Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: w1DM8vdDBzzdoAckQh9ZZ0iRnmfOzJrl2hfW8GDqH4c=
Subject key identifier: A7:91:94:E8:56:3B:4B:DE:E1:B1:AD:0C:CF:A0:EA:3E:F6:6D:A9:48
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 019D348965CB5BC0A690AFC5F74665B30CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 188A
Signing time: Sat 28 Mar 2026 13:01:52 +0000
Manifest this update: Sat 28 Mar 2026 13:01:52 +0000
Manifest next update: Sun 29 Mar 2026 13:01:52 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: GWrD6WNvJoeFfe1JKcTzxZ9JgjHlNEt8tC5o+wsAbfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:65:cb:5b:c0:a6:90:af:c5:f7:46:65:b3:0c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Mar 28 13:01:52 2026 GMT
Not After : Mar 29 13:01:52 2026 GMT
Subject: CN=a79194e8563b4bdee1b1ad0ccfa0ea3ef66da948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:60:db:c2:71:57:97:09:53:0f:c1:4b:22:
cf:b0:8a:30:6a:72:71:80:1d:5f:22:b3:6b:0b:89:
ab:93:fe:8e:84:ff:82:5d:e0:1f:8f:01:39:7a:cc:
82:f7:11:85:b4:b0:ee:ed:f2:5b:7d:cc:c5:ff:22:
94:ae:f2:3e:7d:ea:3a:d2:b6:26:37:b5:f4:ad:52:
39:4c:c6:35:92:30:c6:ad:ee:84:f1:5e:ef:24:c2:
26:bf:5c:a2:4c:b1:3d:2b:8c:b9:0c:89:a4:a0:49:
95:30:c0:9b:d7:4c:7f:11:11:08:eb:18:0d:8e:c5:
4c:71:6a:98:ed:3d:74:3a:64:85:27:79:c1:42:13:
f9:bc:4e:e1:9e:49:73:e1:b0:e6:75:b1:b0:e5:4a:
ee:32:bc:d4:5a:46:a3:f4:4e:42:54:99:f8:c9:6c:
b7:49:b4:a9:7e:4d:08:f0:c5:67:83:64:0f:90:76:
29:e2:71:21:f0:a9:51:69:78:8c:ce:02:5e:4d:42:
c9:66:e5:4e:f7:87:6d:4a:f5:c0:cb:2e:94:dc:17:
16:9c:ce:9e:6d:6c:8b:22:cc:38:4b:af:1a:3e:bc:
ee:84:68:00:47:e8:47:02:ba:03:fe:53:d3:07:7a:
b6:5c:b6:db:82:77:e6:e3:76:c8:bf:06:95:d5:fb:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:91:94:E8:56:3B:4B:DE:E1:B1:AD:0C:CF:A0:EA:3E:F6:6D:A9:48
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:94:67:71:cb:75:dd:fd:b8:1f:40:bb:80:78:a8:32:76:
3c:64:5e:46:4e:91:46:e6:cc:93:2d:1a:d5:8f:fe:47:61:29:
06:18:74:63:0f:1c:e6:0a:22:95:01:b6:e5:20:6f:42:e1:9b:
4e:e3:37:f1:10:49:08:51:82:4a:8f:a2:bb:5e:85:76:33:08:
62:ba:1b:8a:1e:31:43:13:4e:93:36:64:70:5d:2a:20:cd:ce:
1e:1e:d6:6b:40:5c:14:f4:d1:a2:88:ae:0f:82:3f:19:c1:51:
c0:66:1e:6d:52:b5:2a:b2:d7:cf:83:2d:55:a0:34:be:69:6e:
8f:86:c6:ee:34:fd:92:e3:9f:b3:34:90:49:5e:62:91:88:ac:
e0:62:0f:12:a6:14:09:dc:1a:17:05:dc:8f:72:23:cd:e7:99:
6c:45:5b:56:a5:94:70:fa:a4:3c:4d:4d:29:6b:02:df:ed:5b:
d1:e7:5b:57:ee:c0:2f:81:44:c8:24:ac:75:20:ff:22:68:52:
8e:ee:67:7d:74:98:20:b2:8f:c7:fb:b9:df:09:fd:78:40:38:
18:51:45:d9:48:37:dd:ab:ae:bf:20:8e:8c:0d:32:28:4d:da:
72:03:da:02:a7:a2:4d:73:b9:87:fc:71:5f:9f:af:51:86:d3:
ae:1a:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:04 2026 by rpki-client