Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: q8SrZ9plFKyXni5r7XT/g3NtNjgBeO5VaeIni/dr8QQ=
Subject key identifier: 79:E2:08:93:7D:55:68:92:31:9E:87:B5:34:F2:42:C7:AD:7C:BE:CA
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019D9DE3E28F83458AE2874E8F9FAFCCC44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 18C4
Signing time: Sat 18 Apr 2026 00:00:50 +0000
Manifest this update: Sat 18 Apr 2026 00:00:50 +0000
Manifest next update: Sun 19 Apr 2026 00:00:50 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: h40iB0B5K3s2vM7MKgDa4k6rPTjyoM9t1HZ2V/b1+oM=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:e2:8f:83:45:8a:e2:87:4e:8f:9f:af:cc:c4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Apr 18 00:00:50 2026 GMT
Not After : Apr 19 00:00:50 2026 GMT
Subject: CN=79e208937d556892319e87b534f242c7ad7cbeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:0d:b8:55:3c:eb:c9:95:d0:9b:b0:73:fc:
d2:13:28:2e:74:d2:2f:8f:85:46:de:20:33:95:60:
fb:2f:4a:b6:3a:c0:34:83:8c:98:e3:3b:e8:0b:ae:
90:93:c5:b3:e0:43:69:56:89:fe:00:f5:f7:2a:a3:
40:88:ab:7e:76:bd:55:3c:56:38:35:0d:9c:ad:11:
88:70:e1:20:31:54:3c:f2:31:5e:89:87:5d:39:bc:
93:c4:41:ac:8c:bc:fa:70:30:39:9e:65:a8:82:e4:
b1:65:6f:14:69:91:ad:ec:11:02:d5:72:31:4f:9f:
58:69:aa:23:6d:3a:44:dc:59:b9:c4:00:a6:a1:aa:
21:93:76:61:a9:e0:9a:9b:96:0b:f9:fd:8b:16:fe:
a9:1a:75:56:8a:43:61:ed:0a:da:1a:69:e1:b3:37:
8c:61:f1:40:e1:fa:84:ee:be:83:7e:a4:b6:46:59:
dd:7f:00:99:d3:5e:3e:a0:45:0e:f8:cf:22:91:06:
c4:4d:65:65:8a:8f:d0:78:84:96:52:8d:2b:1b:c3:
c5:07:cc:f8:39:95:3e:09:7e:36:c6:48:a9:1a:1a:
8a:62:7a:df:e4:a2:98:4e:9f:6e:52:0a:11:c4:b9:
5a:cb:63:e3:67:12:91:2d:2c:f5:95:ea:0a:67:85:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:08:93:7D:55:68:92:31:9E:87:B5:34:F2:42:C7:AD:7C:BE:CA
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ce:f6:38:9a:a1:f5:d6:40:dc:c6:23:b6:df:b3:0e:16:e9:
58:a6:0c:86:2a:90:a5:0b:70:28:dc:6b:93:76:f0:37:84:69:
82:29:1f:1b:d4:bd:ce:b3:d3:bc:06:a5:0c:16:d3:f2:d0:c7:
7d:14:47:c1:5a:ee:31:25:91:b2:d5:40:d0:ca:05:7b:84:53:
f4:f9:88:75:e0:c3:9d:72:1b:57:b0:4d:d6:59:d5:8b:db:f7:
96:be:be:fa:52:75:ad:14:20:6d:27:d8:22:e8:6a:e5:44:ff:
4a:bd:fe:0b:f1:2a:40:d9:6c:9b:80:00:28:ef:90:85:f6:61:
08:c4:3e:2b:17:ab:bc:aa:9a:60:de:1c:32:6d:e4:fc:01:ad:
3e:50:3c:8e:ea:7a:2b:f9:9d:4d:e1:de:09:37:82:88:02:e7:
95:5c:5b:86:db:17:1d:8b:e1:2b:b8:3a:28:fb:5e:b9:a1:a2:
0c:ba:4b:fb:11:1e:e1:06:f0:a8:0f:88:30:e0:2f:da:bb:f8:
84:ca:c9:98:c7:40:78:5a:16:6c:c4:92:55:6d:fc:ec:59:a5:
33:bb:9d:a1:92:27:91:3f:92:45:8e:bd:b6:aa:3b:8e:c7:36:
2b:9e:53:b3:de:79:d6:40:d1:29:bd:23:c3:15:44:26:d6:c0:
08:e1:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:01 2026 by rpki-client