Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json)
Hash identifier: 1kTuIIHSyG6WupNuf2dR9C2tgvqvwiCbeWZQYveI6EE=
Subject key identifier: 90:72:73:0A:0E:98:99:7E:B1:50:61:93:FD:27:4B:BE:20:6B:ED:3A
Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927
Certificate serial: 019F916D62D10935F893B3CDAB45040B4353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
Manifest number: 01DE
Signing time: Fri 24 Jul 2026 00:01:32 +0000
Manifest this update: Fri 24 Jul 2026 00:01:32 +0000
Manifest next update: Sat 25 Jul 2026 00:01:32 +0000
Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: sJ2tcTuqLsTyhKBie/e1rI05QZTQ4mSDDeXjBHpB+Pk=)
2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:62:d1:09:35:f8:93:b3:cd:ab:45:04:0b:43:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927
Validity
Not Before: Jul 24 00:01:32 2026 GMT
Not After : Jul 25 00:01:32 2026 GMT
Subject: CN=9072730a0e98997eb1506193fd274bbe206bed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:f4:28:c3:74:b2:73:92:8e:f5:e7:6f:7e:
e3:a1:e7:d4:05:ab:27:96:da:88:8d:99:dc:91:14:
b7:fa:3c:f7:98:e2:70:7e:10:0d:93:2f:e8:9c:bf:
53:72:28:a6:21:e8:b2:cb:9e:1e:1b:69:57:81:f5:
71:55:f8:70:d2:28:41:44:04:0e:c7:05:0e:d1:cc:
fc:9a:a4:d8:c5:09:0e:fa:f3:56:0f:9c:9f:d7:e5:
e9:cb:4d:2f:03:f1:0f:b9:eb:4c:03:c3:1f:be:4f:
74:da:89:16:cb:93:2a:9e:f5:76:c6:f8:31:04:6d:
ca:d5:2c:e0:20:37:21:82:25:8c:2e:be:eb:e4:a3:
35:bc:b0:1a:02:31:0e:7d:0f:11:72:35:ca:c1:0d:
c4:c6:3d:bf:4e:2d:1c:f2:ec:af:55:fc:d9:19:3c:
5d:8f:6d:73:d8:87:45:bc:2c:a7:44:d9:0c:20:41:
66:13:fb:c8:81:a2:a9:71:40:e9:65:cf:3e:40:47:
9f:cc:ef:05:43:9d:d9:81:00:a2:3c:02:2f:81:62:
50:a9:1a:8a:8a:58:c3:4c:9f:08:61:a4:8e:8f:d5:
cc:32:e7:3b:0e:16:27:41:48:fd:ff:49:77:84:de:
a8:7b:73:2f:91:8f:ab:c5:4c:c1:d7:e4:5f:4b:1f:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:73:0A:0E:98:99:7E:B1:50:61:93:FD:27:4B:BE:20:6B:ED:3A
X509v3 Authority Key Identifier:
keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:98:54:70:3d:c1:2d:81:01:00:db:85:00:28:d7:0e:aa:ae:
b3:e5:92:13:f6:1e:33:1a:e0:73:46:a5:86:68:17:a2:fb:11:
04:aa:0d:34:90:b9:a6:96:81:85:90:42:37:7d:17:27:16:62:
73:4c:53:10:26:b0:57:aa:ec:68:68:bb:19:32:7a:73:27:cb:
49:23:92:54:36:20:43:d7:96:db:e1:13:a6:b9:5b:cf:7d:a4:
25:92:27:db:64:32:e0:66:84:ad:ed:3b:25:03:ba:87:e6:1e:
26:f8:65:cb:ad:34:dd:51:42:40:f0:04:45:da:d2:72:c6:5a:
97:cd:25:87:87:19:51:4b:f2:64:51:ca:ee:ad:29:93:a7:b2:
16:d9:e0:a6:b1:2e:de:9d:f0:ae:5b:91:73:0f:27:e0:8a:f2:
7c:16:9c:6d:96:ac:ed:76:95:45:e7:b8:09:f6:99:d4:09:29:
b4:36:2a:29:17:76:b6:55:cb:cc:38:e9:f0:f5:53:8c:fd:34:
c2:c4:4b:0e:f4:5f:36:0d:af:b5:2f:b5:8a:ba:c7:d6:6d:a2:
cc:2a:f5:27:6d:08:60:69:ac:f9:6e:09:1e:81:90:5e:14:3d:
c7:53:4a:06:27:f9:8c:5c:99:e1:fb:84:79:a6:6e:3d:9b:d9:
12:07:8e:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbWLRCTX4k7PNq0UEC0NTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YTY2NTM0MjA5MDk1MmYyMDdkMDhhMjNkYzhiNmMzNzc2
NzQ5MjcwHhcNMjYwNzI0MDAwMTMyWhcNMjYwNzI1MDAwMTMyWjAzMTEwLwYDVQQD
Eyg5MDcyNzMwYTBlOTg5OTdlYjE1MDYxOTNmZDI3NGJiZTIwNmJlZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0j0KMN0snOSjvXnb37joefUBasn
ltqIjZnckRS3+jz3mOJwfhANky/onL9TciimIeiyy54eG2lXgfVxVfhw0ihBRAQO
xwUO0cz8mqTYxQkO+vNWD5yf1+Xpy00vA/EPuetMA8Mfvk902okWy5MqnvV2xvgx
BG3K1SzgIDchgiWMLr7r5KM1vLAaAjEOfQ8RcjXKwQ3Exj2/Ti0c8uyvVfzZGTxd
j21z2IdFvCynRNkMIEFmE/vIgaKpcUDpZc8+QEefzO8FQ53ZgQCiPAIvgWJQqRqK
iljDTJ8IYaSOj9XMMuc7DhYnQUj9/0l3hN6oe3MvkY+rxUzB1+RfSx+haQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBycwoOmJl+sVBhk/0nS74ga+06MB8GA1UdIwQY
MBaAFNemZTQgkJUvIH0Ioj3ItsN3Z0knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMt
ZGM4MjY4ZWIyNzE4LzEvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMtZGM4MjY4ZWIyNzE4
LzEvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5hUcD3B
LYEBANuFACjXDqqus+WSE/YeMxrgc0alhmgXovsRBKoNNJC5ppaBhZBCN30XJxZi
c0xTECawV6rsaGi7GTJ6cyfLSSOSVDYgQ9eW2+ETprlbz32kJZIn22Qy4GaEre07
JQO6h+YeJvhly6003VFCQPAERdrScsZal80lh4cZUUvyZFHK7q0pk6eyFtngprEu
3p3wrluRcw8n4IryfBacbZas7XaVRee4CfaZ1AkptDYqKRd2tlXLzDjp8PVTjP00
wsRLDvRfNg2vtS+1irrH1m2izCr1J20IYGms+W4JHoGQXhQ9x1NKBif5jFyZ4fuE
eaZuPZvZEgeOEA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:06 2026 by rpki-client