Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: sbWV2lEhiSUH7XZ1/S804gQWv7/NskzeaJKwi61rX44=
Subject key identifier: 09:20:D3:88:38:74:EE:48:7A:40:09:56:D4:DE:4D:B3:20:3D:34:5C
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 01A137118A45B2CDB9C8D003FBD0CE01757C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 21:00:58 +0000
Manifest this update: Tue 13 Oct 2026 21:00:58 +0000
Manifest next update: Wed 14 Oct 2026 21:00:58 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: ch3e2khQV725aGf/0nY/MHbCIIzbjBlVcGyH1jwarDk=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:8a:45:b2:cd:b9:c8:d0:03:fb:d0:ce:01:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Oct 13 21:00:58 2026 GMT
Not After : Oct 14 21:00:58 2026 GMT
Subject: CN=0920d3883874ee487a400956d4de4db3203d345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:cb:63:05:72:69:b3:84:52:92:95:4c:cb:
30:e3:ac:4c:d5:3c:46:9a:e9:f2:6e:51:c4:67:f5:
af:cf:f1:e7:3a:4f:b1:78:93:49:49:fc:4b:b9:0b:
1c:00:14:09:f0:19:32:da:ab:db:53:f5:c8:dc:da:
85:19:28:bb:d1:78:bf:26:82:28:d4:20:e4:45:b6:
43:46:fc:06:7e:3a:aa:1e:51:44:29:75:80:b7:16:
20:e7:4a:45:4a:c1:dc:4d:92:7c:74:69:b7:b7:4b:
3d:22:59:72:b3:f0:99:99:7f:bf:0d:22:0d:d1:21:
71:8d:7b:ad:7b:36:86:d7:12:d4:99:aa:9f:f0:35:
5d:7e:1b:1c:29:fc:2b:1e:8a:06:33:7c:6f:01:9e:
ee:b6:cd:42:1e:1c:27:76:09:e0:56:56:14:69:93:
41:66:9b:2f:eb:b2:80:e1:b9:34:3f:aa:72:9d:82:
1c:39:4b:de:95:b4:b5:ce:66:42:76:13:62:ed:a1:
db:da:d3:fa:a6:cb:02:5b:68:be:f8:6b:2f:1d:05:
9b:76:05:f1:e9:8b:7d:7b:d8:6e:22:f2:d8:90:15:
7d:b0:16:15:f2:3e:52:64:a4:a5:49:98:b5:f0:59:
0e:57:bb:ff:63:42:c5:6b:ad:a0:74:99:97:51:e1:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:D3:88:38:74:EE:48:7A:40:09:56:D4:DE:4D:B3:20:3D:34:5C
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:35:7d:93:66:a0:e1:4d:b3:1c:46:d6:32:e7:fd:2b:bf:a2:
58:85:9c:cb:01:fb:7e:02:7d:ea:e0:d8:d8:a4:82:a3:e3:9a:
61:4a:d8:2b:5a:32:08:f8:1e:2f:11:f4:63:ae:c3:d2:86:f8:
81:ba:f6:60:32:87:c7:e3:3c:3a:6d:8a:fa:1f:ea:88:4e:12:
41:cb:5d:42:db:2a:e6:c9:4e:79:06:1e:20:d2:5b:90:b5:db:
76:c2:3c:89:36:4e:84:ed:aa:cb:33:60:0f:3c:ce:87:dc:9a:
ef:ee:27:50:2a:27:be:0c:b5:ed:db:25:6c:2c:d3:e3:fd:0c:
0c:52:cf:78:aa:32:1a:c4:fb:46:1c:e2:be:b6:1d:6e:8a:a9:
9a:46:b9:37:7d:35:f2:ad:c5:cd:ab:26:ea:58:64:96:7e:11:
90:f1:54:3d:da:ae:1b:4e:e0:4a:c3:80:ef:7c:a6:d7:45:d9:
cb:d2:71:b6:79:fb:3b:40:be:fe:4f:07:48:b3:7d:fb:2a:97:
d8:6e:4e:0d:fc:8c:46:28:be:9b:f0:2e:4e:67:c0:76:52:63:
5a:68:b3:fa:b4:cf:7f:18:d6:1e:5a:1a:0f:6c:47:6c:29:90:
61:74:a1:17:45:25:e5:5e:8b:c3:84:8a:6b:65:e2:7f:ac:2c:
71:d9:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:35:49 2026 by rpki-client