Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: 3zqTLXYGB507S3wm041D4ViJVJee7VJhB3yXSn1Mrkg=
Subject key identifier: F3:23:48:E1:DB:F7:95:FD:D4:87:F7:1B:DE:3C:F3:DE:09:1C:07:63
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019D273AD406ACBFCACC9C568F1AAB5E42A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 022C
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: 4PT3sh3RciSmszqFVhojTLc+V42G67jjCxf/QCA9DCw=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
3: oUYxyz9K10owyMgLb9Tbkm17AiY.roa (hash: AGy37bHGmP4SIowccjLydimzeuBoQwkNyn1U3LuqE2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d4:06:ac:bf:ca:cc:9c:56:8f:1a:ab:5e:42:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=f32348e1dbf795fdd487f71bde3cf3de091c0763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:e2:7d:2a:4b:98:82:49:c3:3e:0c:b4:b0:
86:e4:22:06:ed:80:8f:dc:4f:ac:18:bc:74:90:f8:
17:b0:34:42:1b:78:c0:f4:71:11:1c:88:70:d3:20:
34:86:67:a0:39:c4:3a:77:57:8d:9b:67:72:44:4e:
0f:23:30:09:49:71:d5:63:ed:34:db:44:21:26:4a:
9a:7b:e3:89:9a:ee:ef:55:b5:f4:c1:c7:a8:43:ce:
e3:83:c5:39:5e:69:3c:36:8c:76:66:b7:4c:a0:81:
c5:69:48:c0:9b:92:8e:1f:af:35:46:ff:1d:bd:2b:
12:d4:8a:8d:fe:c5:a0:98:30:79:fa:21:7f:e8:5f:
83:16:47:ab:09:5e:99:1d:46:e4:4c:bf:cd:b3:eb:
66:8e:a3:0c:79:65:e0:9a:1d:18:94:e6:8d:eb:76:
be:af:97:1a:d0:c2:34:ae:d8:88:2d:06:71:0a:42:
af:d8:ea:76:ce:c5:68:da:a3:ee:3d:08:74:ae:5f:
b0:6e:61:8d:4c:c5:c3:5e:86:11:8a:e7:a6:e6:20:
16:40:81:0b:a4:10:98:e0:2d:0e:d7:14:2f:9a:b2:
b0:e5:63:e2:b8:13:f6:34:cb:e3:e1:2a:1e:96:58:
99:27:a0:8d:40:67:7e:5a:37:6b:c3:c5:90:e8:b1:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:48:E1:DB:F7:95:FD:D4:87:F7:1B:DE:3C:F3:DE:09:1C:07:63
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ed:b2:6d:bb:e4:d0:6a:ae:7a:ac:91:e9:18:c3:b4:3e:8c:
9f:1b:30:8c:d0:26:0d:b9:97:e1:f8:3f:2f:7f:79:78:68:9c:
5d:62:4f:08:02:c1:2f:f3:15:1f:8d:14:91:24:a1:29:f1:b1:
70:0b:aa:be:8c:25:d5:bd:e6:1a:97:0a:bc:ad:a2:f9:17:bb:
d8:c9:d6:ce:f0:fb:d0:0f:07:91:9e:b1:39:6e:45:cd:a7:8f:
c0:f5:3b:86:ed:3a:9d:07:7f:d3:af:1d:9a:e2:0a:fe:45:6f:
01:0d:e6:67:66:d0:c5:82:4b:b2:32:63:07:7d:3c:ca:d2:11:
10:3b:11:97:59:9e:32:6d:c5:3b:e4:fd:15:14:d2:56:7e:c9:
f5:c6:72:5a:ca:09:83:57:5c:2a:6e:50:1c:f8:82:33:01:f1:
1b:d2:82:15:72:ef:bf:47:bf:5d:49:00:f0:41:54:9b:19:a9:
b5:b0:2a:86:c3:7d:f3:63:a3:f0:d3:61:11:3a:42:1e:c5:27:
0b:a8:9a:32:08:36:80:14:3b:39:df:ae:ad:66:4e:8f:cf:43:
24:4c:ce:de:ca:e6:4a:fe:4e:63:40:55:14:0d:84:70:ea:de:
86:55:41:7a:d1:2f:35:2b:ab:6b:90:45:68:e0:06:43:6c:65:
f2:a8:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:49 2026 by rpki-client