Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: ZwW2KULR0pUGMeyWHtAOycDmetRpVEqImffWtd/BHbE=
Subject key identifier: 73:98:10:86:3E:E9:08:B0:FD:90:1B:BE:6C:A3:78:32:42:0B:1B:83
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019E1E6C777FC494A287AF295E36A9FC7755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 1030
Signing time: Tue 12 May 2026 23:01:25 +0000
Manifest this update: Tue 12 May 2026 23:01:25 +0000
Manifest next update: Wed 13 May 2026 23:01:25 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: 1UkbuPQ+RzEXaVucpOUXwqqlai2b3cystwi04SFlx4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:77:7f:c4:94:a2:87:af:29:5e:36:a9:fc:77:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: May 12 23:01:25 2026 GMT
Not After : May 13 23:01:25 2026 GMT
Subject: CN=739810863ee908b0fd901bbe6ca37832420b1b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:31:d8:5d:6b:55:9c:6b:08:41:a0:fd:90:
e6:08:87:53:18:4a:22:6a:85:73:f9:47:24:e5:e3:
bb:5f:2f:4c:77:ac:b3:11:a5:a9:91:1e:98:0f:f2:
95:4b:9d:fe:5f:a7:f8:22:a1:08:8b:16:f9:a9:67:
5c:7b:59:81:94:d3:ec:45:73:5f:b9:23:6d:7a:e8:
fa:84:0b:80:e3:a3:a4:dc:03:5a:70:37:61:d7:a7:
2e:07:54:33:ad:69:8c:3c:84:e6:62:4e:8c:25:eb:
b8:6d:4f:07:c4:c3:e7:b3:63:d7:14:d5:65:f8:31:
b3:9c:f0:94:ad:c2:96:95:3c:e8:e6:f9:c2:15:5f:
02:d7:2e:f9:23:1b:3b:b4:dd:ed:d0:1d:e8:2e:63:
56:b5:09:aa:d6:f0:fc:9c:49:0c:ba:74:78:ce:2b:
3a:6d:e1:39:fb:16:cf:97:23:34:b6:33:4c:60:6e:
24:0a:c2:23:c2:ab:d4:8c:14:5d:9c:93:b3:86:96:
a2:26:c6:c4:21:76:ab:14:c9:12:59:87:46:50:9c:
a3:50:b0:ca:51:81:21:a7:fa:66:ac:d0:67:69:a6:
9e:b9:30:90:c0:6c:fc:b9:b8:0c:46:e4:ee:1f:03:
68:a8:fa:38:ad:0e:1d:bf:13:52:df:a7:db:99:7d:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:98:10:86:3E:E9:08:B0:FD:90:1B:BE:6C:A3:78:32:42:0B:1B:83
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a5:3f:c2:c6:0d:fa:9d:14:5d:ef:1e:4b:54:6d:ee:1c:6e:
8c:6f:18:a4:8c:a8:6b:72:17:ce:4e:4b:a5:28:c9:39:c0:74:
86:7b:3c:12:20:c0:88:f4:09:c3:96:4e:e9:15:25:00:e7:15:
43:6a:c8:b3:c5:3f:35:a8:67:ec:0a:b0:f5:85:53:f5:38:6c:
3d:38:c4:45:b2:a8:8f:c2:4a:61:1c:5d:e5:1e:73:4b:80:d5:
65:a4:3e:1a:40:75:18:e6:1b:fb:75:28:be:71:73:79:18:5f:
95:7b:0f:ac:be:09:70:56:06:15:af:fd:3a:1e:0c:64:33:41:
b8:27:da:b3:ba:10:2d:db:df:0e:40:96:26:98:ad:37:0f:c1:
9f:e5:d2:b1:98:0c:e8:df:f9:1e:d3:9b:a4:fe:04:7e:59:50:
46:9a:1d:a2:e3:94:65:99:04:2f:0a:f9:f4:35:5b:85:8d:66:
28:b8:18:c7:0c:20:10:37:fe:8b:cc:5c:c4:fd:e1:18:f6:4a:
c6:69:0e:38:f0:45:c6:ed:d3:19:96:99:cb:dc:d2:c6:b5:73:
5a:08:b5:08:ad:e2:c4:1f:62:1b:74:b4:58:d0:ea:de:37:b2:
1f:c9:68:4f:dc:ac:75:a8:0f:8a:69:76:0a:f0:22:b6:62:28:
e4:5b:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:56 2026 by rpki-client