Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: wttyPLzqwh/Kn5zVGDLg3oO3qWjRYAXcJIMcwk1t4fM=
Subject key identifier: 96:40:16:91:03:95:84:07:D6:F3:95:A7:5B:2A:2C:C7:F9:3D:D4:5B
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019D27040B8BF5E50A9E7DFE5BBEB9107AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: u+wszWChywjpSWvMGMBeGfgz55l4BzpzxpNCajueOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0b:8b:f5:e5:0a:9e:7d:fe:5b:be:b9:10:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=9640169103958407d6f395a75b2a2cc7f93dd45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:44:02:ce:8a:c3:44:8a:14:aa:4d:39:cf:
19:c7:31:1f:f9:b5:c3:5d:ca:28:a9:16:56:bc:d7:
2a:21:74:f9:53:a4:f2:8d:c0:f3:c2:38:0e:50:9b:
40:ab:f3:28:72:6c:f6:df:9c:d7:35:01:d1:72:6e:
d3:75:24:ac:c7:b9:62:52:fd:25:a1:2d:44:0e:9e:
e5:e4:24:b3:fe:db:5a:d0:4e:94:bd:19:00:25:a8:
50:76:34:65:df:07:6b:ac:ef:ca:20:81:1e:4d:34:
71:e7:13:f3:c1:bc:2f:4c:13:0a:0e:13:d6:ae:04:
4d:4b:34:6f:07:2a:8b:aa:a1:df:59:20:98:ae:f4:
09:01:cd:6e:1c:bc:64:4b:cd:4e:0c:97:c5:8b:df:
71:ca:f4:6c:6f:b1:7f:2a:59:8f:f3:54:81:49:bd:
7f:07:83:cb:66:e1:e2:06:ed:15:31:95:5b:ce:69:
23:9b:5f:d8:a0:4f:7d:97:e3:ff:e6:be:d5:cd:37:
0a:f0:cc:ae:df:06:ae:5c:eb:17:05:63:00:a3:39:
46:f6:3d:03:6f:5f:6a:6d:04:d7:87:31:e7:11:4b:
bf:4c:07:be:1c:5b:5c:f4:16:6d:29:93:0d:00:a1:
f7:2f:53:f1:40:42:83:79:68:d2:a6:1f:a3:14:bf:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:16:91:03:95:84:07:D6:F3:95:A7:5B:2A:2C:C7:F9:3D:D4:5B
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:60:1f:58:8e:cc:82:38:cd:9d:88:88:3d:ef:73:52:1d:b8:
da:ed:e8:32:e3:60:80:5d:50:e8:63:a6:47:5c:ae:09:95:e5:
33:82:f4:eb:9e:95:3a:09:47:16:86:04:4b:93:c8:a8:49:e5:
28:68:4e:ad:83:b2:4c:2c:f4:a0:d7:89:cf:a5:66:f7:99:a7:
ee:8a:10:36:eb:3a:13:39:c3:4c:d6:f8:24:9c:c7:6b:de:a6:
14:cd:e8:78:4d:ef:23:c8:b7:44:b6:58:c7:d8:d6:15:0e:36:
67:4b:1a:4b:85:10:a3:02:78:1b:ab:bd:37:7e:06:a3:43:52:
9c:5c:77:0d:c9:c0:04:68:17:7b:33:9e:d9:e2:1c:99:93:04:
93:84:54:05:bb:9b:aa:9f:fe:3c:b1:af:c3:c3:43:84:eb:fa:
15:aa:f1:70:65:24:bd:a1:53:25:67:16:51:4b:e8:83:fb:10:
7f:df:53:6d:e5:0e:7c:83:84:66:be:97:ed:79:02:7f:36:fb:
d9:47:2d:96:4d:4b:c7:ea:1e:93:55:d0:d5:d6:d2:05:bf:1d:
ff:15:9c:62:89:f8:c7:57:03:23:fd:d9:10:c0:cb:e4:e1:51:
c5:e5:b9:b5:10:60:fa:cc:be:a0:05:e7:89:a9:11:25:11:d9:
91:7c:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client