Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: D/C5FueBuKyuP5STmfhyNcCY3nG5SoC4tVRnHIBkxuo=
Subject key identifier: F7:A2:15:74:8B:B8:22:60:D2:F5:AA:63:53:21:6B:C9:92:FD:92:EB
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019F93FFEF4746D8060C21D53BC4F4FBC90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 12:00:51 +0000
Manifest this update: Fri 24 Jul 2026 12:00:51 +0000
Manifest next update: Sat 25 Jul 2026 12:00:51 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: 40RUTayCXaT2p8rP41kISamEcff8Jc9wdS3io5qSvnQ=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:ef:47:46:d8:06:0c:21:d5:3b:c4:f4:fb:c9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jul 24 12:00:51 2026 GMT
Not After : Jul 25 12:00:51 2026 GMT
Subject: CN=f7a215748bb82260d2f5aa6353216bc992fd92eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:1e:71:7d:b6:76:b8:bf:53:0c:22:49:f4:
eb:5b:f6:18:c4:85:53:56:0e:c4:c9:82:6e:92:c2:
bd:fa:60:66:4b:c6:a2:28:18:dc:36:48:38:56:36:
33:27:be:b1:65:81:12:f5:c8:a0:49:bc:dc:cb:a7:
e7:a7:c4:1f:99:b7:71:a5:88:5a:fa:c9:35:39:08:
93:e5:55:56:b6:3f:6d:b9:ad:99:10:87:c6:ec:f2:
9b:bb:b1:70:b6:71:9c:ae:78:fe:d1:ec:c4:36:e3:
c0:b8:c0:65:d5:10:49:d3:a0:bd:89:53:39:91:69:
99:8b:7e:86:dd:07:65:46:2b:f4:0c:ef:04:e7:6e:
c0:95:34:7a:e7:26:35:e6:f9:0f:45:ce:f7:fb:68:
59:0a:2d:5a:8d:e3:0e:59:f4:a8:c6:ad:de:49:9a:
d4:0a:0d:f7:92:6d:e6:a5:c2:27:a6:35:e8:be:f6:
4b:ba:98:a1:2b:08:62:77:f9:24:d6:16:60:9a:cd:
13:79:b8:86:71:ff:14:3a:98:a1:4d:95:e6:44:61:
83:2a:e4:fb:94:03:a6:3c:bb:72:9c:d6:6b:f6:18:
e5:c9:18:18:49:bf:cd:fa:d8:ea:90:be:2d:d2:a6:
1d:67:32:e5:bc:b1:cb:e7:2e:bc:c4:a8:01:53:08:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:15:74:8B:B8:22:60:D2:F5:AA:63:53:21:6B:C9:92:FD:92:EB
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:74:4e:28:45:c2:73:06:e8:10:be:f5:af:fb:4a:df:0f:40:
a3:99:e4:c4:fe:4c:3c:6a:ae:f2:7d:c5:99:0c:61:97:c5:0c:
c3:ca:5e:a4:69:44:97:5a:70:49:75:cd:1e:40:96:3d:9e:0e:
82:8b:0f:23:9c:90:a3:fc:8c:a8:73:9a:1e:c3:5d:73:b9:18:
aa:73:93:62:c9:88:20:b5:b2:4a:c1:b0:00:fd:d1:cb:d6:20:
41:9a:2d:56:36:fa:30:9e:c3:c1:b6:56:70:84:77:d3:40:77:
3e:1e:42:e9:24:7b:3a:19:32:ea:dd:88:5b:30:3f:a0:a4:67:
d1:4d:44:e8:c2:80:97:bc:ab:36:c7:06:63:2c:d5:2c:ab:e5:
02:10:64:1f:b5:7e:38:b7:df:3a:dc:72:56:1b:42:ca:57:97:
41:32:f7:c5:ae:d1:05:68:88:3e:86:03:85:c8:a9:09:9b:57:
2b:b9:da:3f:81:32:0d:64:c9:a8:5d:ba:bd:b9:1b:66:b8:a0:
15:5f:22:43:b4:c3:68:49:6f:3e:09:a4:c2:32:53:bc:64:82:
f7:19:a7:10:93:dc:75:ab:2a:4a:24:11:63:33:90:a4:f5:de:
7f:ac:58:3a:2d:b1:c2:31:3b:7e:9d:0f:85:9f:92:f4:97:b0:
14:e7:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:03 2026 by rpki-client