Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: vEug2IVdQZU0y0lqeyAiyEJtNzBk7Zhp4C8zjE/syyI=
Subject key identifier: E7:6B:E4:AE:D3:80:AC:63:39:AC:18:3F:73:43:9C:EF:7B:66:4D:42
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 019E20FFFF0D9FDCBC5F09DD4B2FF017D1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 16C8
Signing time: Wed 13 May 2026 11:01:48 +0000
Manifest this update: Wed 13 May 2026 11:01:48 +0000
Manifest next update: Thu 14 May 2026 11:01:48 +0000
Files and hashes: 1: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (hash: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8=)
2: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: IDdeIOUyBNUuUsrtZ0eCYoJ1yG/mC4Q3RrJOIIXUNiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:ff:0d:9f:dc:bc:5f:09:dd:4b:2f:f0:17:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: May 13 11:01:48 2026 GMT
Not After : May 14 11:01:48 2026 GMT
Subject: CN=e76be4aed380ac6339ac183f73439cef7b664d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:9e:26:45:f1:b4:30:ae:a6:5c:53:a0:d5:
53:e1:06:c9:1b:0c:83:65:c6:55:da:d0:1f:5a:f6:
59:7d:5b:b7:e1:21:01:d5:79:39:0f:d3:44:1f:1f:
70:cb:69:b5:08:20:0a:1e:8a:2c:10:6d:3c:66:69:
f6:23:f1:76:f8:6a:5f:8f:41:f3:68:e8:f9:a5:82:
f7:41:09:d2:98:50:e3:3a:bf:e4:d4:dc:07:52:d2:
11:fe:45:42:6a:b3:db:94:f3:c1:f0:08:e3:e1:4c:
60:7e:7b:99:37:56:74:7f:35:c0:f4:86:e5:87:37:
a4:1b:96:d4:cd:8c:dc:8d:2a:6c:7a:c4:50:31:5d:
ec:54:38:ae:13:94:54:44:33:4d:a6:94:5d:21:ad:
70:67:d1:16:77:a1:b7:89:87:80:20:1b:9e:3c:b4:
4f:7a:c6:88:8b:10:66:6a:79:16:42:14:e4:8a:a5:
47:8d:0e:1d:48:63:4c:95:61:02:87:4e:0c:bd:b9:
2a:ce:91:f7:b5:77:1e:62:00:d1:b4:63:66:47:5f:
13:a3:e8:e0:3b:c2:bb:d9:38:0f:c0:3d:54:a3:12:
d9:86:99:46:cc:09:3f:35:c8:40:fb:33:1d:e6:e5:
87:ef:ca:c9:2b:e7:3b:b4:97:0b:5d:7e:cf:4b:ac:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:E4:AE:D3:80:AC:63:39:AC:18:3F:73:43:9C:EF:7B:66:4D:42
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ba:6e:b0:89:92:3a:a2:bc:10:ea:59:fd:0d:32:69:0b:b2:
42:79:86:f0:20:83:d1:2a:1a:03:30:cb:14:d4:a5:da:8d:d8:
b6:99:a7:9d:7f:d7:97:49:f3:43:2f:f9:23:8c:1f:e2:10:ca:
3e:e6:de:d2:b0:a6:d4:48:29:90:39:13:4e:1d:e2:73:7f:42:
a0:e1:70:b2:f2:d3:fa:e4:81:d4:a8:10:12:03:93:f3:a7:ac:
21:53:93:25:2d:37:7f:2c:5c:ca:ab:42:dc:31:f4:a6:e6:cf:
31:79:d0:02:8d:bf:f6:21:11:f6:d8:2b:a0:83:bf:0a:c5:3c:
1b:9e:97:d1:05:86:9c:90:0b:40:e3:17:c6:ac:c7:1f:52:94:
57:0c:b2:12:cf:77:ef:05:eb:da:16:c1:ac:79:17:9c:20:7f:
68:28:90:1a:12:89:f0:f7:0e:8c:f0:f7:32:2e:80:ed:96:a7:
84:d3:0a:93:8d:a3:34:cb:f4:87:00:4a:a3:3e:b2:9b:01:ea:
15:36:60:fa:a2:5d:85:7b:5f:6d:68:a1:cb:50:cc:00:41:3f:
40:73:85:dd:e3:00:11:51:2e:66:8c:d7:0a:07:e0:b4:ad:da:
6c:d2:f0:69:30:bb:ab:02:7f:9f:c5:1d:9d:ce:3c:cc:66:a5:
e7:d2:29:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g//8Nn9y8XwndSy/wF9HSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTA4NTNhMjRhOGM3NjIyMzRlODkxM2E0YTViMjk4NWMz
MzFkYWQwHhcNMjYwNTEzMTEwMTQ4WhcNMjYwNTE0MTEwMTQ4WjAzMTEwLwYDVQQD
EyhlNzZiZTRhZWQzODBhYzYzMzlhYzE4M2Y3MzQzOWNlZjdiNjY0ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XSeJkXxtDCuplxToNVT4QbJGwyD
ZcZV2tAfWvZZfVu34SEB1Xk5D9NEHx9wy2m1CCAKHoosEG08Zmn2I/F2+Gpfj0Hz
aOj5pYL3QQnSmFDjOr/k1NwHUtIR/kVCarPblPPB8Ajj4UxgfnuZN1Z0fzXA9Ibl
hzekG5bUzYzcjSpsesRQMV3sVDiuE5RURDNNppRdIa1wZ9EWd6G3iYeAIBuePLRP
esaIixBmankWQhTkiqVHjQ4dSGNMlWECh04MvbkqzpH3tXceYgDRtGNmR18To+jg
O8K72TgPwD1UoxLZhplGzAk/NchA+zMd5uWH78rJK+c7tJcLXX7PS6yJMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdr5K7TgKxjOawYP3NDnO97Zk1CMB8GA1UdIwQY
MBaAFJpQhTokqMdiI06JE6SlsphcMx2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgt
ODhiNThkMDJiMmExLzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgtODhiNThkMDJiMmEx
LzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrpusImS
OqK8EOpZ/Q0yaQuyQnmG8CCD0SoaAzDLFNSl2o3YtpmnnX/Xl0nzQy/5I4wf4hDK
Pube0rCm1EgpkDkTTh3ic39CoOFwsvLT+uSB1KgQEgOT86esIVOTJS03fyxcyqtC
3DH0pubPMXnQAo2/9iER9tgroIO/CsU8G56X0QWGnJALQOMXxqzHH1KUVwyyEs93
7wXr2hbBrHkXnCB/aCiQGhKJ8PcOjPD3Mi6A7ZanhNMKk42jNMv0hwBKoz6ymwHq
FTZg+qJdhXtfbWihy1DMAEE/QHOF3eMAEVEuZozXCgfgtK3abNLwaTC7qwJ/n8Ud
nc48zGal59IpNQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:12:48 2026 by rpki-client