Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: WMh2lgpIgfJj0cxSYDWQJGhfZBQePJAnRwyHp2ZsDhA=
Subject key identifier: 36:5E:49:48:DC:93:FB:E8:8D:E0:3B:84:AF:58:90:6A:BC:5B:87:D0
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 019D29607EFB1DB562DB4264C647382E8F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 09:01:22 +0000
Manifest this update: Thu 26 Mar 2026 09:01:22 +0000
Manifest next update: Fri 27 Mar 2026 09:01:22 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: y20WuIfgoo2YS7y873NqmqP4DKHOr/uc/9Qpk3i7pXk=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7e:fb:1d:b5:62:db:42:64:c6:47:38:2e:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: Mar 26 09:01:22 2026 GMT
Not After : Mar 27 09:01:22 2026 GMT
Subject: CN=365e4948dc93fbe88de03b84af58906abc5b87d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:aa:4e:b5:3f:5d:a8:fd:9d:bf:e9:e4:9e:
64:1a:db:63:2d:7a:11:b5:39:8a:71:90:86:1b:a3:
79:e6:84:71:76:16:2c:80:fd:97:12:cb:d2:cc:cd:
09:b6:24:13:44:00:01:6c:a3:8f:be:82:98:96:d7:
cf:ac:08:fe:bc:fe:a6:71:d0:55:8a:64:02:e4:68:
d0:b8:da:07:22:8a:d2:94:6a:87:48:43:f5:cd:eb:
21:d9:ea:e7:07:66:f2:7e:5e:7f:d3:74:98:84:a7:
7f:49:94:fb:d1:42:5c:c9:32:9c:63:b4:31:94:a8:
52:6e:1a:63:0e:54:fb:af:3d:a9:96:c6:c3:9d:26:
6b:2f:13:bf:e8:66:5e:0c:32:6e:d1:17:1f:66:f0:
65:e6:28:0c:07:9b:d8:ce:99:44:08:0c:72:7f:e6:
c9:ba:b0:c0:52:64:92:4c:b6:78:d6:a9:0f:96:44:
cb:57:16:09:3b:d4:66:60:f5:97:a4:fa:aa:90:70:
3b:20:16:37:fa:d9:ec:e4:ed:9c:86:90:30:d4:fb:
21:6b:54:2b:12:82:96:ff:3c:5f:5b:d3:ff:01:59:
7f:41:96:a5:d6:f3:8a:c8:61:7e:ea:cf:91:c4:fd:
bf:f6:39:c7:c9:87:4e:f6:7e:81:12:5f:ed:5e:97:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5E:49:48:DC:93:FB:E8:8D:E0:3B:84:AF:58:90:6A:BC:5B:87:D0
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f2:3b:ba:93:b2:63:e3:51:73:fa:58:c4:a5:c5:78:cc:4f:
a4:0e:7c:2e:2e:61:f0:c4:8d:a4:b9:5a:c3:28:4a:ea:6a:73:
3a:73:d6:3d:cf:8c:67:4b:f9:c3:53:92:91:8d:9a:4d:a8:93:
0b:c2:84:83:08:f2:a9:4b:9d:61:b6:0f:73:ba:76:aa:1b:31:
1e:a1:ba:b9:4d:9d:0d:e7:27:02:d9:df:f4:fd:7e:9e:32:15:
71:cf:d0:3a:53:f5:03:bd:d5:dd:75:a9:58:ff:97:13:2d:5e:
13:62:49:b9:08:50:47:0d:4d:5b:20:98:d9:c2:82:ad:05:94:
9b:da:c9:3d:e6:93:22:e4:53:ac:e3:cc:4d:2c:1e:df:4d:96:
70:e8:96:68:04:f3:59:d9:c7:b5:83:62:a4:48:93:66:a5:b9:
7c:fe:07:33:62:ce:1c:c2:8a:6f:d9:e6:90:0f:3f:c2:0a:dc:
8c:d6:95:88:dd:a5:c2:c2:a0:eb:f2:dc:da:66:67:99:dd:aa:
4c:e6:fc:18:b8:1e:25:47:3e:ab:36:6c:51:12:16:d6:52:19:
7a:0d:e7:a7:d2:8a:b1:fd:c5:2e:60:a7:73:2a:04:6a:ce:39:
aa:65:a6:3c:73:cf:76:cf:62:91:bd:e9:3e:c5:13:f1:1f:21:
0a:43:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:21 2026 by rpki-client