Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: anI8iGpIzHn6JfYINjGZJmVNcXxVLwqBfiWJ12Ptn3k=
Subject key identifier: BC:D0:36:58:34:76:2B:38:24:4B:BC:77:AE:8E:EA:E3:FE:78:B5:3C
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 019D2A051ABD7ABCF870C9216700D27D55E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:01:10 +0000
Manifest this update: Thu 26 Mar 2026 12:01:10 +0000
Manifest next update: Fri 27 Mar 2026 12:01:10 +0000
Files and hashes: 1: 8lsaObGBgJUeg8r86nteoKBn_oA.roa (hash: TNWMT15GsrSSF3wEacdQ1yVse+6A+RfMdj4BIxDbhXQ=)
2: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: jqtSuldlc1hDddXaNO9AbbiGFJIf0DU9EFc8OSzMv0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:1a:bd:7a:bc:f8:70:c9:21:67:00:d2:7d:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Mar 26 12:01:10 2026 GMT
Not After : Mar 27 12:01:10 2026 GMT
Subject: CN=bcd0365834762b38244bbc77ae8eeae3fe78b53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:e7:22:af:7c:dc:48:86:c3:53:6b:5e:d9:
81:ef:a1:96:24:17:02:4a:67:d3:7d:04:53:6d:de:
db:56:21:0e:f2:58:c1:ad:7e:59:c4:af:5b:af:43:
ed:20:ce:75:1d:75:b9:f3:7c:4b:e7:56:ac:09:03:
30:ac:ab:b3:d1:dc:0b:a8:8d:d2:e8:70:c8:28:c6:
7a:5d:23:c2:b5:1e:6e:ec:99:69:ac:e3:e8:65:92:
0d:bf:7f:74:36:fb:01:85:f8:f6:a1:6c:4d:c2:13:
6f:54:79:4f:68:cb:85:10:57:11:6e:c5:11:91:4e:
8d:fc:0a:2e:d9:de:ea:d6:41:29:ab:cc:02:d6:90:
61:00:06:e7:af:a7:13:ea:e4:a7:4d:2b:c1:5c:6b:
4c:55:e6:6d:ef:19:29:3e:83:24:cb:c2:d9:b4:e3:
ec:00:f4:11:db:70:01:4d:ca:72:24:81:52:21:d5:
83:af:b2:61:22:13:39:2d:66:3e:f2:50:6a:21:9d:
23:e3:85:2e:51:ce:72:8c:38:80:53:61:df:96:65:
9b:81:9e:3f:12:0c:46:2a:e7:b4:c8:ee:7f:59:e3:
7c:93:09:34:49:e7:6f:c5:5a:47:46:cd:0c:61:eb:
e7:d8:32:e9:fe:a6:08:50:68:ba:b3:52:11:1e:a2:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D0:36:58:34:76:2B:38:24:4B:BC:77:AE:8E:EA:E3:FE:78:B5:3C
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ec:d9:98:65:87:18:4e:56:8c:a7:ef:3a:cf:7e:3c:2b:9f:
26:d3:17:75:8b:f5:66:78:ee:1c:f8:b2:0f:b6:2c:f5:47:ff:
bc:db:b3:68:28:d3:5a:5c:a7:16:da:3e:40:24:7d:01:d9:8a:
42:64:2c:05:e7:44:04:e5:02:3e:e7:2a:24:99:89:02:16:3b:
93:09:54:ff:2c:e8:e0:a4:94:c0:87:c8:08:08:af:3d:13:e1:
f6:ac:bd:66:94:5a:f6:97:ac:4b:90:c7:52:fd:6b:f6:3f:aa:
8b:37:b8:1b:86:fa:e9:11:47:f7:33:4a:7b:1c:ea:8c:9c:87:
26:64:70:82:74:19:fc:45:29:37:f4:cb:5c:22:4e:25:6d:02:
01:85:ab:c7:e7:9e:77:ae:fa:69:6f:7c:f3:0f:73:b5:2e:ec:
8f:f3:cd:bb:a8:95:73:4f:00:57:bc:11:6a:7d:ce:b7:83:fc:
b1:76:4b:67:14:73:73:af:44:12:d5:aa:cb:2a:50:44:a1:61:
31:5e:ff:df:72:e7:d9:98:ee:9a:b6:8e:e0:0c:d9:85:c2:a5:
15:5c:f2:a7:51:75:41:af:16:aa:89:7a:a6:2e:ad:b8:25:7a:
a2:0e:a0:05:b6:1a:34:9e:b8:8b:b9:70:f5:0f:06:91:0c:b4:
62:34:d6:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBRq9erz4cMkhZwDSfVXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2
NzI2NTYwHhcNMjYwMzI2MTIwMTEwWhcNMjYwMzI3MTIwMTEwWjAzMTEwLwYDVQQD
EyhiY2QwMzY1ODM0NzYyYjM4MjQ0YmJjNzdhZThlZWFlM2ZlNzhiNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF3nIq983EiGw1NrXtmB76GWJBcC
SmfTfQRTbd7bViEO8ljBrX5ZxK9br0PtIM51HXW583xL51asCQMwrKuz0dwLqI3S
6HDIKMZ6XSPCtR5u7JlprOPoZZINv390NvsBhfj2oWxNwhNvVHlPaMuFEFcRbsUR
kU6N/Aou2d7q1kEpq8wC1pBhAAbnr6cT6uSnTSvBXGtMVeZt7xkpPoMky8LZtOPs
APQR23ABTcpyJIFSIdWDr7JhIhM5LWY+8lBqIZ0j44UuUc5yjDiAU2HflmWbgZ4/
EgxGKue0yO5/WeN8kwk0SedvxVpHRs0MYevn2DLp/qYIUGi6s1IRHqJPVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzQNlg0dis4JEu8d66O6uP+eLU8MB8GA1UdIwQY
MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It
NGNhZWM5N2Y3ZDkyLzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky
LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+zZmGWH
GE5WjKfvOs9+PCufJtMXdYv1ZnjuHPiyD7Ys9Uf/vNuzaCjTWlynFto+QCR9AdmK
QmQsBedEBOUCPucqJJmJAhY7kwlU/yzo4KSUwIfICAivPRPh9qy9ZpRa9pesS5DH
Uv1r9j+qize4G4b66RFH9zNKexzqjJyHJmRwgnQZ/EUpN/TLXCJOJW0CAYWrx+ee
d676aW988w9ztS7sj/PNu6iVc08AV7wRan3Ot4P8sXZLZxRzc69EEtWqyypQRKFh
MV7/33Ln2ZjumraO4AzZhcKlFVzyp1F1Qa8Wqol6pi6tuCV6og6gBbYaNJ64i7lw
9Q8GkQy0YjTWgA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:01 2026 by rpki-client