Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: UW28ZuO5F5smRFgzn+6na4Emqv5IOmo2v0g9h4azTBo=
Subject key identifier: A5:52:0D:3A:79:EF:E3:F0:06:6F:DF:47:D4:61:6D:A7:13:6D:10:03
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019D273A92BDE0BE721FE3CCD8FA485743A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0FB0
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: MLN3K3YYJu2f2+SmlLqrk0P4KdineMJi55snkvENnZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:92:bd:e0:be:72:1f:e3:cc:d8:fa:48:57:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=a5520d3a79efe3f0066fdf47d4616da7136d1003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:d6:7b:03:7d:cc:88:e3:8b:d0:84:29:81:
61:36:5f:af:84:17:3a:9e:b5:5b:53:6d:cb:20:04:
94:24:61:18:e4:0d:2d:66:75:9c:31:a6:16:8a:9a:
84:c6:16:89:fb:2c:dc:36:ec:40:de:e0:e4:6c:bb:
6d:af:d8:79:fb:1f:1a:5e:9f:69:c1:7f:6d:97:2a:
63:3e:97:11:5e:8a:db:45:8f:08:9b:85:59:ba:c8:
1b:c3:5d:3b:b9:8d:2e:25:a4:d6:a4:e2:67:5e:58:
66:36:bd:29:55:c3:3f:b3:f2:1b:d0:55:c7:84:ef:
b3:d2:cd:85:33:9f:6f:93:40:5b:23:9e:61:cf:7f:
58:ce:97:d2:8a:4b:25:b8:5d:41:ec:d9:63:1c:6d:
72:69:e3:57:61:56:25:aa:7a:b6:06:9a:ec:2a:e8:
42:45:22:99:db:01:bb:7c:f9:ef:02:8f:11:87:98:
be:81:61:c2:cf:38:5a:11:26:a6:2e:df:68:52:16:
6a:cd:b4:f0:b4:7a:9a:36:8a:01:60:65:d3:ed:ef:
ac:6d:e1:b9:98:50:aa:f3:62:3b:cf:3d:ce:53:54:
0c:9f:37:6c:f8:3b:76:1a:68:b3:4f:d2:a0:a7:cf:
1b:a6:6d:b5:54:39:28:d1:98:4b:99:23:bd:d3:57:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:52:0D:3A:79:EF:E3:F0:06:6F:DF:47:D4:61:6D:A7:13:6D:10:03
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:e1:82:36:3e:92:23:2c:8f:99:38:45:b2:47:aa:f0:b2:
16:9e:da:25:d2:71:d3:7d:fe:01:ff:06:b7:bf:29:53:a3:a6:
7e:9a:4f:d6:b2:e7:47:67:d7:80:4e:76:2d:cf:08:73:3e:1e:
82:9e:fb:92:e2:f1:86:65:2d:ab:6f:ae:74:95:a4:3b:6c:75:
bb:dc:cc:42:c2:03:d4:72:e3:29:b1:4c:99:97:c3:14:d2:72:
7b:b8:19:49:2b:39:50:51:24:3e:ce:67:31:33:78:05:2e:71:
24:2d:fe:58:24:80:c1:1b:10:60:33:24:26:99:a7:c2:d6:3f:
3b:95:73:f0:25:18:a0:d1:a7:89:8d:f0:62:41:da:35:e7:99:
f7:af:ab:f9:3f:36:60:cb:56:88:67:39:7a:ce:8a:8f:d2:e7:
f4:27:9b:0a:58:f5:44:b8:d9:5b:f3:8d:a9:b3:89:43:7a:44:
aa:12:b3:48:fd:9f:2a:1e:d7:99:af:e4:37:b4:9a:92:45:d3:
36:b2:1e:01:0d:bc:09:93:a2:e8:62:2e:3e:13:f9:fc:9f:35:
95:61:42:43:17:5f:fc:9e:e2:67:74:1d:2b:de:59:41:27:87:
b2:0f:14:62:36:34:1e:73:3f:96:77:5d:e0:0d:53:36:78:3e:
6d:c3:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:29 2026 by rpki-client