
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File: ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier: gpFKf0B30ZuqWTCw+niVqnZbUR1OWSMb2qYXQKyvBHY=
Subject key identifier: A8:58:43:BA:41:34:7B:7D:3B:10:D7:50:64:D9:41:06:24:C0:41:FB
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer: /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial: 019D284DCAE5C5521D35B2AF8458C6567E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number: 0714
Signing time: Thu 26 Mar 2026 04:01:19 +0000
Manifest this update: Thu 26 Mar 2026 04:01:19 +0000
Manifest next update: Fri 27 Mar 2026 04:01:19 +0000
Files and hashes: 1: 5_csqvkktJBZAA3nhx1y4Q3XeS4.roa (hash: GAIVCEQBXdTwic9D+gPxQqB/RbqD3kqUWwWSbtrlvQU=)
2: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: d3uP+xb5ejLQu7Mf8GC9aRg+Urewd2vFlDkCC+Ggt/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ca:e5:c5:52:1d:35:b2:af:84:58:c6:56:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Validity
Not Before: Mar 26 04:01:19 2026 GMT
Not After : Mar 27 04:01:19 2026 GMT
Subject: CN=a85843ba41347b7d3b10d75064d9410624c041fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:23:4c:e4:bf:93:17:bf:17:02:ce:03:32:
ad:b4:f6:8e:d2:83:0a:c4:3c:d1:89:67:25:4c:bd:
49:a2:5e:00:24:16:51:c0:f4:29:c8:ed:95:16:10:
61:e5:d3:fd:e5:19:f0:d1:cf:96:cc:93:32:67:58:
37:27:43:90:40:f8:3d:96:56:7d:7e:b3:3f:33:57:
fe:bb:e9:cf:15:9f:62:cd:17:03:a4:3a:e2:1b:51:
47:a1:08:f8:10:aa:79:d8:6a:b8:ad:4b:ff:80:da:
74:c3:0d:90:eb:21:38:b9:55:2c:f6:dc:26:b3:c6:
a2:5b:62:9c:eb:27:69:e5:73:d2:8e:f9:fc:7a:27:
ea:15:ed:67:7f:eb:71:7c:c1:cc:12:42:05:1d:98:
b4:15:3b:fb:d3:67:e8:da:b7:47:94:5c:a1:05:ed:
84:4a:3e:82:a6:de:3b:5f:79:52:cf:17:fc:70:7d:
ba:d7:eb:17:f6:5c:8f:5b:0e:c3:06:53:b8:5b:ef:
e6:14:91:13:45:c8:d6:3c:39:c7:fe:c6:14:60:f8:
be:6a:ff:9e:71:e1:db:de:9c:0d:29:75:f8:34:9e:
8b:da:15:ae:d2:03:82:61:2f:68:a5:3c:dc:30:76:
b8:97:d4:bc:88:36:8c:a6:15:2b:a4:33:79:f1:c6:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:43:BA:41:34:7B:7D:3B:10:D7:50:64:D9:41:06:24:C0:41:FB
X509v3 Authority Key Identifier:
keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:92:84:2d:91:bf:37:35:39:14:b3:4e:fc:5e:a7:37:b5:5f:
20:db:11:06:de:11:9a:12:a0:05:f8:7b:7c:7c:d8:3e:da:68:
34:19:38:e5:38:e8:c1:69:a5:33:e5:d6:da:1a:89:43:57:c5:
cd:a2:52:ed:e6:ba:27:f7:85:32:79:25:c7:94:5b:cb:c9:47:
cd:8e:48:2a:9c:06:d3:a9:6b:a7:98:45:a0:80:b6:c7:0c:9f:
e2:f9:7a:a7:bc:49:20:f6:1b:77:dd:a8:ce:af:41:cd:ad:1b:
7a:28:3d:ea:2d:6d:37:da:19:68:d1:ea:a7:61:af:24:c7:73:
91:4b:67:5a:12:d5:d6:44:82:f5:68:95:88:33:82:b6:40:f7:
c6:b3:61:ae:b0:d5:d3:fc:40:51:a7:57:ad:57:5e:a7:d3:8f:
7e:cd:a1:82:29:77:f0:3f:69:ce:9a:da:7d:3c:6e:40:15:e0:
d7:c0:96:03:4f:8d:6b:52:51:65:36:bc:1b:17:91:0e:4a:b5:
02:20:44:7d:ea:fc:21:d3:66:39:6f:0f:09:e3:0a:fa:2c:af:
72:d9:04:4a:c3:0b:1b:9b:0e:cd:0c:f5:cd:a4:eb:53:d9:6e:
70:95:db:86:b2:64:c3:10:a9:f8:04:2e:93:d8:23:07:2c:c0:
c8:b0:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:56 2026 by rpki-client