Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: e/d9n0rxMMjPCRF5m5w/y3kcpjmCBE6MHWrq0xYFJyA=
Subject key identifier: B6:91:B6:9E:FB:B5:1C:D1:CC:8B:5B:F0:64:EE:AE:EB:7A:D5:A1:E7
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01A0EE1DA7F29C4A12270ECA45C2B10F51B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 1A89
Signing time: Tue 29 Sep 2026 17:01:55 +0000
Manifest this update: Tue 29 Sep 2026 17:01:55 +0000
Manifest next update: Wed 30 Sep 2026 17:01:55 +0000
Files and hashes: 1: 8PG-fi4UKZTsI-qGra5FYLxhK7U.roa (hash: rVcMkzlcbjAZCYKt1vWuh1f3Uw3Bkd84bPp/2fCkd84=)
2: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=)
3: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=)
4: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=)
5: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=)
6: bt4XElFmmymOYPm9YwLV1WhS8dg.roa (hash: elowfO4U8unek9TrOUffWVUXwXcPjKzkg7IwSpkvbEk=)
7: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: 67wHUnOpDDIL3t9tu1IIHzb/8uppwsarls5GH6muo8g=)
9: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:a7:f2:9c:4a:12:27:0e:ca:45:c2:b1:0f:51:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Sep 29 17:01:55 2026 GMT
Not After : Sep 30 17:01:55 2026 GMT
Subject: CN=b691b69efbb51cd1cc8b5bf064eeaeeb7ad5a1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:c9:cb:d2:37:e8:95:a5:33:fc:3a:4e:4c:
4a:ce:ea:ce:4e:29:77:23:89:e9:51:bd:43:80:4c:
3a:f7:7e:f4:5e:36:93:ac:4c:a1:d1:a3:93:76:d1:
1a:09:97:6e:3f:89:91:27:0b:8b:64:cf:14:9b:17:
4b:d4:91:8d:f0:fb:81:d0:ac:5d:32:38:81:4e:97:
5f:2f:7e:47:5a:ad:b2:04:d8:61:5b:5f:45:83:5e:
48:7a:b1:42:67:3d:fc:8c:71:17:99:5d:94:37:f0:
f1:64:48:89:45:d7:c7:b5:fa:be:48:9a:00:a8:a5:
22:40:12:98:e5:83:60:69:c7:83:26:26:32:f8:41:
60:5c:4d:90:e0:0a:a9:cb:3d:73:cc:c8:99:16:ce:
c2:a1:0e:a0:26:66:8b:c3:cc:10:d2:57:e9:2f:60:
59:f7:e8:cf:25:0a:0a:3b:e3:8b:cf:78:b1:0c:10:
20:cf:96:37:63:50:e4:73:fd:4e:f1:2e:99:59:ee:
e3:67:1d:56:e5:4d:35:57:27:72:44:7a:c1:eb:88:
62:52:2d:10:57:bc:f6:0c:f9:08:13:56:df:b5:98:
31:b4:1e:2a:02:a6:e3:a2:39:ae:38:dd:b6:af:a0:
db:e5:8c:0c:da:11:08:5d:12:53:d5:ba:fd:b5:4c:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:B6:9E:FB:B5:1C:D1:CC:8B:5B:F0:64:EE:AE:EB:7A:D5:A1:E7
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:7e:bc:8c:97:db:f8:d3:44:e5:59:e1:db:c4:b4:b7:06:
23:02:07:4b:a1:27:ae:bb:2e:11:24:cc:52:f4:ed:e1:c5:5d:
1a:42:9b:e6:9a:7c:2a:3d:40:98:a4:49:07:57:e0:0c:27:83:
f7:ed:2b:f0:f2:d8:86:b5:5b:78:eb:ef:47:29:e7:7c:98:62:
d8:9b:5f:66:ad:a9:19:50:10:32:fc:8e:bf:d4:ff:8b:33:c4:
32:b5:88:75:c9:fe:3e:48:a8:d0:38:77:00:cf:db:18:7e:ea:
a3:7a:f0:50:0e:40:dd:38:e5:a0:36:db:af:51:03:3c:0d:d8:
8b:c8:50:d4:54:7c:51:84:1a:c5:97:bb:cd:0f:3b:60:85:31:
02:56:cb:a0:04:6c:7c:09:41:f3:3c:44:04:87:a9:ec:5d:2f:
3f:99:bb:01:51:1d:6a:e5:7d:5e:09:78:9b:e4:fc:51:4b:df:
29:b2:0c:61:0a:b6:20:14:d1:93:b6:db:df:57:20:42:09:1a:
cb:bb:c8:16:b3:10:2d:05:aa:57:ae:07:c8:15:96:89:63:3f:
5e:36:33:a2:4a:6c:ca:bf:ce:69:e5:d3:ed:cf:13:0c:2e:aa:
e2:d4:64:5d:88:d3:63:d1:ed:1a:76:89:38:78:a2:15:c4:bc:
1f:ff:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:59:51 2026 by rpki-client