Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: w3IE3MXSVsiesIVL2xRg2JjkguA3K/r1czpZxAME6Js=
Subject key identifier: 6F:B8:55:84:FD:40:72:6B:84:CB:BC:B9:CC:F5:56:7A:DF:03:0E:3A
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019E213663082B78B8296649D15D0E55FD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 12:01:12 +0000
Manifest this update: Wed 13 May 2026 12:01:12 +0000
Manifest next update: Thu 14 May 2026 12:01:12 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: QOSjn99gbiFqgCo27Kc/q4udw9+uS0zYsqVQ5HuW1+8=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:63:08:2b:78:b8:29:66:49:d1:5d:0e:55:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: May 13 12:01:12 2026 GMT
Not After : May 14 12:01:12 2026 GMT
Subject: CN=6fb85584fd40726b84cbbcb9ccf5567adf030e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:a6:1e:92:da:eb:41:ee:24:92:9d:17:09:
b7:8f:41:3a:45:cb:81:f4:8d:32:9c:6a:60:56:8a:
70:74:15:a6:10:71:08:ec:03:79:10:40:52:b6:b3:
63:2e:c8:17:a1:a2:e3:a4:aa:32:d2:45:8e:8a:f2:
84:96:ae:3a:fd:78:f7:ff:ab:21:4c:da:a9:b5:c1:
71:f5:56:52:7d:6e:a7:2f:e9:8f:db:e4:07:9b:d5:
83:a1:be:c9:f8:10:66:ac:98:67:c3:aa:45:2d:3d:
db:88:c4:fa:22:a5:6c:ba:53:44:61:83:db:d0:5c:
28:94:d5:76:da:77:ca:12:53:2b:e4:b5:1f:4c:f1:
1f:d0:74:b2:ac:e2:4d:49:4d:3a:18:25:37:6f:9d:
3b:23:57:72:88:06:67:3d:59:28:64:52:eb:38:74:
bf:67:e6:88:b4:9d:ce:9b:cf:2e:98:45:3c:d8:2c:
b9:42:41:4a:4c:62:4a:59:a8:63:99:fb:99:06:53:
db:cc:12:62:e9:84:d4:79:73:47:bc:5b:c1:b6:e0:
6a:26:09:43:a9:38:3f:af:9f:99:f9:a0:55:dd:50:
86:ca:5a:8e:86:71:c6:e3:33:8f:af:7b:21:01:89:
f8:20:23:61:f4:8b:c8:f5:c2:2f:95:8e:65:28:79:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B8:55:84:FD:40:72:6B:84:CB:BC:B9:CC:F5:56:7A:DF:03:0E:3A
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:66:80:d1:03:ec:20:9e:3e:a9:e2:2c:20:ba:36:6e:40:
59:8e:40:1c:61:33:16:86:03:17:b7:d7:77:e9:6a:88:66:37:
a3:0e:10:05:15:a4:a9:68:b6:b9:47:68:c3:04:cd:97:91:72:
36:6e:8f:fb:09:32:70:8b:d9:e6:15:f5:06:a1:26:dc:5d:e2:
e3:4f:8c:e6:58:d3:eb:cf:3c:6c:4d:11:53:51:b4:a2:fa:83:
3e:5d:6a:56:50:10:03:75:2e:b9:98:4c:1f:aa:a9:ed:4e:aa:
1a:7a:56:a4:a5:fe:00:53:fe:c4:de:5d:9d:96:98:4d:5d:68:
1f:32:7e:95:9d:5f:71:67:ad:8a:c8:b4:fb:db:f9:92:5b:50:
15:70:32:eb:b2:e7:a8:d3:e8:93:9a:5e:ba:de:35:c9:f2:72:
ac:fc:0e:b4:50:15:b8:7b:6e:b1:b5:c6:b2:3f:ea:72:f3:fa:
be:bf:06:0c:50:58:d0:5b:cc:d7:18:e5:62:4d:45:9f:3c:58:
8a:f2:b6:b9:1b:3f:70:5b:64:77:38:6d:2c:e4:89:3c:e3:f9:
50:a2:83:f9:87:05:84:86:ac:91:45:d0:89:57:31:96:21:41:
84:74:63:b7:40:50:a0:9f:f9:43:46:14:cd:a1:5a:05:ff:e0:
8c:ab:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:44 2026 by rpki-client