Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: Z1tCaGRk48tDMgccnuy+7qtsK3O4xqbLtVSwzFbLEmQ=
Subject key identifier: 6B:33:0D:0D:D0:AB:B1:8E:3C:AD:82:1D:8D:B3:9F:51:F3:61:05:64
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019D9BF5C80CC307BDDDC300B615833CDD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 15:01:09 +0000
Manifest this update: Fri 17 Apr 2026 15:01:09 +0000
Manifest next update: Sat 18 Apr 2026 15:01:09 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: YuJbo43V79X/kyRgfCqrnixqJKkT5kbTmzgEbNtkmCQ=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:c8:0c:c3:07:bd:dd:c3:00:b6:15:83:3c:dd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Apr 17 15:01:09 2026 GMT
Not After : Apr 18 15:01:09 2026 GMT
Subject: CN=6b330d0dd0abb18e3cad821d8db39f51f3610564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:e4:00:58:c5:5d:00:f8:ce:8c:59:1f:dc:
e6:ff:ba:0e:58:8c:25:f6:e1:95:cc:dd:83:79:f1:
12:4b:22:98:4d:08:f3:ab:b6:cd:4b:76:7f:64:56:
b1:24:6f:e5:cf:1a:f2:b0:ac:89:1f:80:25:a0:0a:
99:49:61:05:40:dc:03:ad:a8:e4:83:79:bd:16:77:
47:67:39:5e:85:20:57:4e:4a:83:09:93:ca:7d:87:
d1:42:5f:ec:c1:ac:2b:5e:b6:1d:52:9a:f4:34:e6:
99:f5:69:28:32:85:f4:3a:ae:e2:8d:33:07:73:8d:
e8:16:db:e7:00:47:90:0d:32:68:ad:66:27:01:a9:
0d:ca:f3:62:ad:47:db:a7:1e:4c:1a:b0:bc:ec:39:
1f:ce:f7:89:b0:3b:65:63:1e:91:d7:fe:d3:47:2a:
b3:8b:a2:0f:e0:61:6d:be:2d:2c:82:12:8d:57:13:
e9:e0:8b:39:4f:f7:8a:a5:13:51:e1:77:de:e1:9a:
11:dd:bd:93:8c:c5:b7:c8:8d:20:c9:f5:3f:fd:a2:
41:d8:c2:b5:5c:10:49:48:0d:e1:ae:f7:aa:50:b9:
87:3b:5e:43:f6:4e:9e:2a:a3:48:cd:12:63:a4:7c:
ab:74:98:31:09:a0:1d:76:7d:f8:48:82:d1:70:9c:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:0D:0D:D0:AB:B1:8E:3C:AD:82:1D:8D:B3:9F:51:F3:61:05:64
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:16:19:28:4e:e8:20:a9:0b:6a:a6:85:0e:8c:34:e0:2f:4c:
72:74:ab:a4:af:be:61:89:42:3c:e4:49:4f:2f:c0:b1:f8:cc:
fa:1c:91:3a:8b:7f:0e:0e:ad:b3:cf:e1:41:6c:ad:2f:c5:fd:
40:99:7d:bd:6a:54:3e:ea:79:b3:89:0b:a9:2f:8d:79:c6:70:
91:06:88:2e:78:09:2e:a7:b5:09:bc:20:6a:07:02:aa:7b:34:
f1:9c:b7:1a:12:e9:79:e6:66:4a:b1:6a:57:a2:f9:9e:53:50:
d5:b3:8a:31:ea:cf:e6:88:4d:ad:de:98:19:b2:1f:52:0d:0b:
5a:08:1c:00:c2:04:4c:36:a5:cf:20:f7:3f:85:5f:4c:b9:7b:
27:db:fe:10:03:84:ae:d1:2f:cf:b1:1c:77:73:a6:06:d7:af:
b4:f2:ad:3a:45:c8:ed:21:d2:71:93:a6:28:8f:fe:70:d6:f7:
b5:5e:7f:23:13:80:da:af:8d:f2:b2:05:47:5d:9b:96:8c:f9:
a2:78:57:7e:27:82:50:87:9a:a6:8a:74:5d:89:ae:3a:56:08:
1d:e8:fe:71:7b:8d:a5:cf:51:28:65:e4:e5:27:19:06:32:e0:
40:00:f9:81:7a:71:81:2d:9f:29:64:0d:3d:35:35:7e:18:4e:
92:9f:d8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:09 2026 by rpki-client