Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: nbc3K5qbNpsaDcfSI+dIo1x7eDvabipDFs94MD62bq4=
Subject key identifier: CF:6C:D8:59:21:99:0C:A2:73:B2:43:15:37:BF:DB:99:C0:B8:D8:C2
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 01A0CE9117178A22E53FB0FC093CD59CEFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 0411
Signing time: Wed 23 Sep 2026 14:00:10 +0000
Manifest this update: Wed 23 Sep 2026 14:00:10 +0000
Manifest next update: Thu 24 Sep 2026 14:00:10 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: RFU9qQZJYTneHh5CLBwL3s6xwOzq3BLs/1TleHrYJGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:17:17:8a:22:e5:3f:b0:fc:09:3c:d5:9c:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Sep 23 14:00:10 2026 GMT
Not After : Sep 24 14:00:10 2026 GMT
Subject: CN=cf6cd85921990ca273b2431537bfdb99c0b8d8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:35:c7:9f:61:14:cd:19:fa:89:09:4b:2e:
e5:b3:68:e9:b8:34:fb:be:f0:df:e9:b2:10:28:8e:
b4:f3:de:62:87:5b:0f:64:2f:d5:1b:b8:97:8a:0a:
21:3f:38:cc:a5:85:05:43:cb:54:26:c3:bb:fe:f4:
cd:ed:e3:bb:09:c0:18:b0:85:e1:2b:67:d8:9a:b0:
fd:1f:76:da:53:19:e3:3f:19:b2:50:31:f9:47:2b:
a8:c8:67:22:c9:55:fb:58:46:01:9e:d3:15:ef:f1:
b5:05:7d:dd:f1:6c:57:9c:41:c1:f2:49:c7:f6:e7:
21:9e:e1:a5:66:04:0a:7f:9a:31:0d:11:11:6c:50:
e0:67:8c:47:fe:49:17:17:c0:e6:a5:78:a1:5d:96:
0a:80:79:21:44:57:6a:4f:60:18:ce:57:0f:3a:3f:
13:2c:5b:9f:87:d6:58:12:df:95:76:6c:aa:00:00:
de:8e:b2:af:ec:2b:b5:dc:fd:b5:05:63:8d:50:a9:
22:3b:2f:b2:1a:89:b8:74:b5:3f:a1:30:23:78:33:
a3:0f:2d:40:fc:a1:5c:46:38:d5:48:5f:07:eb:3a:
18:94:94:5c:c7:21:79:24:c5:46:c3:a1:97:94:4a:
37:f2:d5:f9:4d:26:11:af:db:37:ac:38:15:df:59:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:D8:59:21:99:0C:A2:73:B2:43:15:37:BF:DB:99:C0:B8:D8:C2
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:98:c0:bd:99:6a:d8:19:0e:0c:c2:15:19:cc:9e:3d:eb:f8:
df:8a:3f:08:5a:8e:65:74:aa:d4:6c:26:79:6e:4d:ef:a9:9d:
6c:d9:d1:d4:7c:63:96:7c:fc:c1:20:e3:ef:21:83:9e:66:35:
2d:7f:c9:84:ac:87:30:65:34:c0:b1:27:3f:48:b5:92:ec:f1:
f2:69:a4:67:e8:3f:2f:b2:ce:3f:5e:06:17:4b:8f:61:f1:3f:
a6:8a:2b:db:7d:6b:35:e7:5f:83:e7:70:bb:6e:92:78:0c:b9:
8d:70:b3:14:d9:8e:2e:e0:f6:7c:ac:c9:24:5f:49:6c:d1:43:
43:8f:51:de:bb:de:5a:53:45:cb:d5:fc:9a:f1:a7:ef:80:5a:
23:c7:5f:1a:00:43:91:2e:2e:9e:27:7d:37:89:e0:a7:64:67:
53:f9:e2:e1:c3:73:ca:ef:02:04:0d:66:90:58:20:94:41:a5:
27:64:53:e4:0e:60:0e:ad:d8:f9:5f:e6:05:8b:ef:98:b7:1a:
a2:a5:8c:bd:3f:3e:95:0a:02:62:b6:f5:3d:7d:cd:10:2f:87:
ea:c3:cc:a5:4b:a4:ff:7e:67:76:55:fc:c1:7a:52:e0:60:b5:
c5:f9:17:7a:c0:79:3c:f2:d1:4d:6c:30:0d:c2:f5:52:09:e3:
f7:ef:46:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkRcXiiLlP7D8CTzVnO+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YTgwMDY4YmQ3MzI4ZWY0MTEyMGY0Nzg4YzI4ZDNhOTIw
NDcwNjcwHhcNMjYwOTIzMTQwMDEwWhcNMjYwOTI0MTQwMDEwWjAzMTEwLwYDVQQD
EyhjZjZjZDg1OTIxOTkwY2EyNzNiMjQzMTUzN2JmZGI5OWMwYjhkOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn41x59hFM0Z+okJSy7ls2jpuDT7
vvDf6bIQKI60895ih1sPZC/VG7iXigohPzjMpYUFQ8tUJsO7/vTN7eO7CcAYsIXh
K2fYmrD9H3baUxnjPxmyUDH5RyuoyGciyVX7WEYBntMV7/G1BX3d8WxXnEHB8knH
9uchnuGlZgQKf5oxDRERbFDgZ4xH/kkXF8DmpXihXZYKgHkhRFdqT2AYzlcPOj8T
LFufh9ZYEt+VdmyqAADejrKv7Cu13P21BWONUKkiOy+yGom4dLU/oTAjeDOjDy1A
/KFcRjjVSF8H6zoYlJRcxyF5JMVGw6GXlEo38tX5TSYRr9s3rDgV31mRoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9s2FkhmQyic7JDFTe/25nAuNjCMB8GA1UdIwQY
MBaAFNeoAGi9cyjvQRIPR4jCjTqSBHBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYt
ZWYzMzJhMDI1NmQ2LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYtZWYzMzJhMDI1NmQ2
LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJjAvZlq
2BkODMIVGcyePev434o/CFqOZXSq1GwmeW5N76mdbNnR1Hxjlnz8wSDj7yGDnmY1
LX/JhKyHMGU0wLEnP0i1kuzx8mmkZ+g/L7LOP14GF0uPYfE/poor231rNedfg+dw
u26SeAy5jXCzFNmOLuD2fKzJJF9JbNFDQ49R3rveWlNFy9X8mvGn74BaI8dfGgBD
kS4unid9N4ngp2RnU/ni4cNzyu8CBA1mkFgglEGlJ2RT5A5gDq3Y+V/mBYvvmLca
oqWMvT8+lQoCYrb1PX3NEC+H6sPMpUuk/35ndlX8wXpS4GC1xfkXesB5PPLRTWww
DcL1Ugnj9+9GNQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:23:04 2026 by rpki-client