Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: dVhPGpxen2sIxVagsySsu6FiJSff2hYWw1Fc+wlwYR4=
Subject key identifier: 9F:F1:15:DA:F3:93:88:FD:7C:8F:40:BD:C5:ED:48:54:2E:46:7C:15
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 019D27E040AAEE47CA10283876A9DECB706C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 1647
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (hash: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8=)
2: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: 3sTO76QDSTv9pxOeCGrOt939UHUxkQw604IuKK7UNwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:40:aa:ee:47:ca:10:28:38:76:a9:de:cb:70:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=9ff115daf39388fd7c8f40bdc5ed48542e467c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:b5:85:54:65:2a:ba:3a:20:64:42:dd:2a:
b1:2d:ab:50:02:7a:af:3e:9b:e6:55:93:d3:30:8f:
c0:6b:f8:c4:c5:43:43:35:c4:8e:f4:81:51:70:27:
4a:e8:15:43:ca:e6:da:87:cc:2b:66:4a:36:95:22:
e8:90:aa:6a:3a:62:39:a2:15:ab:43:1b:8c:92:16:
5b:aa:cb:bc:9e:8c:72:c8:65:88:a6:da:50:cd:5e:
23:c7:54:dc:59:fd:32:75:9b:68:32:e1:5e:33:6b:
a2:40:66:e3:1d:3a:4b:9e:48:7c:86:c0:9a:a3:e9:
8e:89:fa:41:0f:55:4f:d6:fc:03:6a:d0:68:35:31:
60:5c:6d:15:87:c4:09:37:09:aa:51:32:eb:52:d3:
85:e3:3b:8b:eb:1f:75:66:77:17:45:4f:28:12:69:
9a:b9:6f:e5:3a:f5:9d:78:8e:7a:98:8b:32:d8:b7:
86:a8:31:54:12:ad:3d:40:06:7f:da:dc:0b:df:fb:
46:4c:33:88:40:41:08:4f:e3:fb:fe:88:98:5a:51:
1b:a0:9d:91:d5:76:b6:27:6e:93:c1:7e:ba:11:08:
97:ec:d0:d6:fe:a4:c2:89:0b:e9:45:ea:d3:10:05:
ba:4a:24:c5:70:16:35:90:3b:c8:72:85:6e:d0:66:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:15:DA:F3:93:88:FD:7C:8F:40:BD:C5:ED:48:54:2E:46:7C:15
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1e:56:ac:0c:8b:f3:fc:6a:2e:9b:4d:bd:b5:f0:6c:50:07:
a4:fb:98:19:48:8c:12:38:79:bb:9b:26:7a:9d:5c:05:65:9a:
11:97:e5:4a:87:60:2f:61:13:5c:62:37:30:b4:3a:49:52:d2:
23:81:d1:fd:4a:e1:9c:a0:a1:6b:59:1b:f4:b7:6e:d0:ae:9b:
d7:bd:02:45:4a:10:4b:00:82:2e:d1:e4:49:25:09:46:72:ae:
f9:aa:9d:b2:5c:0b:69:18:e9:7b:a5:51:33:c7:3d:22:46:fc:
ae:03:60:ef:ee:64:46:00:58:88:17:8f:2c:bf:bf:b0:4f:31:
56:3d:1a:66:c6:bf:1f:df:32:db:f0:bd:ab:7a:c2:8e:b7:83:
ec:c8:d9:19:a6:46:14:1b:e3:91:3a:c4:24:e5:a7:9f:e0:81:
5e:93:0b:ab:fb:55:9e:f2:77:1d:bb:7a:51:64:71:8a:ac:5d:
d6:7c:98:55:07:85:3d:7b:24:09:21:a8:22:bd:b9:96:ce:25:
de:73:ab:c8:db:db:c6:7c:cf:f5:31:d6:55:2d:2f:f7:79:64:
ed:09:21:80:b2:45:76:cc:2c:cf:e5:4e:6f:88:f2:de:86:00:
a9:08:cd:c6:c7:e0:07:92:9e:d0:4b:32:8b:b0:b9:c7:b4:03:
43:06:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:34 2026 by rpki-client