Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: ShxiciF6nAZyH07ny0ajt8beTfEUqp007BiETDYAYSk=
Subject key identifier: 34:42:95:A3:37:BF:FD:81:90:BD:D2:79:B3:09:36:D6:60:9F:1B:18
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 019D265F3D1595B66545B25F04D4E5D06906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 1892
Signing time: Wed 25 Mar 2026 19:01:08 +0000
Manifest this update: Wed 25 Mar 2026 19:01:08 +0000
Manifest next update: Thu 26 Mar 2026 19:01:08 +0000
Files and hashes: 1: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=)
2: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=)
3: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=)
4: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=)
5: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=)
6: htEUr6Lt44lZvtJ-YrwomAVpms8.roa (hash: fr4tJOJHx4cibpVUjq4P3JJxw5JGxqyswZhZFvLizGs=)
7: jTqcYKHqLgJzkgKKyQoLjf3ZZiA.roa (hash: NOw0XonYdKd94pKios35a/MdMCRJkVJF3zHnY0kyMwo=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: Fsrkmj0a2oyQkwkshsYajwfZhoI6jctocoQH/VYUnAE=)
9: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3d:15:95:b6:65:45:b2:5f:04:d4:e5:d0:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Mar 25 19:01:08 2026 GMT
Not After : Mar 26 19:01:08 2026 GMT
Subject: CN=344295a337bffd8190bdd279b30936d6609f1b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:d2:3a:06:05:82:90:ec:7b:c6:7d:30:9a:
a1:c5:65:eb:4b:8c:ed:75:2a:ab:36:4b:00:19:29:
c8:08:a6:0a:4d:3e:e4:ab:84:9c:37:db:c5:2d:4f:
ef:b8:d8:01:d4:55:a4:00:22:7b:8d:e5:83:65:56:
85:6a:ed:d6:7e:24:b3:b8:e6:68:43:31:ea:70:9a:
90:d0:aa:8d:4d:fd:f2:c3:be:8f:50:2a:49:ed:68:
6a:7e:84:55:61:90:e5:f2:a1:36:7d:3f:55:b7:6b:
42:f8:c7:3f:8f:f9:e6:5e:32:51:79:ad:b1:51:04:
7c:ca:7e:14:28:bd:94:34:d8:a8:db:e5:b1:64:2e:
8d:16:1c:ac:6a:95:54:95:45:9e:89:b9:1a:5b:80:
ad:e4:9f:3e:59:9b:c6:44:a4:a9:e6:91:e9:f5:a0:
62:95:03:a5:19:a0:d0:f7:2d:0e:29:f3:5b:32:08:
86:e3:5a:b2:05:1f:36:01:60:d1:8a:12:79:f3:0c:
db:16:5e:84:c3:60:11:8d:15:d5:70:f1:3d:fe:2c:
d7:4d:14:f9:6d:2b:b3:7b:6e:89:ee:aa:e7:8f:f1:
84:c7:40:cb:11:ee:85:10:b2:8e:66:ef:6c:c5:a3:
b6:47:2b:b8:c0:67:13:a0:33:30:69:97:55:50:8a:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:95:A3:37:BF:FD:81:90:BD:D2:79:B3:09:36:D6:60:9F:1B:18
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ab:8b:05:f5:c5:36:0f:70:e9:7a:2b:13:d0:8e:a2:12:66:
d5:ba:6b:81:11:16:aa:a2:55:9b:ea:15:43:b5:a1:69:11:ee:
bb:50:65:7d:22:6c:73:30:80:92:4e:7f:66:47:ce:b0:4a:7d:
d8:79:45:0d:2f:f7:66:2f:8d:db:d6:59:3f:ed:f6:e2:24:7b:
fa:c5:fd:98:26:50:de:75:d2:2a:73:c0:12:ad:d6:1b:82:09:
2f:b5:a7:85:30:8e:5b:73:56:3e:c0:76:fe:03:c6:0e:5f:2e:
3a:7f:4a:ca:af:1b:2e:33:cc:66:8c:3c:10:4c:24:f1:5a:96:
86:96:ae:ee:a7:03:6c:3a:0c:0e:c4:c9:bc:5c:84:1d:50:37:
90:5d:99:33:61:24:76:a8:ce:ea:ba:a8:b5:40:7a:52:fa:6a:
db:be:21:93:e9:64:71:36:08:56:d8:18:12:70:b9:48:94:b6:
2c:7b:57:8b:1c:94:e2:eb:36:e1:03:8d:76:b2:d8:bd:33:36:
78:ff:c0:6c:3a:0d:de:f1:79:08:1a:a9:db:75:04:93:44:0f:
56:f2:1e:d5:0b:7f:68:e7:f2:83:1e:e4:86:15:88:74:b6:f3:
81:62:86:83:a0:0b:37:85:69:e6:42:3f:56:9a:ee:b3:1c:52:
ea:b7:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:32 2026 by rpki-client