Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: 9PmT4lAzrveeGwlJBVWm2GI3+p7aHBX7I9SNLU7VjxM=
Subject key identifier: 03:E7:AA:0F:41:51:32:AD:E2:C7:AA:A7:45:31:EF:CB:3D:CC:C4:5F
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 019F95B7B25AE4B878C242066C618DE883E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 1789
Signing time: Fri 24 Jul 2026 20:01:11 +0000
Manifest this update: Fri 24 Jul 2026 20:01:11 +0000
Manifest next update: Sat 25 Jul 2026 20:01:11 +0000
Files and hashes: 1: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (hash: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8=)
2: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: 9DsLS9wxRIRDDup1ZGkaJAkNnZwlJXpKaL+JgWFAIDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:b2:5a:e4:b8:78:c2:42:06:6c:61:8d:e8:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Jul 24 20:01:11 2026 GMT
Not After : Jul 25 20:01:11 2026 GMT
Subject: CN=03e7aa0f415132ade2c7aaa74531efcb3dccc45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:66:60:3f:f5:c0:42:72:e6:86:84:7b:a1:
c7:90:3a:c9:de:9c:41:ba:35:08:84:f6:e8:6f:51:
25:42:20:f6:42:15:9b:a6:b7:5a:90:82:7b:c4:dd:
cc:33:6f:bd:f1:5a:e9:81:14:00:7e:cb:fa:1e:8a:
4b:0c:4d:6a:13:e3:62:9e:bf:ce:5e:ad:20:9c:86:
9a:bf:25:36:04:aa:e4:43:fc:55:7c:a7:11:18:0d:
97:a7:4f:09:cb:f1:32:0d:71:7c:88:25:f2:24:28:
0f:f7:21:78:97:cf:a1:2b:b7:25:6c:08:eb:4d:3d:
fa:f7:3d:44:23:13:2f:6a:58:94:27:a1:64:9c:69:
1c:f1:fd:cb:4f:b3:57:45:94:b7:c3:78:64:ad:cf:
3d:85:42:84:4b:66:89:1a:6d:e9:0e:71:a2:c9:d0:
45:a6:2b:ed:84:b4:a4:a9:eb:b5:73:f0:e1:0f:db:
fb:c9:47:7e:b3:dc:30:83:d1:69:20:58:4f:49:a0:
8c:0e:f8:ed:7d:9d:87:87:e7:2c:e7:d5:ad:37:59:
95:cf:f2:ac:83:6e:55:44:01:aa:14:83:79:10:ea:
0a:5f:1b:1b:f4:32:11:e8:20:37:4e:d1:50:a6:77:
4c:ab:58:f1:e6:e4:06:52:d2:86:d2:05:8a:9d:5f:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:AA:0F:41:51:32:AD:E2:C7:AA:A7:45:31:EF:CB:3D:CC:C4:5F
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:46:d3:50:df:a4:85:81:52:3f:65:02:46:fe:f1:5d:90:fc:
8b:9e:fa:eb:32:0d:5e:6f:15:0e:dd:29:a4:10:4e:0b:32:61:
10:95:c7:ad:0b:b3:c5:72:db:b3:29:af:86:78:97:8e:6c:ad:
6a:8f:ec:d6:68:2d:d9:e8:94:ca:18:de:af:31:2e:c8:9e:6b:
f9:1b:8a:40:aa:d3:ce:8a:21:c1:8f:7d:96:0b:b5:aa:b7:15:
fb:c7:91:05:4b:ef:90:6e:91:64:b9:26:2a:75:68:e2:e6:93:
e4:06:85:04:e8:a8:96:e9:8d:5e:04:cb:34:75:6c:12:af:63:
91:44:74:7c:f0:c5:ac:d3:a1:95:f5:83:09:c1:1a:b4:a7:a0:
64:17:57:b3:43:1b:0b:a0:57:f8:2e:67:29:7f:68:60:11:29:
4b:22:5d:5f:97:0f:b5:30:0a:ad:1c:02:ca:88:82:5c:86:f9:
a1:5f:e1:25:a8:da:3b:c2:b3:28:0a:f7:38:30:33:1d:47:7c:
90:a0:63:3f:2f:26:16:85:4d:62:b3:00:1b:20:e1:af:29:f5:
bb:7c:0c:7b:52:3e:0b:a2:86:b7:20:a8:1d:91:45:30:ac:ac:
86:a2:7f:98:6c:c8:5b:b1:a4:7d:bc:34:e0:c4:ed:5d:b1:ac:
d1:a3:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:52:11 2026 by rpki-client