Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: KyYxLMMI9qqJBHX7BtNRfnZIoVsGI5BsOBm9sen8tso=
Subject key identifier: 46:F3:3A:D4:28:0B:E4:AB:49:CB:A7:BD:AC:EC:10:8C:82:CF:E8:DF
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019E1D9045CC40857C82D1551082BFD26B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 02AC
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: s+KwUjf+QvGwhVTUL/pT2pa6BZRCAM6NkFIUYf+Mm4M=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:45:cc:40:85:7c:82:d1:55:10:82:bf:d2:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=46f33ad4280be4ab49cba7bdacec108c82cfe8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:7a:83:cd:3d:42:52:91:7a:52:89:c4:07:
1b:54:8a:36:f2:21:c7:12:5b:48:07:ec:29:a2:ac:
54:6e:6b:4f:ef:c6:4b:d7:8b:4e:96:49:81:ca:c8:
83:fa:53:31:76:f0:8d:46:d0:d6:cd:66:a2:ee:77:
0a:2e:4a:0a:1f:9f:16:ff:ca:df:da:ec:c8:f8:2f:
6b:1d:ce:1e:62:05:e4:95:d6:94:e3:a4:e6:01:ea:
4b:ea:4b:f2:b5:5e:d2:af:79:b5:37:cc:bb:28:d3:
6a:8c:bd:2c:ba:28:d7:ab:1f:08:55:1d:ce:05:7c:
06:e6:9e:be:c5:09:d5:cd:28:79:b3:ab:21:e3:aa:
89:a0:e6:f5:22:0d:45:d0:bd:a2:ff:10:60:2d:88:
c6:bf:e6:74:b5:72:33:7e:13:de:5c:7f:df:3f:1a:
f8:38:a1:fd:e6:41:ca:66:06:8c:84:f3:a2:e1:5c:
1c:79:57:be:0e:1e:aa:89:2e:28:ea:a4:19:85:ff:
69:44:c7:73:cd:e8:c6:b1:2e:c4:ee:5a:4c:6e:bd:
09:e2:bb:c9:c8:b4:83:89:89:48:e3:f6:3c:8d:5b:
5d:79:6a:5d:08:23:c7:d6:40:0b:26:f2:29:2a:8d:
54:3d:48:15:be:8a:24:36:ab:31:16:8b:93:19:f7:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F3:3A:D4:28:0B:E4:AB:49:CB:A7:BD:AC:EC:10:8C:82:CF:E8:DF
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8c:5f:37:2d:c1:41:ca:a9:9d:77:c6:4e:c1:5d:19:db:b1:
87:c2:38:e8:13:31:31:1f:5b:32:c5:20:95:ba:9a:73:8f:9e:
f8:c7:90:a8:6b:42:40:23:ca:bc:b4:d2:de:0a:30:02:e5:d0:
de:85:01:a5:51:d9:22:59:34:ee:f7:11:ba:60:61:ca:86:95:
d8:f0:67:95:71:53:d8:40:73:f2:69:be:94:35:29:50:29:da:
85:9e:53:5e:6d:23:26:e2:38:4f:ff:4d:e3:fc:9a:b2:f0:ab:
1f:49:5b:ee:6b:59:36:94:4f:3a:1d:17:2c:1c:93:2f:67:a7:
41:9b:da:be:29:08:6f:9f:42:16:ff:5f:67:77:ed:fc:0c:2a:
fe:44:5d:a2:d7:b7:fa:7d:c4:3d:7b:2d:b6:01:5f:ce:01:6d:
de:c1:d6:51:3f:64:f3:49:e5:bc:bd:8d:5b:94:0d:1d:9b:43:
95:72:e6:d4:33:ec:19:10:f3:b3:be:04:5d:b6:9e:1d:5e:e3:
da:a0:6e:22:6e:c1:9a:38:52:e0:ae:92:56:92:1e:ac:4b:7d:
eb:0d:ad:15:52:c6:3e:11:69:c5:49:67:8a:58:eb:64:21:8e:
de:e5:84:b8:00:56:b5:4e:ee:de:8c:94:ce:9f:38:d1:d0:87:
b0:cc:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:56 2026 by rpki-client