9f:36:e6:fb:c6:3b:c7:95:04:7c:ab:eb:b0:cf:b7:
be:25:43:ed:5e:14:17:84:73:e5:43:46:fa:14:f5:27:09:90:
6a:5f:c4:44:48:f0:e0:04:94:38:cd:06:61:f5:e3:23:e3:5b:
55:ef:04:69:a0:ce:11:e3:9e:c9:f7:57:9e:a1:ad:20:1b:b8:
50:9c:ac:e6:04:13:b9:23:10:1f:1b:e5:d1:a1:98:5d:77:79:
4a:07:8d:b3:ae:43:fe:c0:e1:01:f8:78:2d:fc:27:1d:ae:f9:
4a:c9:48:42:d0:45:f5:ee:86:9d:c8:d9:c8:1f:08:45:49:f6:
0d:da:6c:be:51:4d:d2:b8:c7:bf:c2:c5:73:6c:51:b6:cc:24:
f5:36:66:65:9d:a1:98:f5:e4:1e:8e:4d:c0:35:93:3a:fd:07:
9f:05:97:f3:0b:0a:ed:6c:36:d6:e8:c1:15:9c:b0:da:d7:88:
68:e7:1b:cf:7e:da:bf:2b:da:ec:b0:ae:b6:01:3c:65:34:49:
0e:34:09:00:55:77:0f:df:4f:a6:38:ae:c3:06:00:03:df:58:
1a:d4:10:77:9e:9e:de:8d:05:db:b8:bc:49:12:24:c3:95:b0:
10:0e:5c:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtC2i9qY5ysUSnO1DmrAPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YTY2NTM0MjA5MDk1MmYyMDdkMDhhMjNkYzhiNmMzNzc2
NzQ5MjcwHhcNMjYwOTI5MTIwMjIyWhcNMjYwOTMwMTIwMjIyWjAzMTEwLwYDVQQD
EygwMDM2MjdjNTJkNTMzMDBlY2JkMDY2ZDU3OTU4NGU4ZjgzMDg5ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hHbzjdt155Ipd/7BC1FUsjrccRv
7oKmX0Ws4xdpYSKci0t4HTBSAJ571PN3p8gPdqd0DM6VJm6Z7GGJjTVeERt8Ar1f
MT4iOE/k5jQTi+xkBPmP+VSsOFgyomE4HaKNV/WmhBtpniHnBl2gXc4Ej2TTdJ1/
bj7W2DP7Z+s9s8s1ZUAnB4sT3RLazfYxoXTR0a21d6Zh1ix4cfMYKxNYm3Tmn3AM
9DKuqXf7Yhrn6UOJ4pl3ovckNlCcKEY5RcRNJn2wu9Nwb4RGKiRQh726TvXGr3ib
p85ucVA1UVDbQWAcybMYp5cYqIu8rribh2Ef6KPZi/9QZV5zkw88qp+lMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA2J8UtUzAOy9Bm1XlYTo+DCJ71MB8GA1UdIwQY
MBaAFNemZTQgkJUvIH0Ioj3ItsN3Z0knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMt
ZGM4MjY4ZWIyNzE4LzEvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMtZGM4MjY4ZWIyNzE4
LzEvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmCT7CQ4
D8ONJntIdTN4VlNKxvnSnzbm+8Y7x5UEfKvrsM+3viVD7V4UF4Rz5UNG+hT1JwmQ
al/EREjw4ASUOM0GYfXjI+NbVe8EaaDOEeOeyfdXnqGtIBu4UJys5gQTuSMQHxvl
0aGYXXd5SgeNs65D/sDhAfh4LfwnHa75SslIQtBF9e6GncjZyB8IRUn2DdpsvlFN
0rjHv8LFc2xRtswk9TZmZZ2hmPXkHo5NwDWTOv0HnwWX8wsK7Ww21ujBFZyw2teI
aOcbz37avyva7LCutgE8ZTRJDjQJAFV3D99PpjiuwwYAA99YGtQQd56e3o0F27i8
SRIkw5WwEA5cLg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 21:08:12 2026 by rpki-client