Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: 0h0avC2xSdQ0CKy9+uBgxfJaUA/XUe4ecOow99LryL0=
Subject key identifier: 2B:16:9C:B6:89:1F:A9:92:91:F9:85:10:40:83:0C:87:10:B6:CB:2B
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019ED4D02897A0B6B1EE6D8DFC442B7EFF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 09:01:12 +0000
Manifest this update: Wed 17 Jun 2026 09:01:12 +0000
Manifest next update: Thu 18 Jun 2026 09:01:12 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: WTxlLAC4TX3+zELqCltzbvtMokNk/dQYhVNC5IpZKns=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:28:97:a0:b6:b1:ee:6d:8d:fc:44:2b:7e:ff:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jun 17 09:01:12 2026 GMT
Not After : Jun 18 09:01:12 2026 GMT
Subject: CN=2b169cb6891fa99291f9851040830c8710b6cb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:95:54:a4:a3:62:34:9c:91:44:a9:e7:76:
7d:62:a4:9b:f3:0b:5f:ab:5c:a1:5c:ca:1b:2b:f3:
e4:96:30:99:c2:ee:0b:8f:fb:63:c1:11:47:35:4e:
d9:59:56:c1:c5:f5:0b:7f:7c:63:c1:ca:22:9d:c7:
dd:87:4a:55:57:c6:52:e2:68:32:6f:d3:3b:f2:9a:
81:c5:66:12:32:f2:4e:dc:4b:0a:7e:c3:46:99:c8:
38:03:3a:e3:69:ff:fd:9d:94:11:4d:fb:f2:e3:3c:
30:e9:4f:83:a0:cb:f4:c5:ec:cd:6e:b7:37:b8:81:
f0:0f:1b:89:1a:a6:a1:2e:99:fc:6c:96:14:8b:ae:
6b:7d:04:41:6b:08:aa:96:73:19:2f:3b:f7:08:b7:
a5:f4:eb:f1:33:d5:7d:97:39:fc:19:e2:20:14:56:
49:0d:d1:2f:f8:2e:f7:8e:0b:d0:7c:9b:91:fd:91:
2b:b4:d9:69:7d:9d:19:d8:6d:78:8b:b7:63:2c:80:
4c:26:ce:b8:47:43:fd:89:03:79:88:6e:fb:6e:d2:
6e:0e:2b:b2:69:05:f8:cb:1f:80:d9:66:34:e8:ce:
6f:7b:de:5f:53:be:e8:3b:0e:a6:26:4c:09:a7:3e:
8d:d2:33:35:2e:0a:33:1a:14:94:1e:2c:16:ad:bd:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:16:9C:B6:89:1F:A9:92:91:F9:85:10:40:83:0C:87:10:B6:CB:2B
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:16:fe:60:3f:a3:14:f9:96:ad:d5:db:f0:df:8f:e9:2d:78:
b8:3c:c6:3b:9f:0c:28:6e:5c:fa:af:a2:09:3f:6d:fa:c8:3f:
86:78:69:19:7b:2f:62:a4:ed:d3:8d:c6:40:8f:bf:14:0a:15:
96:2f:92:bc:c1:c9:aa:55:9b:c9:61:6d:a5:53:26:64:ee:5d:
ac:e2:c7:e4:60:5f:b5:2d:f0:ba:19:74:7f:53:db:fb:1d:e9:
08:a2:3a:68:11:94:46:c8:38:3b:2f:6c:dc:30:6e:dd:d1:ad:
d0:c6:df:8a:47:4a:15:6b:f5:3d:1b:c6:11:c4:a5:6f:ea:80:
53:a5:b0:b6:44:67:1a:d6:6b:a2:b2:af:e0:98:5b:5d:00:41:
d5:97:0b:d6:3b:8a:21:b8:2e:d6:be:8f:f5:80:6e:fe:c4:cf:
01:3c:4a:48:bc:6c:72:da:fc:43:7f:54:06:30:63:98:be:75:
97:24:2d:d0:81:20:3e:ad:05:c5:30:56:19:37:a9:61:4e:16:
cb:13:bd:25:70:99:f7:f8:55:7b:00:36:aa:ec:0f:f9:1c:c4:
17:b3:2c:a8:7b:9b:e1:3c:16:8b:75:a5:4f:ee:4e:1c:7b:10:
9f:74:51:1c:12:17:9b:11:a6:0b:6a:7d:3a:b3:8c:6b:2d:4d:
d9:ba:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:35 2026 by rpki-client