Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: lAOl9PrH9aUSrqrIPrRRApMuq26J5BReeFGpCjCRrTo=
Subject key identifier: 8F:8B:F8:5A:33:3B:AA:0A:20:1E:CB:57:03:41:84:76:21:67:B4:4A
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019CAC7E455924716C73D29D6D46ADE544CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:22 +0000
Manifest this update: Mon 02 Mar 2026 03:01:22 +0000
Manifest next update: Tue 03 Mar 2026 03:01:22 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: NOh/1ZcYC82tLS6IGuHMoGTgUYADvlZ6GfXZ81XJMHI=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:45:59:24:71:6c:73:d2:9d:6d:46:ad:e5:44:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Mar 2 03:01:22 2026 GMT
Not After : Mar 3 03:01:22 2026 GMT
Subject: CN=8f8bf85a333baa0a201ecb57034184762167b44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:a5:37:a8:e7:a6:8a:e2:da:e8:df:34:ae:
e3:03:9e:75:31:df:24:3a:d8:00:8d:0c:81:3f:d3:
7a:de:6d:ba:32:c1:c9:85:58:5c:ea:d8:0c:33:99:
d3:1b:0b:e8:92:cd:fa:1c:6c:58:32:0d:7a:7f:fa:
0b:be:45:20:42:33:f4:19:41:90:33:30:5e:89:1e:
5e:6c:c3:32:0d:94:a7:5c:50:14:c5:11:e4:91:5f:
37:7a:84:d5:a4:35:c4:a7:d9:26:c5:91:a2:92:b6:
ef:39:17:0c:97:46:02:45:1d:43:bd:94:97:6b:30:
fb:25:dd:52:e9:d0:9f:02:a1:5e:4f:38:ff:4a:53:
88:c5:55:9f:9e:82:6c:d4:48:c3:1c:88:07:76:97:
fd:37:7a:d2:20:72:bb:c3:17:b1:30:06:d3:d1:5b:
9a:16:d5:b0:63:6f:d8:13:3c:e4:a4:b5:3a:bc:ac:
eb:68:a5:02:be:ac:7b:23:9d:67:4f:f5:c6:ff:c6:
41:a7:a6:53:00:71:e9:10:96:2c:7f:8d:ba:13:5c:
aa:91:b1:e0:3b:e8:e8:eb:29:38:dc:90:32:ef:0e:
11:b3:37:5d:aa:d4:6f:94:63:69:9c:fe:1a:c5:11:
0a:1c:bf:39:a1:cb:af:5e:31:e0:7f:99:59:23:c4:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:F8:5A:33:3B:AA:0A:20:1E:CB:57:03:41:84:76:21:67:B4:4A
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:f4:6a:01:df:4e:d5:0f:18:a2:b7:e6:d4:65:ce:6b:81:
1f:f0:86:00:03:7f:4b:ef:28:9b:4d:d7:72:a5:d9:3e:a5:6e:
3f:a5:ba:e9:45:01:c1:31:c5:44:77:18:09:70:53:49:6b:18:
75:ab:c3:ff:55:00:8c:b2:06:15:01:29:ce:af:7c:1f:17:18:
e2:3f:06:eb:66:37:6f:3e:cc:e4:ff:4b:26:cd:70:7d:87:41:
56:55:80:ba:4e:19:f1:f3:0e:2b:5c:bb:7b:f3:14:64:98:05:
6e:a5:0c:71:94:97:6b:58:2f:ad:77:12:8d:a2:5e:56:14:88:
8e:ba:99:28:43:84:d8:7e:4d:98:5d:33:eb:78:a2:82:b0:46:
7f:43:47:56:6f:b0:a8:5b:51:f4:4c:f6:67:b6:2c:ef:6f:25:
ae:54:d3:a7:f6:84:53:55:26:6e:a6:83:6c:ea:77:3d:81:95:
ed:87:39:81:65:50:f1:36:c7:84:98:72:88:3c:c0:18:53:ef:
ed:26:19:c4:21:6c:9e:aa:53:4e:ba:7a:9e:fa:a2:12:6c:81:
49:46:bd:10:9f:04:94:dd:94:a8:13:a9:5c:46:1c:b4:5f:60:
30:21:5d:d3:cc:b7:65:35:10:96:69:c7:69:f8:b1:71:95:01:
5d:75:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:42 2026 by rpki-client