Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: ql9YNb8T8x1aDeb+0DDvzY/41fROtmm2kROyYwxyHa8=
Subject key identifier: 8E:6D:40:F9:DF:98:9C:72:C4:E3:3D:E4:54:B8:AD:D4:42:1F:C6:0B
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 01A0D192F9BAFCE14B3AABB337C3DF0C0D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 04:01:05 +0000
Manifest this update: Thu 24 Sep 2026 04:01:05 +0000
Manifest next update: Fri 25 Sep 2026 04:01:05 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: kccEgaIs5bWLHhOGrksOt+T/a5wFKttiO8WohIlJc2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:f9:ba:fc:e1:4b:3a:ab:b3:37:c3:df:0c:0d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Sep 24 04:01:05 2026 GMT
Not After : Sep 25 04:01:05 2026 GMT
Subject: CN=8e6d40f9df989c72c4e33de454b8add4421fc60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:46:bd:0a:7b:31:9f:6b:01:aa:cb:f0:c5:
6b:a6:b1:22:b9:99:58:02:82:40:3b:a8:16:01:13:
bd:f1:f9:cd:16:c4:4e:49:2f:43:3a:84:0c:f3:1b:
9e:b7:f2:bc:d3:9c:8c:c8:2a:ce:05:ea:df:cf:a0:
fd:78:04:f7:32:95:2e:e9:32:43:47:64:71:cf:9a:
aa:70:f2:3b:02:2e:03:85:3c:a5:31:dd:c0:a5:a5:
27:65:cb:bb:ca:66:5d:0b:ae:eb:73:6a:78:94:27:
0c:bf:98:c8:c1:e0:85:6c:d7:d7:54:3c:e9:d5:c7:
9d:6b:c8:af:c3:be:10:ff:3a:6c:95:b9:22:05:e9:
e3:b5:13:ee:e8:21:66:a4:eb:21:14:32:df:f4:f8:
52:d9:60:98:97:45:0c:2d:e8:9a:b9:b1:96:83:5a:
e7:12:32:fd:89:f5:f8:aa:02:46:20:d8:da:16:32:
17:48:ba:e2:3a:1d:9d:6a:aa:fa:bf:43:d9:94:e8:
58:9f:fa:1d:51:3f:5e:26:2a:d6:17:63:8c:47:1d:
ca:86:52:a0:5f:e4:7e:cf:e2:56:eb:f2:05:6f:06:
e6:b2:68:59:95:13:56:1c:df:93:7c:01:4f:c5:b4:
d5:fe:9b:1c:e2:29:7c:f9:1e:3e:42:68:7e:55:22:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6D:40:F9:DF:98:9C:72:C4:E3:3D:E4:54:B8:AD:D4:42:1F:C6:0B
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:98:a9:02:ba:50:dd:98:87:a4:14:b8:86:94:7a:74:7e:5d:
d4:a1:df:cc:b0:5e:67:f9:24:6f:33:4d:b4:83:67:18:ab:58:
e7:61:18:f6:61:c5:f6:3d:ba:61:11:2f:20:8f:90:52:b5:7f:
b9:51:26:88:30:f9:09:3f:e7:d8:d5:33:f1:dc:ae:f7:85:6f:
ab:9e:ed:2e:7a:73:da:1f:70:20:c8:5f:cf:25:f6:96:e0:e7:
ee:45:bf:8a:96:d4:a8:ca:02:df:2c:e8:6d:c9:3c:82:f6:16:
e1:17:bc:00:70:41:33:18:7c:93:f4:93:57:b6:a2:98:67:45:
07:2f:5a:43:22:bd:7d:dc:bd:f8:fc:31:6b:f2:57:73:76:57:
4e:81:85:ef:32:84:2f:d3:c5:2b:9b:66:78:2c:9b:68:b3:be:
6f:e2:d4:7c:e7:e1:c3:35:44:0a:e6:3b:a1:fc:e2:2a:e4:44:
61:b5:04:ec:d8:74:c6:04:e1:be:a4:55:3c:58:f1:1c:4b:4e:
79:24:9c:8c:25:45:92:b0:14:ea:0b:2a:1f:19:15:1a:1f:bb:
3f:92:aa:4d:b8:b0:e7:49:f9:91:59:14:05:37:9a:59:1a:e1:
d7:d3:ec:85:95:09:29:9e:11:87:ab:08:53:5a:d7:ed:3c:12:
e0:1b:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:51:39 2026 by rpki-client