Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: dVdn/yhLMqWR5nmeGqRzTZv68gWdbqGQqK5IjQ26oPg=
Subject key identifier: CA:B2:44:AB:E7:4B:62:C8:F7:52:C0:99:71:9D:3C:C5:10:3C:F6:4F
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 019E1E355461F4718DD37B4C93263A9A9C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 22:01:11 +0000
Manifest this update: Tue 12 May 2026 22:01:11 +0000
Manifest next update: Wed 13 May 2026 22:01:11 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: 7hMLenoSvYXymtUXNvUqqip04lnw8oppoD8IqUBtZc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:54:61:f4:71:8d:d3:7b:4c:93:26:3a:9a:9c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: May 12 22:01:11 2026 GMT
Not After : May 13 22:01:11 2026 GMT
Subject: CN=cab244abe74b62c8f752c099719d3cc5103cf64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:11:bd:64:3b:c0:3f:16:bc:8d:a3:95:52:
7d:89:02:4d:0c:ca:f1:8b:5b:8e:56:d3:a0:d9:92:
9b:1e:54:73:a9:10:61:ed:05:e2:9a:a4:e2:04:28:
da:c1:4e:08:24:9b:a7:12:7b:f0:18:28:3b:92:ee:
ef:2f:2d:06:51:21:ba:71:8f:76:f2:f3:d3:82:f0:
34:42:f9:b3:0f:5b:4e:13:ee:3e:2d:01:d0:d0:63:
2f:23:a5:89:c3:74:97:53:2b:a6:e3:02:73:b5:c0:
df:30:4c:d4:3e:f3:7e:db:7c:f9:5f:05:3f:ae:68:
71:12:8f:8f:fc:b4:80:c1:9c:1c:07:87:61:e5:17:
6e:81:99:a7:33:38:65:8b:9b:30:06:0c:2f:cd:0d:
db:9c:44:48:62:29:e8:ed:00:e8:c6:47:88:f5:0d:
ac:42:f8:7b:1b:38:da:d2:1c:4b:38:e2:b3:3b:37:
fe:29:04:34:84:97:5a:db:af:cf:59:02:1a:e2:d5:
cf:18:0a:d7:f9:5b:f2:4d:60:0c:a4:d7:d0:71:43:
d7:eb:00:e6:03:e4:c1:cd:bf:fa:51:bd:a3:72:71:
6b:4b:a0:73:49:dc:5f:13:61:f1:9b:9d:dd:d3:a0:
81:91:50:d9:d2:e6:80:b3:3e:2b:83:3a:c0:69:07:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:44:AB:E7:4B:62:C8:F7:52:C0:99:71:9D:3C:C5:10:3C:F6:4F
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a6:07:ad:63:64:45:b8:26:af:50:dc:b8:03:00:20:de:89:
aa:37:9f:48:ce:91:4e:17:7e:96:eb:ac:dc:46:36:89:69:7c:
02:04:f7:f6:83:95:c5:60:78:86:41:d4:20:ff:6e:4e:22:3d:
ce:59:6d:99:f2:7c:1a:49:a3:a4:9f:65:71:59:37:b7:01:79:
30:b8:6f:15:27:ea:3b:33:33:9c:5e:38:e7:f9:1a:4a:de:b2:
90:61:7f:08:98:9c:3f:77:d9:7f:ec:51:3f:1b:5c:3b:d2:78:
99:d9:08:95:1f:3c:9b:fd:8e:a0:57:4e:a9:2c:22:c3:eb:7d:
bd:3b:9b:b9:26:48:ae:b5:82:2b:4e:26:44:0c:ee:5a:92:84:
de:34:0a:30:ce:b8:c5:77:c1:6f:79:37:15:0b:80:83:10:b1:
ec:f8:2b:dd:7c:81:a4:27:e4:29:7a:e5:8a:e0:c1:ee:83:cc:
82:77:55:e7:6d:08:0c:a5:44:77:e4:fc:44:07:75:1e:37:9c:
d4:e6:10:a4:ae:8f:bd:56:de:98:01:7d:9e:22:f9:2d:04:36:
11:1c:55:ea:9a:e8:b8:d0:98:9a:9d:08:9f:24:2a:fe:6c:8a:
0c:38:4f:e4:80:aa:26:b9:34:61:2d:f2:4c:e8:bd:09:a2:ed:
e6:43:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:21 2026 by rpki-client