Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: 5Dh+lI4JRqkOQne04dTTof9CelSJQt7JmxyQHlxupno=
Subject key identifier: EB:AD:F5:EF:79:F3:93:2D:6E:7C:7F:1A:89:19:48:F4:87:6D:6E:E8
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 01A1DA5CED150F40ACA9D998B33FF0CD49B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 14D7
Signing time: Sat 14 Nov 2026 14:01:25 +0000
Manifest this update: Sat 14 Nov 2026 14:01:25 +0000
Manifest next update: Sun 15 Nov 2026 14:01:25 +0000
Files and hashes: 1: NrA991AGhswKHoCiVV7wuFGnlL4.asa (hash: U1LKdoZrRBxa/FCyy+LusNc8waRRDWwz6HuAWeQTgYo=)
2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: aFFlJcBKzIVWZGzmD1DzlaHPvl63qW4vrjyBpR2wC/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:ed:15:0f:40:ac:a9:d9:98:b3:3f:f0:cd:49:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Nov 14 14:01:25 2026 GMT
Not After : Nov 15 14:01:25 2026 GMT
Subject: CN=ebadf5ef79f3932d6e7c7f1a891948f4876d6ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:85:35:a2:b6:24:76:43:75:2e:c3:ab:57:
7c:f8:d5:38:db:4f:4c:59:fe:0b:34:ff:4e:db:bd:
b2:79:0d:05:d3:2c:55:33:41:00:7d:9e:1b:f2:47:
b5:bf:d2:61:10:a6:18:ac:cb:3f:0d:57:d3:35:1d:
68:e5:0b:a1:87:8e:85:fa:18:c4:08:de:c4:5a:0e:
1c:b3:d4:8c:75:fa:08:b9:df:ca:79:0a:ae:f5:a7:
62:0e:21:66:4e:6a:65:01:92:13:cb:90:4f:ad:16:
c5:0a:a7:d2:62:cd:8d:b3:ef:b2:94:1c:70:d6:66:
49:44:a9:84:b9:15:3f:09:d5:14:7e:f8:a5:85:d5:
e2:3e:7c:4f:67:3c:ed:34:1e:57:0d:68:90:f8:15:
5e:17:ff:77:a9:a1:71:f1:0b:0e:22:03:64:d2:d8:
24:d1:be:df:d3:72:33:bb:17:38:7c:6b:9a:ec:e3:
e1:d3:5c:bd:1e:f5:2e:9c:e1:d2:95:c8:39:5f:5a:
e5:31:6f:0d:3d:96:01:ad:2e:8a:ac:b8:cf:98:73:
b0:d1:b8:90:a7:4e:d6:4c:35:53:2e:0c:21:43:76:
66:56:dd:63:ca:79:c4:0c:79:39:80:2a:0e:91:57:
a0:73:e5:e9:6c:7a:4e:9d:af:f5:60:a3:bf:02:13:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AD:F5:EF:79:F3:93:2D:6E:7C:7F:1A:89:19:48:F4:87:6D:6E:E8
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8d:ec:09:31:ef:18:29:4b:f0:46:be:d4:80:1c:74:2e:41:
9b:24:a8:e5:f4:22:2d:bf:87:5a:8b:2f:4e:d0:7f:80:72:57:
06:5d:7d:67:f3:45:0c:5c:6d:68:39:71:76:b4:6b:35:ff:4b:
ab:85:93:b3:fc:20:ab:96:1e:cc:41:6d:62:26:c7:c2:7e:83:
03:7d:44:0d:bc:b6:36:89:be:b5:a8:09:51:29:32:f1:60:dc:
8f:cf:31:0f:a7:76:84:d4:16:64:35:4e:54:2f:83:3a:b7:e3:
b9:96:9a:a4:2c:70:bc:cd:a9:56:2b:e8:84:2c:20:b1:84:ec:
82:d4:ff:2d:16:f4:98:b0:94:89:37:ba:1a:14:a8:1a:21:79:
cf:2b:f6:fa:62:04:f4:78:a4:94:7a:97:0e:fb:6a:2d:da:29:
44:72:3e:90:9f:5d:24:d6:02:b8:1f:b7:61:e0:f0:29:7b:28:
03:2e:52:c6:8c:05:1d:11:e1:f7:b9:d3:1a:0a:c5:3c:4e:fa:
c9:d0:20:4b:a0:54:5b:ca:95:f7:0c:20:13:fa:0d:24:58:65:
3f:43:c9:7b:ea:db:7b:b8:a6:d5:e1:9d:2b:0b:44:03:3a:6a:
e0:41:a8:9d:95:06:25:75:8b:ea:6a:7a:1b:5d:a8:88:78:12:
02:4b:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:18 2026 by rpki-client