Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: dBClwiNZaPsayd45Y+gaNZtLYABjjXxXpjfMQCPrKBY=
Subject key identifier: 54:69:6F:A5:17:41:56:62:E1:83:C1:84:D5:71:54:0A:75:33:2C:0B
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 01A11FE55528A4C8BA6857E4CE4597B88906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 09:01:25 +0000
Manifest this update: Fri 09 Oct 2026 09:01:25 +0000
Manifest next update: Sat 10 Oct 2026 09:01:25 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: QEr6NscAt2OvsspQZlorRLvCyP2oVLmmkKaDY8WyEe8=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:e5:55:28:a4:c8:ba:68:57:e4:ce:45:97:b8:89:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Oct 9 09:01:25 2026 GMT
Not After : Oct 10 09:01:25 2026 GMT
Subject: CN=54696fa517415662e183c184d571540a75332c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:6d:69:f1:94:7b:8d:76:da:2e:f6:32:f1:
49:14:2e:e7:54:1b:da:3d:92:2c:6c:79:8b:06:3d:
b4:c7:1b:d8:4d:f3:c6:45:03:1f:5a:6f:ab:57:8e:
0a:3d:ec:fe:5d:60:93:65:ba:27:79:6f:6f:4f:d0:
c6:99:29:32:82:56:a8:fb:2b:dc:f9:01:b7:41:b3:
bc:f4:5d:92:6b:47:8a:fa:5d:54:a2:98:62:ee:1e:
74:06:4e:3f:1c:92:a3:9d:63:11:c9:98:2d:17:be:
8a:06:26:3b:9e:07:35:ef:92:ba:46:f3:b5:5b:26:
7f:2c:0c:5b:ab:b5:41:ca:69:7d:02:12:4c:a4:37:
ea:9b:0d:79:a5:cb:31:57:30:fe:f8:c7:c0:93:59:
cb:d5:bb:87:ea:97:24:56:42:c2:ae:be:21:0e:12:
d7:95:3d:8a:b8:3d:91:eb:00:37:e2:05:08:33:c2:
78:b1:ec:3c:35:82:ce:ad:bb:15:89:bb:c6:a5:5e:
40:19:00:c0:29:50:2e:63:26:9c:8a:1b:d4:66:ff:
47:53:8b:e9:b8:6e:31:7e:03:c0:f1:16:c3:3a:ad:
75:3b:53:27:70:4e:65:48:59:6e:e0:03:ff:b8:ba:
ab:63:df:4a:34:b6:b1:6c:54:7b:c9:a6:ac:24:70:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:6F:A5:17:41:56:62:E1:83:C1:84:D5:71:54:0A:75:33:2C:0B
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:e3:7f:10:f9:e1:c8:7d:e6:db:ff:f1:fb:08:dc:04:cc:
5b:0b:84:cb:47:db:6f:c1:5d:a4:0a:6f:42:70:01:0b:e6:75:
b8:19:98:3b:cb:52:ae:7c:45:7e:36:3f:b3:ee:d2:8a:f6:7e:
4c:fc:a8:7c:c0:6c:13:35:a0:ef:11:87:f0:64:94:2e:4c:01:
2d:eb:7d:44:46:7f:ae:2e:f2:94:13:47:9f:76:58:92:8b:70:
47:1f:92:87:f6:f7:f9:a3:a2:16:0a:86:90:18:bf:7e:c4:02:
b1:62:a9:7a:b1:d4:40:06:e5:bf:2b:9b:15:3b:4a:23:d4:62:
76:30:3a:04:fe:ea:a6:ad:7c:b2:a1:4b:96:5c:ac:93:66:bf:
02:eb:e4:49:fe:14:f2:cc:82:ea:d9:61:dd:37:1c:90:b8:11:
0d:eb:63:3d:49:13:ff:bd:2f:08:0a:65:6b:19:af:82:69:8e:
ed:9b:f6:38:a7:6d:8b:15:41:ad:1a:ad:12:a6:9c:c6:62:21:
66:54:82:49:f6:d1:c9:c1:8e:f4:d7:8b:cf:cc:92:cb:b9:42:
49:da:d4:4b:7a:9d:03:cf:4f:20:9f:ea:25:f5:c2:eb:67:20:
6c:11:0f:37:a7:32:23:07:fd:5b:01:c4:28:ca:72:1b:5d:a5:
14:20:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:09:19 2026 by rpki-client