Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: X8Z31nwDQ8DF8E9FgZmb5mD8803HNoToUcmErPcGhA0=
Subject key identifier: 72:A2:63:6F:55:3E:5A:9C:AB:9E:57:72:2D:4C:78:E9:B4:50:F5:7A
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019F94DC6FE22E3E0AB7B1BB04BD7F9788CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 16:01:42 +0000
Manifest this update: Fri 24 Jul 2026 16:01:42 +0000
Manifest next update: Sat 25 Jul 2026 16:01:42 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: wLFLMMOUCAhSJynqJaAAneclrIc9XBOVGgHuB3lQlok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:6f:e2:2e:3e:0a:b7:b1:bb:04:bd:7f:97:88:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Jul 24 16:01:42 2026 GMT
Not After : Jul 25 16:01:42 2026 GMT
Subject: CN=72a2636f553e5a9cab9e57722d4c78e9b450f57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:75:5e:e5:66:7c:02:2d:42:95:bf:a4:43:
64:21:45:9f:d9:ae:8b:3a:f8:52:ad:77:82:a4:af:
f5:f3:8a:ee:05:4c:96:8f:d0:c1:47:be:4a:95:91:
a8:da:9d:bf:2e:23:e5:45:20:1c:94:07:09:24:87:
97:42:4f:1d:31:7a:11:9e:68:fa:fa:92:5d:21:f1:
44:ec:ba:55:25:7d:45:d5:c5:b7:23:4c:e5:dd:63:
f0:81:0e:ce:c2:74:12:20:ff:7a:5e:dc:a2:7c:50:
e9:9b:39:b2:79:c8:50:95:69:63:18:08:49:a6:2d:
c9:a8:41:48:68:0f:d6:74:14:a7:5a:53:20:16:48:
20:11:a0:b2:4c:30:6a:9d:6b:39:87:40:4d:49:72:
91:01:1a:2c:91:ad:ff:dd:b5:76:c8:7b:7c:55:38:
36:34:8f:db:6b:07:c8:3a:9c:80:28:a8:24:9d:67:
69:0c:62:78:69:92:22:85:fc:91:de:3e:72:03:e3:
0c:c4:e0:b6:4d:35:9b:ca:7a:90:d6:7a:97:a7:59:
e3:34:91:0f:8a:cc:9a:3a:1f:8c:a4:22:9b:6c:cc:
9c:22:a2:4b:9c:e5:28:c6:19:37:ca:ee:ac:f2:ab:
8c:4a:08:d0:8d:8c:3e:37:e5:4e:5d:4c:b7:6f:96:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A2:63:6F:55:3E:5A:9C:AB:9E:57:72:2D:4C:78:E9:B4:50:F5:7A
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b3:ef:25:f5:10:8e:66:a7:a5:8f:4d:b7:ee:b5:63:9c:09:
60:a3:44:26:76:b8:14:58:db:f3:f7:0b:7a:27:7a:f4:17:91:
29:c0:80:dd:ba:35:02:90:eb:e6:97:3c:95:09:68:1b:00:df:
03:cb:82:4e:68:11:e9:d2:5f:a3:a5:6b:a2:14:9f:ea:3e:17:
a6:75:00:10:ad:8f:4b:26:f9:a5:b2:d2:56:97:7f:4c:55:73:
07:28:b0:99:bd:8e:36:0c:05:55:72:34:ae:b2:87:72:c2:37:
a3:41:96:4d:6a:2e:37:2e:1c:2b:74:a8:ef:63:19:a1:4a:44:
ae:76:59:2e:3f:25:02:ff:d8:94:87:cc:e6:a4:b8:31:fd:3e:
51:4c:7a:6b:bd:e7:1a:13:37:fb:a2:f8:73:46:d9:01:cb:db:
76:56:0f:84:fb:fa:3e:60:44:cb:ca:72:0c:f1:23:ca:19:b7:
2f:f1:17:20:cc:2a:49:bb:8a:cf:f6:2a:c7:89:37:a0:8c:2b:
61:4e:62:20:16:94:b7:5e:76:a9:d6:43:14:67:b8:f7:dd:62:
5d:10:6f:fa:b1:78:7e:78:52:e8:88:17:c1:16:ba:fe:7c:74:
af:d7:4b:59:a9:fb:d0:5e:c5:97:88:55:23:0f:4a:fc:9f:6c:
c7:ff:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:08 2026 by rpki-client