
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File: mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier: hJ6qSJMDRs69luXgipUwknxyfwFrI+UNoaOFZr0uNg0=
Subject key identifier: 37:A6:00:3A:25:44:A3:0F:39:80:DA:DC:DF:69:52:05:5F:0B:9C:DB
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer: /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial: 01A0DB71C831F8068CCE1F1952391769EF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number: 0156
Signing time: Sat 26 Sep 2026 02:01:02 +0000
Manifest this update: Sat 26 Sep 2026 02:01:02 +0000
Manifest next update: Sun 27 Sep 2026 02:01:02 +0000
Files and hashes: 1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: F9wJ6E/QzXzDX7KYfwGr47B8NDQ8C8CbB7DWlPwz3UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:c8:31:f8:06:8c:ce:1f:19:52:39:17:69:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
Validity
Not Before: Sep 26 02:01:02 2026 GMT
Not After : Sep 27 02:01:02 2026 GMT
Subject: CN=37a6003a2544a30f3980dadcdf6952055f0b9cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:05:4e:68:20:7d:d7:27:90:28:fd:46:b9:
50:42:aa:91:e9:06:64:7a:30:1b:7b:9b:72:8c:0f:
05:81:64:9b:c8:ea:1b:e1:a5:2b:b6:33:f6:aa:ef:
68:67:08:7c:72:d1:b4:ea:88:76:f1:a4:bf:74:1f:
07:2d:1a:f1:b9:81:93:e9:eb:d1:87:58:58:80:b8:
bb:e4:e1:97:cb:91:51:ae:54:50:cf:79:43:79:e2:
a6:73:b6:b5:32:14:b7:95:0e:05:b7:3f:4f:5e:8c:
c1:df:ab:c0:3d:21:9a:3e:19:ee:78:cf:29:87:28:
d3:c9:f2:67:e7:73:05:dd:61:00:ad:45:68:24:7f:
58:61:8e:91:f0:58:6f:c3:d9:13:e7:3c:32:a9:00:
6d:ae:25:6b:c8:08:69:d4:9c:a9:ff:a1:8a:c2:3c:
67:76:ee:14:8e:88:35:b6:f3:0a:be:16:e5:ba:e1:
f6:d9:33:e2:2b:af:62:18:29:10:3c:eb:07:ac:af:
df:ae:27:2c:ed:31:e5:55:91:b5:f5:91:67:17:a9:
8c:0a:c1:87:6a:18:8d:80:01:3d:e2:40:3b:fc:1e:
7d:58:83:1b:33:d4:9c:75:a5:6d:59:50:a6:52:22:
58:e9:c1:42:08:03:af:a8:74:17:a3:f1:0c:17:1a:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:00:3A:25:44:A3:0F:39:80:DA:DC:DF:69:52:05:5F:0B:9C:DB
X509v3 Authority Key Identifier:
keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:a2:28:9a:ea:80:bf:f9:45:c0:a5:0d:eb:d0:db:b7:00:
53:7f:a3:d4:54:ab:f0:36:4b:0a:38:30:69:84:47:94:58:17:
9a:6f:03:58:7b:aa:84:49:dd:a0:07:82:b2:3e:32:b1:88:68:
39:29:ef:95:3b:85:4d:77:4e:4b:8d:c9:8a:69:be:08:88:61:
53:db:c3:a3:b6:98:ac:ac:f8:83:0e:84:09:aa:41:0d:06:b8:
0b:ad:9f:c5:a9:3c:2f:ad:69:02:cb:c0:4d:aa:15:25:2d:4f:
37:89:91:22:12:74:aa:1e:cf:ff:cb:4f:f6:d1:27:9b:5d:a4:
81:a5:a9:5c:e3:24:7f:50:9c:a3:f9:c2:ba:1e:4c:3d:11:9d:
c9:01:28:5d:df:55:32:cd:d4:a1:2a:82:57:85:77:bc:8b:15:
33:11:11:d7:46:33:4b:32:05:b7:9e:f1:ce:70:52:16:c3:d8:
f2:bb:5d:5a:1e:41:90:18:24:7c:50:77:42:ce:0e:ba:ce:18:
fc:7c:8a:1d:bc:0f:cb:9d:c3:47:37:e8:60:5c:65:9e:c2:16:
e9:dd:d9:0d:46:2d:b3:28:4c:8a:9a:0f:07:9f:a9:d1:51:61:
55:93:b8:64:42:9a:f2:4c:86:31:02:0b:32:07:4a:9f:ad:2f:
b7:e3:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:15:39 2026 by rpki-client