Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: HnX4ppnOssDKSavKYbW/qniw3qyRHKh1gA7DrNxlGWE=
Subject key identifier: F2:40:1D:C9:8E:AA:90:27:66:21:F5:3D:11:D0:EB:AE:EA:63:D8:AD
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 019E1EA3449E28E37BA932F9A9F328B1360E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: 011E
Signing time: Wed 13 May 2026 00:01:16 +0000
Manifest this update: Wed 13 May 2026 00:01:16 +0000
Manifest next update: Thu 14 May 2026 00:01:16 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: PqdvQLYBvF+ohFTKKHRDmzYPXYUhnOILj1bM+L5ni74=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:44:9e:28:e3:7b:a9:32:f9:a9:f3:28:b1:36:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: May 13 00:01:16 2026 GMT
Not After : May 14 00:01:16 2026 GMT
Subject: CN=f2401dc98eaa90276621f53d11d0ebaeea63d8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:99:76:a2:e2:9b:5a:54:35:9c:b0:1f:20:
55:24:db:42:e4:00:7f:0c:da:1c:12:dd:8a:4c:1a:
89:1c:ff:8f:8e:f8:21:fc:a4:44:a4:d6:5e:2c:e0:
a1:15:1a:27:c8:c3:6f:ae:32:6e:37:69:f7:1b:91:
8c:a7:2a:ec:32:1a:a2:66:32:df:cb:c1:59:b0:07:
76:ff:9f:a8:10:9c:97:be:c2:ba:81:a2:25:65:16:
02:4b:66:bd:fc:8b:e1:b4:6d:5d:26:3e:31:39:8b:
13:e2:e8:2b:62:32:73:9c:1d:40:07:6c:6c:4b:e5:
19:bf:77:d6:02:e2:7b:c2:47:4e:0e:d2:88:ba:af:
80:16:2d:dd:d0:a3:c3:e5:cd:77:47:87:e8:ad:d0:
9d:d1:f1:87:93:85:9c:98:34:d1:c2:19:6b:d5:b1:
95:3e:f8:f5:e3:37:7f:02:86:80:73:76:91:bf:51:
33:a6:3f:ed:83:1d:07:3b:9f:d7:29:73:a7:fc:82:
4d:ea:0d:70:28:64:cf:8f:43:47:5d:63:ae:ee:64:
69:72:f4:76:ee:8a:86:e9:fd:6f:63:52:30:af:70:
bc:29:55:fa:ae:fa:de:84:ff:b8:57:29:92:b0:a1:
30:77:8d:b6:6b:16:4f:b7:b8:30:84:0d:a9:2b:f4:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:1D:C9:8E:AA:90:27:66:21:F5:3D:11:D0:EB:AE:EA:63:D8:AD
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8d:50:e9:8c:a0:ff:28:8d:c6:f1:35:6a:a4:3f:48:73:9a:
82:6e:6c:6a:67:1b:1c:2a:74:0b:cb:bc:cf:14:1f:75:4f:76:
a9:8d:c3:08:6f:ed:12:ed:5a:f1:a8:bb:4d:ea:ff:1b:af:43:
f9:32:e4:30:c8:56:54:0e:b6:c2:8a:f1:7f:e5:56:e9:0e:be:
d7:e9:99:cb:09:3c:03:7c:4a:35:e2:49:35:86:10:2f:02:8b:
65:b1:3e:03:44:5c:20:e0:5b:0a:2b:73:e7:02:23:38:39:c3:
17:e2:36:29:e0:9a:f2:41:86:88:da:f0:1e:56:9b:17:92:59:
60:82:1f:5d:87:d4:13:a3:04:d9:29:00:cb:8b:c6:38:fb:44:
33:fc:d7:3e:9f:37:3e:79:50:02:fd:3b:a3:76:e1:d5:ff:f5:
3f:9e:08:40:3e:03:5d:7b:e0:f5:f5:cf:ea:96:78:76:12:db:
5b:85:f2:6d:59:ba:86:e4:4f:cd:0a:57:a4:cc:89:83:49:dd:
af:ed:57:b9:c0:4b:7c:70:0a:8a:1a:ae:61:f6:ba:b0:5f:49:
79:97:d2:e5:f8:f1:07:9b:71:24:6a:e6:95:ec:bb:75:b9:ce:
b4:f7:62:25:cc:b0:c6:22:56:92:5c:5d:f0:87:34:3e:62:2c:
f3:d4:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:54 2026 by rpki-client