Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: QNPhqoPIRwi7smkfr4knUCMTiDCIumxD87+occs4lsE=
Subject key identifier: 9D:6B:7A:D3:EB:0A:AB:1A:6C:20:49:3F:DA:B3:C4:27:41:8B:04:4C
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019D2A04F5288D059991AF6A470B3AC749BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:01:01 +0000
Manifest this update: Thu 26 Mar 2026 12:01:01 +0000
Manifest next update: Fri 27 Mar 2026 12:01:01 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: n30c2E1qcvdY369AfyR3ZD3mEr4ysKuYQRZsBQ9tuxg=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f5:28:8d:05:99:91:af:6a:47:0b:3a:c7:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Mar 26 12:01:01 2026 GMT
Not After : Mar 27 12:01:01 2026 GMT
Subject: CN=9d6b7ad3eb0aab1a6c20493fdab3c427418b044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3f:3e:db:99:f6:8d:e8:c6:af:3d:c6:d0:08:
76:6b:c7:40:c9:9b:84:b9:60:4b:34:58:8b:44:f7:
1f:74:78:a0:2c:67:7c:a7:04:19:c0:39:f9:0d:d4:
a1:b9:47:50:20:c7:1c:c0:ef:b8:a3:70:6e:c8:a8:
0d:7c:cc:6f:32:42:7f:8f:30:81:ab:12:16:44:bd:
31:f7:e2:00:77:c9:6f:22:9d:37:5a:a8:a7:c9:79:
d3:6a:41:e2:32:29:44:45:fa:d8:7d:ca:58:4d:4e:
65:57:bc:11:71:54:91:80:bd:f4:44:90:76:43:45:
4e:18:91:89:05:c3:2e:8a:a6:02:88:c0:c6:46:0b:
26:ac:de:71:16:a4:8e:d1:e3:86:c6:67:00:b6:fa:
2a:80:39:47:2e:0a:5e:de:94:11:58:de:29:ed:ad:
e4:fd:eb:12:5d:f5:87:e7:56:5f:18:b7:87:81:7f:
12:d8:35:68:cc:f4:d3:3e:3d:2e:fb:fd:3c:20:47:
4d:8c:a8:64:6f:16:9f:14:40:e4:e7:28:78:7d:ee:
0d:3f:0c:67:17:1b:30:30:cd:b9:22:f7:71:57:5a:
5d:a7:a2:e6:a0:51:bf:fe:ba:e1:18:64:68:88:7c:
8e:fc:52:87:04:9b:73:78:cc:cd:0a:41:21:35:6a:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:7A:D3:EB:0A:AB:1A:6C:20:49:3F:DA:B3:C4:27:41:8B:04:4C
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:4b:c3:39:78:2f:d6:35:eb:fd:d8:0a:0d:76:11:0d:ff:
82:b1:2b:99:82:8e:24:03:56:28:cb:cd:66:50:d9:34:5c:20:
f0:50:b1:e7:7a:da:a6:d5:f4:88:16:44:53:8f:10:98:d1:31:
f4:5e:d2:4e:d4:5c:b5:ff:f1:1d:33:73:89:ea:da:36:68:e2:
fd:25:55:40:de:4a:24:72:35:47:19:eb:86:71:02:d0:91:26:
82:b9:95:c1:6a:31:b5:f5:61:56:68:b5:38:5f:07:ad:0a:7e:
13:20:03:8a:54:c0:a1:6b:66:fe:ac:30:ff:4b:23:9b:4b:47:
f3:5e:69:19:87:3f:63:0d:3f:a2:e3:01:9f:2d:1b:72:53:52:
f0:95:6f:5e:af:63:f5:dc:4a:ee:f6:55:d0:0f:42:9a:d7:a5:
2f:e0:76:8f:36:7c:e4:3e:b0:eb:48:a0:c6:16:eb:69:26:52:
99:8c:af:01:03:1c:3a:6e:30:59:43:ab:08:36:59:da:23:a1:
40:a8:e4:35:21:56:c2:ab:2f:ef:d7:55:6b:e1:ba:6c:e0:b8:
97:7a:37:35:a9:d4:5f:fe:39:e7:14:4b:85:c0:3a:8e:81:e9:
03:92:c8:2e:cf:74:9b:a7:c0:f8:e8:59:28:d8:01:22:c8:e1:
82:a1:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:21 2026 by rpki-client