Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File: mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier: 5LgTCs9cFvYBHQ/EP/4/sdALDSEsjCWDwHKp5r4nDFc=
Subject key identifier: C7:DE:F1:CB:32:65:28:23:8A:F4:83:A0:DA:30:DF:85:3C:F2:A1:23
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer: /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial: 019F8F47608A7EE048B9A050060B9BB5A764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number: AA
Signing time: Thu 23 Jul 2026 14:00:47 +0000
Manifest this update: Thu 23 Jul 2026 14:00:47 +0000
Manifest next update: Fri 24 Jul 2026 14:00:47 +0000
Files and hashes: 1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: vR89Et5BMv2i1bcS3xB7IPD6YDirPfyniarnSZ3K1C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:60:8a:7e:e0:48:b9:a0:50:06:0b:9b:b5:a7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
Validity
Not Before: Jul 23 14:00:47 2026 GMT
Not After : Jul 24 14:00:47 2026 GMT
Subject: CN=c7def1cb326528238af483a0da30df853cf2a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e4:d3:df:d3:fb:4a:1c:0c:d6:c2:50:29:d2:
f3:d3:73:be:73:3c:dc:26:88:8a:8b:9d:cc:71:d2:
ad:d4:8d:21:4c:86:07:aa:56:36:9b:73:30:0f:73:
7c:72:d0:6b:da:39:7f:8e:4f:7e:e8:8b:d2:43:9b:
a2:d5:7a:de:b4:35:05:11:2f:f6:72:24:bb:d4:de:
29:dd:60:63:6e:4b:0f:e4:2f:11:9d:68:c1:c4:e6:
7f:a3:df:0e:f1:4b:5a:95:ed:a8:69:3b:7d:39:6b:
c8:d5:50:dd:a1:55:70:6d:90:0b:8b:c3:33:d0:33:
52:c5:03:e2:3a:b0:8a:d7:21:3e:db:86:d6:26:f2:
74:0a:be:d4:5f:a1:e8:1f:28:e5:61:89:ab:59:ba:
c6:11:17:5f:86:c7:f5:11:47:bc:d2:df:8e:cb:b4:
a5:bd:f4:29:d0:62:6c:d4:5c:18:df:6a:8f:c0:83:
52:82:14:f3:76:9b:73:41:ec:76:32:5b:3a:3d:7b:
2d:d1:4d:2b:ae:1c:5f:06:70:41:51:83:a2:1b:2e:
e2:a2:16:93:e3:0d:ed:7a:c9:ab:5b:99:9b:35:35:
09:40:8e:3b:8f:88:39:84:96:75:9d:7a:0a:f2:7d:
ae:6e:fc:52:bc:81:4c:6b:a5:3b:58:69:40:d1:7f:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DE:F1:CB:32:65:28:23:8A:F4:83:A0:DA:30:DF:85:3C:F2:A1:23
X509v3 Authority Key Identifier:
keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:45:4c:40:3b:70:f9:61:e0:4c:fd:11:b8:b8:fe:52:65:
f0:de:a2:c4:fb:b7:fd:a5:4e:04:8f:75:c5:d8:99:f5:71:63:
8d:ba:98:4e:dd:89:bf:0d:ae:fc:a4:61:b3:32:63:91:6c:76:
61:f7:c5:e4:43:78:c6:5c:c8:c3:4e:06:86:41:a8:17:24:1a:
dd:21:d8:39:61:94:9d:12:b3:5f:51:31:9d:35:33:14:fa:5e:
7a:d1:ba:66:a0:4f:eb:6b:89:62:36:8c:8c:9e:b9:1e:22:6a:
64:29:78:b5:9c:3c:86:04:09:e0:26:5a:a3:2e:e4:7a:91:96:
08:3e:68:ba:d8:ec:15:9a:38:2c:51:f5:09:0d:42:58:d4:b5:
aa:5c:ac:c7:18:45:19:a2:42:7c:6a:14:48:00:ca:49:c3:23:
93:33:f9:36:f6:b3:7e:32:b7:a9:0a:52:7a:27:1d:e6:bb:34:
13:8e:1c:31:ac:c4:58:90:fb:9d:c8:20:6d:0a:3d:6c:71:2e:
35:22:d9:7f:e0:10:8f:f4:31:13:a7:79:23:2e:dd:c5:df:13:
c1:c2:95:0e:2f:2c:29:0a:f5:da:58:4d:c5:7d:38:23:79:b6:
06:a9:d8:cc:32:65:88:f3:56:2c:82:d3:65:58:87:98:94:0e:
93:95:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:03:15 2026 by rpki-client