Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
File: B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft (raw, json)
Hash identifier: wN75wdZxGRUIPk2jq60sBShRkX8tDj8sU8iOF3bQ1Wg=
Subject key identifier: DF:ED:02:9C:53:3D:EC:1A:09:DB:0A:EC:2E:B3:67:B6:C0:9D:2F:96
Authority key identifier: B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB
Certificate issuer: /CN=b16b56a21df7bed8b9a754d84fe593127361d6ab
Certificate serial: 485C5C694E23479810411EEE5569627435ADF8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
Manifest number: 8B
Signing time: Sat 28 Mar 2026 06:20:51 +0000
Manifest this update: Sat 28 Mar 2026 06:15:51 +0000
Manifest next update: Sun 29 Mar 2026 10:09:51 +0000
Files and hashes: 1: B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl (hash: AEN/9Mop3CIKvCOlyDDIt4z1jMyX++lmrw9PwdC1zzs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5c:5c:69:4e:23:47:98:10:41:1e:ee:55:69:62:74:35:ad:f8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16b56a21df7bed8b9a754d84fe593127361d6ab
Validity
Not Before: Mar 28 06:15:51 2026 GMT
Not After : Mar 29 10:09:51 2026 GMT
Subject: CN=DFED029C533DEC1A09DB0AEC2EB367B6C09D2F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:81:25:e5:50:ce:98:e7:00:8f:29:ea:9e:89:
77:f5:4c:7a:b5:ef:b8:62:a2:d1:88:dd:6e:6a:e5:
d1:92:56:b4:8b:80:81:8a:c0:f1:c8:c0:82:9e:0c:
3a:45:f0:d2:5f:17:a8:d4:1e:40:f4:f9:57:ed:91:
84:2a:bb:28:54:d7:17:fb:bc:32:f4:cf:7e:a5:80:
12:dd:3d:0f:b8:16:20:56:d2:86:70:75:8c:1e:61:
cd:75:51:83:f3:3a:20:d6:d5:e4:f9:12:de:ce:08:
9e:62:68:7d:b7:76:da:71:4b:b5:09:59:aa:2c:d7:
e9:d1:ee:27:6d:27:8c:79:8a:7b:39:d4:4d:03:85:
ee:54:73:53:f9:8d:f0:50:0a:95:aa:57:fd:cb:7b:
d2:c5:f0:51:1f:3b:ba:4f:3e:c7:58:cc:47:45:aa:
50:39:8c:fb:b2:ef:c6:da:a2:3c:8b:0d:b8:42:8e:
6e:ba:97:73:39:ea:0a:59:ed:57:9a:e4:4c:2a:ed:
7f:c6:10:fa:7f:fd:3e:bb:ba:4b:e3:21:ee:8d:72:
01:73:8e:49:b1:69:5f:51:e8:cf:16:a4:8f:cd:d8:
24:2f:1a:e6:4d:47:bc:b0:96:93:70:e7:20:48:73:
8a:81:75:f0:0a:3b:c4:3e:51:46:25:52:7a:64:05:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:02:9C:53:3D:EC:1A:09:DB:0A:EC:2E:B3:67:B6:C0:9D:2F:96
X509v3 Authority Key Identifier:
keyid:B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3c:fe:c6:06:00:cc:e2:84:27:66:93:20:2a:f0:aa:8d:08:
25:e2:44:ae:7f:1b:a6:cb:85:c7:c6:4a:fb:23:dd:fc:f9:a9:
4a:f8:00:34:5e:64:5a:0a:2d:84:23:8f:82:9f:91:e1:e0:c7:
92:79:89:fe:b9:01:65:c8:e6:84:ba:c3:c4:40:ef:d1:71:19:
f3:3f:eb:7b:61:07:13:b8:53:e1:82:c9:f5:32:0b:0f:11:59:
56:87:61:ae:9c:69:4c:50:38:8f:de:3e:e1:8d:42:7c:d2:a7:
d1:45:29:62:21:a9:0e:2f:ce:f7:9c:ff:59:68:df:03:b6:53:
83:10:c8:33:82:28:c4:26:3d:f0:9e:fb:cd:60:26:92:e1:38:
69:9a:3c:95:6c:a1:ec:e9:4a:83:36:9c:cb:83:ea:c2:a7:8d:
a2:5f:bf:f3:8d:a9:19:01:74:82:f4:5e:8e:f1:ad:77:ef:1c:
e9:d8:93:74:a0:de:40:22:2c:4f:e2:1d:ce:8d:28:0b:ec:e2:
80:1d:fa:3e:79:34:2a:e4:a7:85:44:fd:d2:c3:4a:41:90:dc:
41:36:75:bf:30:f4:dd:23:cb:c2:71:5f:68:25:09:d1:a5:fd:
92:66:a5:46:65:47:6f:14:ae:42:29:fd:9e:e8:cb:dc:88:96:
c6:01:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:11 2026 by rpki-client