Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: 9dgSi2WdpgaDTAhM5LBZfgL6qQUg5pWMV0Hr9kH85hQ=
Subject key identifier: DD:8E:43:41:37:0B:74:38:0C:08:4F:32:80:FD:DD:47:90:2E:26:79
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019F9059F32942CAC25CAFF528F8DDA15C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: 036C
Signing time: Thu 23 Jul 2026 19:00:41 +0000
Manifest this update: Thu 23 Jul 2026 19:00:41 +0000
Manifest next update: Fri 24 Jul 2026 19:00:41 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: rVBIujZP2m4crY6jVWiDpOIqc2053CPffco7XqZqGjI=)
2: CB4aLTKTt-QwFxoSiPz1WhXyJGI.roa (hash: MQyZeiopI+FRTy0ldbZvGSKhzWyeip7e2QwNaMhUJOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f3:29:42:ca:c2:5c:af:f5:28:f8:dd:a1:5c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Jul 23 19:00:41 2026 GMT
Not After : Jul 24 19:00:41 2026 GMT
Subject: CN=dd8e4341370b74380c084f3280fddd47902e2679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:1a:ff:53:a5:47:47:d7:63:a5:22:33:b4:
0a:8f:6a:68:16:cf:6c:8d:d9:17:29:21:92:e4:7c:
51:e9:c6:67:b4:08:ac:94:a3:f9:95:47:c1:9e:eb:
ca:bf:3f:f4:f9:94:69:62:5d:14:ac:f6:1c:8b:38:
5a:59:e2:13:f1:0c:6e:ae:47:9e:7b:3d:f6:f9:4a:
fc:9e:7c:84:d4:e3:e3:cf:b2:f5:92:63:59:8f:56:
a5:13:2c:c2:fa:5f:fd:1c:3e:5b:9a:63:8e:5f:ff:
d8:ce:17:c0:47:48:f7:9f:e4:5d:e2:39:62:30:7f:
f1:a1:21:cf:b6:cf:4d:12:4a:6c:03:ca:44:82:e4:
9a:6b:b7:e8:e7:c9:bf:35:f6:1f:94:83:1e:1c:8a:
5a:5d:50:3a:e2:fb:17:bb:81:62:50:09:a3:c4:3a:
62:49:03:1a:3a:bb:ec:bb:5d:23:3f:6a:55:2f:b9:
db:2e:08:7a:c7:75:5f:61:6c:1d:66:9e:63:8a:5f:
6c:23:91:da:d1:cb:ef:63:06:c1:a4:81:ec:cf:58:
14:a7:af:d1:3f:cd:ac:0f:17:b7:a3:61:4c:a0:09:
d1:b6:d7:47:f8:ba:d5:13:6b:3c:f2:40:af:eb:48:
d9:80:16:df:58:26:f1:8c:46:28:0b:bd:91:8c:73:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:43:41:37:0B:74:38:0C:08:4F:32:80:FD:DD:47:90:2E:26:79
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:44:be:c4:21:f3:50:15:c4:08:22:26:09:00:e7:d1:96:f6:
10:8d:58:3b:cc:be:84:ba:d4:fe:fc:4f:ae:e8:b2:46:f2:a3:
1e:4e:3f:ba:7e:8b:94:88:97:68:75:93:43:fd:e1:e9:b5:2b:
ea:32:11:88:53:c1:3a:3a:01:02:8f:4c:53:1a:f0:0c:bf:39:
36:96:c4:4d:8d:2b:ad:34:af:32:b4:a5:8a:db:64:47:49:c1:
9e:be:5e:01:99:7c:31:ab:a7:aa:a9:6e:c0:ec:f6:d6:b4:40:
75:da:09:43:5f:9d:c8:75:15:fe:a7:08:df:3b:a4:2d:e6:cd:
3f:16:ca:25:79:ad:be:56:1b:7d:b7:f4:bb:5c:f9:da:e8:72:
8a:fa:06:c1:f9:02:6b:d9:0f:a3:4c:e1:71:ac:70:46:c5:8a:
bc:b3:68:71:27:00:18:1f:81:1c:59:42:43:d4:47:ed:83:16:
ad:f7:60:1c:91:f4:d6:0c:b6:9f:88:f2:52:0a:25:b0:6b:b7:
5c:66:2c:08:96:0e:6a:31:50:21:27:87:78:b3:cc:1f:ec:be:
e9:1b:b0:8a:2c:0f:d1:56:0b:a6:37:48:51:32:ed:18:90:fb:
a4:9b:b5:2c:e3:84:1d:79:d8:e9:c7:1b:8e:29:73:75:a5:bf:
05:07:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:11 2026 by rpki-client