Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: JPhY5HYvKbCexoJeu8zY+kAyzW9USBqYVMORvfT0Eq0=
Subject key identifier: A8:37:00:68:3C:A9:72:B4:17:B9:99:AF:B6:A3:21:80:CE:7E:51:56
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019F902334433B41B5D57CAE0CF4937F8666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 10F1
Signing time: Thu 23 Jul 2026 18:00:53 +0000
Manifest this update: Thu 23 Jul 2026 18:00:53 +0000
Manifest next update: Fri 24 Jul 2026 18:00:53 +0000
Files and hashes: 1: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
2: isTKYtbUnSryrfFZr4-sBY4hH2k.roa (hash: YsbVFBRwd8pAe2/JAWEYBxt6vxRupWcftoItlak1zEs=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: /lvAiaeW/Mfsi3OeP9uIvNBvCwSHKmS+ohU3b6xnZGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:34:43:3b:41:b5:d5:7c:ae:0c:f4:93:7f:86:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jul 23 18:00:53 2026 GMT
Not After : Jul 24 18:00:53 2026 GMT
Subject: CN=a83700683ca972b417b999afb6a32180ce7e5156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:53:63:f0:bd:55:be:d9:ae:d4:6b:03:96:
bc:a4:66:56:e6:dc:e3:af:2c:80:94:f4:e0:f7:e7:
e2:42:c6:13:68:2f:86:e1:2a:75:8d:0e:c7:cc:e2:
ac:87:b8:2f:7d:76:d0:d2:17:80:75:26:fd:9f:fe:
a1:15:a9:09:21:a5:09:80:1d:ef:5f:23:e5:97:0e:
00:e0:5a:28:ca:10:97:76:4e:28:75:b4:12:99:83:
46:6e:84:15:16:93:4d:52:37:90:83:bc:70:c1:eb:
e7:1a:de:e2:83:e8:dd:b4:16:9e:0d:e8:7a:76:2d:
fd:98:2b:df:59:10:ca:93:f5:30:34:7b:b9:72:81:
36:ee:bc:d9:d8:c2:43:26:a6:4a:e0:af:36:d2:43:
e0:70:04:98:ff:79:6e:10:ae:b5:1b:d9:06:4a:6f:
7b:da:4f:b8:e7:14:e7:6c:ed:2c:bd:10:24:8e:de:
9c:13:25:48:be:25:84:a7:24:55:75:0f:2f:a9:39:
aa:2b:95:b2:e6:4d:9d:71:87:40:3b:4a:5b:cb:2a:
66:e3:80:a3:a8:b1:ab:5c:3b:3a:4f:32:4e:1f:6c:
ec:80:e0:f6:01:bc:96:3f:b9:77:fc:5b:11:62:28:
7d:36:6e:c3:63:db:28:75:16:98:2c:f9:39:6f:f6:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:00:68:3C:A9:72:B4:17:B9:99:AF:B6:A3:21:80:CE:7E:51:56
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2c:93:e9:c6:a6:0b:4c:09:8e:29:36:fd:72:b1:9d:61:f9:
f4:37:f0:eb:31:69:e9:9e:99:c4:cf:f2:dc:2e:ed:25:df:b9:
6f:c6:8f:24:c1:04:ac:b3:ec:46:de:94:b0:6c:d3:44:e2:99:
30:bd:e4:4f:7b:4a:80:70:95:92:6c:01:fe:94:99:fb:d5:ac:
30:ac:56:91:42:38:ea:9e:bd:4b:00:57:7d:02:e6:99:70:51:
26:cc:47:06:3c:25:2c:cf:e9:e6:9c:6d:43:aa:d3:63:30:10:
95:2f:60:53:66:6b:92:d3:a6:89:54:60:90:7b:c4:79:11:46:
86:c7:7b:5e:ca:76:e1:ca:8d:94:62:fd:46:ad:bb:63:e1:ea:
8b:9c:dc:37:62:11:ab:33:68:09:3f:0a:ad:e4:76:2f:4b:e5:
8f:b1:1c:e9:d1:d7:b6:af:c1:63:e2:f7:3a:6b:96:ba:d0:a3:
e2:fc:c9:7a:23:0f:68:39:50:ad:30:d2:50:63:d2:6b:1e:63:
0c:42:82:42:28:c3:db:29:79:ba:c4:b5:1b:be:29:6f:af:ce:
a8:95:73:49:6b:04:65:5b:bb:de:6b:12:d5:46:8a:13:d6:2d:
86:20:1f:ce:b9:ac:9c:c5:4b:a3:49:31:6a:30:54:82:14:9d:
53:ee:98:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIzRDO0G11XyuDPSTf4ZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjYwNzIzMTgwMDUzWhcNMjYwNzI0MTgwMDUzWjAzMTEwLwYDVQQD
EyhhODM3MDA2ODNjYTk3MmI0MTdiOTk5YWZiNmEzMjE4MGNlN2U1MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7URTY/C9Vb7ZrtRrA5a8pGZW5tzj
ryyAlPTg9+fiQsYTaC+G4Sp1jQ7HzOKsh7gvfXbQ0heAdSb9n/6hFakJIaUJgB3v
XyPllw4A4FooyhCXdk4odbQSmYNGboQVFpNNUjeQg7xwwevnGt7ig+jdtBaeDeh6
di39mCvfWRDKk/UwNHu5coE27rzZ2MJDJqZK4K820kPgcASY/3luEK61G9kGSm97
2k+45xTnbO0svRAkjt6cEyVIviWEpyRVdQ8vqTmqK5Wy5k2dcYdAO0pbyypm44Cj
qLGrXDs6TzJOH2zsgOD2AbyWP7l3/FsRYih9Nm7DY9sodRaYLPk5b/bmpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg3AGg8qXK0F7mZr7ajIYDOflFWMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSyT6cam
C0wJjik2/XKxnWH59Dfw6zFp6Z6ZxM/y3C7tJd+5b8aPJMEErLPsRt6UsGzTROKZ
ML3kT3tKgHCVkmwB/pSZ+9WsMKxWkUI46p69SwBXfQLmmXBRJsxHBjwlLM/p5pxt
Q6rTYzAQlS9gU2ZrktOmiVRgkHvEeRFGhsd7Xsp24cqNlGL9Rq27Y+Hqi5zcN2IR
qzNoCT8KreR2L0vlj7Ec6dHXtq/BY+L3OmuWutCj4vzJeiMPaDlQrTDSUGPSax5j
DEKCQijD2yl5usS1G74pb6/OqJVzSWsEZVu73msS1UaKE9YthiAfzrmsnMVLo0kx
ajBUghSdU+6YdA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:15 2026 by rpki-client