Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: mPeHVKkekyY3Hydj8QJkypiSHv9WHEpXu/nAilDbjAQ=
Subject key identifier: 82:EA:07:1D:1F:35:A1:A8:54:67:94:1C:CB:6E:F2:4C:69:8D:E5:FF
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 01A0E2F53D38D587EC19F0BFD3F951B741CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 13:01:57 +0000
Manifest this update: Sun 27 Sep 2026 13:01:57 +0000
Manifest next update: Mon 28 Sep 2026 13:01:57 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: ET7K5+v43MtllzE4bTI2pdwp/zI1yDMRdaaq9vODevQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:3d:38:d5:87:ec:19:f0:bf:d3:f9:51:b7:41:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Sep 27 13:01:57 2026 GMT
Not After : Sep 28 13:01:57 2026 GMT
Subject: CN=82ea071d1f35a1a85467941ccb6ef24c698de5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6d:bb:2f:2e:07:c0:2d:53:c7:19:7e:6c:95:
1a:f6:69:09:5a:4a:7b:e0:96:f9:47:3f:0f:23:48:
0c:6e:44:f2:0c:17:98:e3:ae:3e:df:db:a9:32:2e:
3c:48:b1:6d:40:aa:c3:b6:c9:f1:31:c5:0f:b6:b2:
32:cf:92:a7:b8:5b:d6:8c:20:6b:ea:f2:57:82:cd:
ec:0b:21:ea:ad:f8:ff:cc:8c:82:ae:cc:55:83:e7:
c5:9f:62:98:c5:16:b0:67:0c:a6:61:a6:0f:6c:c8:
41:01:a5:4a:d7:31:fe:72:44:36:f5:12:01:30:74:
51:58:c9:2d:5a:8f:c0:23:85:86:4d:55:24:82:e2:
71:e0:c0:9b:fe:3c:33:54:89:42:c3:1c:15:fb:c5:
46:7d:06:e2:7b:a1:c1:a5:99:7b:b8:7a:a7:c8:a5:
39:66:68:59:5d:b3:4d:95:60:50:fc:ec:ca:15:a7:
52:bb:d1:50:6a:db:27:ad:56:b9:94:bd:cc:db:6e:
c4:ec:ae:ea:21:df:67:96:92:10:f4:14:1c:8d:c8:
ea:0e:82:6e:92:29:92:56:de:b8:6f:f1:16:22:3e:
72:40:1d:38:e7:26:58:2f:f4:b3:fb:e3:9b:b1:c4:
90:87:6c:4f:69:e9:3d:6f:84:e7:55:60:84:bb:56:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:07:1D:1F:35:A1:A8:54:67:94:1C:CB:6E:F2:4C:69:8D:E5:FF
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:96:be:a7:1c:a2:e0:65:e1:cd:f7:df:43:a0:a6:ca:93:38:
30:4e:c5:42:21:05:77:50:0d:47:dc:04:83:5b:32:ce:49:48:
bf:28:b3:bf:b7:b8:90:d7:16:d8:9a:3b:73:4b:12:58:95:f7:
5c:7e:c5:2c:82:dd:44:4d:6c:32:bb:9a:1c:58:47:df:16:40:
95:76:cc:08:10:d9:8f:20:37:b8:9d:a4:46:05:ff:46:72:dd:
73:b3:f5:5e:24:a3:ee:fe:6d:f0:d9:c3:b1:78:da:af:87:72:
32:6e:27:6a:24:8c:2d:bf:1f:bd:f9:52:6f:f1:ec:b8:1f:77:
a9:4c:f8:a2:b8:3d:3b:4c:c9:50:7d:89:5b:9a:8d:2c:61:cd:
97:5c:81:79:1f:33:c8:ab:63:30:a7:f7:16:62:fd:af:81:12:
3d:2e:fa:5c:3e:15:f4:29:d7:e5:ca:48:5b:6e:26:fb:56:d2:
86:3b:10:7d:02:12:78:b4:9b:1f:d1:d1:af:40:d4:31:1b:61:
41:e0:61:0a:e8:7a:c7:2d:f0:59:41:e7:7e:fe:5d:3d:10:ac:
5a:28:5f:aa:3e:95:b5:ff:64:b1:2f:37:0c:c0:ce:0b:1e:7c:
94:d5:21:53:3e:a9:00:12:cb:77:2e:76:e2:46:73:69:8f:91:
f6:e3:69:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDi9T041YfsGfC/0/lRt0HPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTM2MjU0YjNlNzQ5MDA2NzViYzZlYmQ1MGFlODI1ODI4
YjlhNzYwHhcNMjYwOTI3MTMwMTU3WhcNMjYwOTI4MTMwMTU3WjAzMTEwLwYDVQQD
Eyg4MmVhMDcxZDFmMzVhMWE4NTQ2Nzk0MWNjYjZlZjI0YzY5OGRlNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8G27Ly4HwC1Txxl+bJUa9mkJWkp7
4Jb5Rz8PI0gMbkTyDBeY464+39upMi48SLFtQKrDtsnxMcUPtrIyz5KnuFvWjCBr
6vJXgs3sCyHqrfj/zIyCrsxVg+fFn2KYxRawZwymYaYPbMhBAaVK1zH+ckQ29RIB
MHRRWMktWo/AI4WGTVUkguJx4MCb/jwzVIlCwxwV+8VGfQbie6HBpZl7uHqnyKU5
ZmhZXbNNlWBQ/OzKFadSu9FQatsnrVa5lL3M227E7K7qId9nlpIQ9BQcjcjqDoJu
kimSVt64b/EWIj5yQB045yZYL/Sz++ObscSQh2xPaek9b4TnVWCEu1a5/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILqBx0fNaGoVGeUHMtu8kxpjeX/MB8GA1UdIwQY
MBaAFDJTYlSz50kAZ1vG69UK6CWCi5p2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUt
YTU3ZDQ4ODc0NGMyLzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUtYTU3ZDQ4ODc0NGMy
LzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJa+pxyi
4GXhzfffQ6CmypM4ME7FQiEFd1ANR9wEg1syzklIvyizv7e4kNcW2Jo7c0sSWJX3
XH7FLILdRE1sMruaHFhH3xZAlXbMCBDZjyA3uJ2kRgX/RnLdc7P1XiSj7v5t8NnD
sXjar4dyMm4naiSMLb8fvflSb/HsuB93qUz4org9O0zJUH2JW5qNLGHNl1yBeR8z
yKtjMKf3FmL9r4ESPS76XD4V9CnX5cpIW24m+1bShjsQfQISeLSbH9HRr0DUMRth
QeBhCuh6xy3wWUHnfv5dPRCsWihfqj6Vtf9ksS83DMDOCx58lNUhUz6pABLLdy52
4kZzaY+R9uNp2w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:09:46 2026 by rpki-client