Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: 8X9Sfyimq9BLaz1F2ysgtUoV/cZnY8JlBBBCIQKb4Tc=
Subject key identifier: 07:F1:06:FB:46:AB:02:41:4F:19:3D:59:8D:09:91:9B:A8:CD:38:C0
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019D258342162E172D1C9B139334DF3F4F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 1267
Signing time: Wed 25 Mar 2026 15:00:52 +0000
Manifest this update: Wed 25 Mar 2026 15:00:52 +0000
Manifest next update: Thu 26 Mar 2026 15:00:52 +0000
Files and hashes: 1: KNVzSibwcIeJsoSsffQEDCnxWf0.asa (hash: y8bkznZSy/A3ZDayRMz8nCgtieLCBzH6L8q9ZF7Ujzk=)
2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: gj6v8QgO2nUf4ufh6T7QU7RJEBONraTp4DKEyzfLskY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:42:16:2e:17:2d:1c:9b:13:93:34:df:3f:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Mar 25 15:00:52 2026 GMT
Not After : Mar 26 15:00:52 2026 GMT
Subject: CN=07f106fb46ab02414f193d598d09919ba8cd38c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:3f:50:97:bd:16:5b:ca:e8:db:b2:10:8d:
78:88:87:4c:58:a7:af:af:bf:70:54:ed:33:24:fa:
93:61:e6:94:eb:3a:5b:8a:51:58:79:d2:f6:c1:4f:
db:a1:1f:0a:57:84:b2:a1:bb:29:be:58:e2:79:9a:
ff:64:48:d6:f3:47:db:bf:e6:9b:03:0b:8b:6b:93:
9b:81:e8:8e:e0:9a:44:f7:f4:14:1d:7f:24:8a:02:
0f:f7:25:5b:0f:fe:3f:dc:9d:3c:10:a0:f1:0a:6a:
1b:9b:c1:c5:e2:d3:6f:dd:57:0c:4b:5f:de:fa:0f:
a5:82:93:9c:37:42:7a:19:50:da:77:82:f7:ae:1e:
6a:a7:74:a5:14:97:6b:84:b8:c9:17:b6:1a:69:5e:
86:39:03:5e:19:0e:f7:50:9b:dd:42:53:f4:5c:6f:
6c:6d:c5:b0:9c:31:39:90:7b:5c:46:47:e7:49:36:
ec:75:76:31:a4:a7:f4:b5:7a:fe:f9:59:6e:d2:43:
8d:8f:1c:d1:70:3e:b4:23:32:30:6e:b1:31:19:bf:
39:3c:da:5d:5c:47:b0:41:23:b6:0b:9a:ad:c3:9c:
73:3e:f9:23:dc:dc:f5:d2:cc:51:67:b8:01:b3:2d:
23:19:04:74:27:4b:55:b1:d8:e2:e7:be:9e:3f:a5:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F1:06:FB:46:AB:02:41:4F:19:3D:59:8D:09:91:9B:A8:CD:38:C0
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:28:d6:1d:8b:43:4a:95:7a:86:34:95:19:f0:21:0e:a0:b4:
40:5e:9f:6c:75:ec:29:6b:b1:48:30:60:90:a9:71:a5:a6:b8:
e5:de:97:bb:b9:61:66:09:6f:c5:ac:6e:da:70:6c:ba:e0:5d:
11:8a:bc:46:79:48:0b:8d:8f:2b:2d:74:33:a5:9a:ad:87:3f:
63:ca:d4:17:ee:46:6d:14:b9:2b:f3:47:71:7d:47:74:35:1e:
c7:ae:0f:34:58:40:5a:c5:87:33:4c:72:78:28:fb:f4:c4:e9:
07:2c:00:be:ff:c0:c7:fa:e7:e1:da:a8:29:3f:16:ac:e6:17:
ec:14:53:02:66:a0:4d:42:0f:a7:87:67:33:be:4a:a6:a2:3b:
ff:39:af:60:cc:3d:d6:b6:09:d7:c4:68:1f:7a:94:b2:08:cd:
8d:c6:1e:3b:54:5c:2d:2a:0e:2d:c8:16:cc:f7:a8:4a:b7:63:
9c:6d:2f:50:f6:e3:05:b2:ad:5e:43:1a:38:2c:35:42:5a:61:
ad:54:0a:b9:29:e0:ec:a7:a7:fc:17:90:60:43:14:1b:21:81:
fa:e8:29:85:35:e1:66:df:31:90:28:80:fe:62:87:6c:7d:64:
8c:11:e3:e1:b3:59:4e:43:19:f8:86:48:9a:9d:46:ae:b0:57:
f9:3b:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:42:25 2026 by rpki-client