Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
File: MklHwK7O_of525bltFvrEK65h6Y.mft (raw, json)
Hash identifier: Pb+w9OQy8vy67upC2HVFwQx46MnPus3d34lbt68b27M=
Subject key identifier: F4:18:FF:0E:A5:9E:45:BB:19:8C:01:D7:6F:EB:4C:7E:10:A1:E0:60
Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Certificate serial: 019D992B77FF5974B401E24A90D9FE9DE2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
Manifest number: 0DD6
Signing time: Fri 17 Apr 2026 02:00:55 +0000
Manifest this update: Fri 17 Apr 2026 02:00:55 +0000
Manifest next update: Sat 18 Apr 2026 02:00:55 +0000
Files and hashes: 1: MklHwK7O_of525bltFvrEK65h6Y.crl (hash: d14qOpcjg3nQsnm+OvUyuka9HWBLFRgztNy4eVqOua8=)
2: fYsmeN-jCqvumQk1ANzN0bj9fD0.roa (hash: HXWJlZSBJsNOWJXHSVdFO/BZWcCQBKxp4a6Uo9maQhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:77:ff:59:74:b4:01:e2:4a:90:d9:fe:9d:e2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Validity
Not Before: Apr 17 02:00:55 2026 GMT
Not After : Apr 18 02:00:55 2026 GMT
Subject: CN=f418ff0ea59e45bb198c01d76feb4c7e10a1e060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:c4:52:a9:32:c1:96:8f:52:e9:60:06:13:
33:ca:16:cf:a3:22:f0:8c:3c:23:ea:b1:d8:fa:44:
b0:28:c1:47:52:cc:c1:89:96:e9:d3:ea:ae:3f:0b:
54:89:21:3c:56:95:71:a5:fd:0a:50:b7:91:97:c3:
94:38:0e:4f:b3:b8:ab:32:6d:0f:98:01:db:b3:6d:
3b:79:6f:d9:a9:2f:9c:33:f2:33:d5:1f:4c:ac:5b:
4d:a4:90:d0:f3:15:b4:12:42:93:14:85:4d:30:88:
c5:cf:3a:70:b2:86:38:c9:cf:ef:7b:00:5c:04:d3:
20:e7:94:b4:6c:21:2f:db:00:f3:50:7f:75:d7:41:
ec:28:6c:8b:2d:99:c7:a4:3c:4c:9e:7a:50:52:cd:
54:96:97:66:65:23:01:fc:80:ba:0b:61:f4:15:f6:
38:49:16:10:86:97:6a:b1:cc:18:82:aa:a1:2d:99:
a3:35:12:e2:a9:5d:ba:07:85:c7:98:e4:08:64:8f:
00:d8:37:fc:1d:ed:71:f5:9d:e9:ac:01:a4:f4:0d:
1a:da:90:69:ea:76:b4:e8:e5:72:95:47:cf:5f:71:
ed:08:36:0c:cb:29:8b:7b:39:4d:c0:b4:7e:93:da:
77:20:1d:e6:93:1b:8e:c6:73:e7:a2:52:96:54:5d:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:FF:0E:A5:9E:45:BB:19:8C:01:D7:6F:EB:4C:7E:10:A1:E0:60
X509v3 Authority Key Identifier:
keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:aa:31:7e:76:1d:07:87:64:a6:14:6d:9c:99:1b:81:34:
eb:a9:78:92:7f:a0:d4:cf:e3:1e:e1:80:e9:33:a5:ad:94:85:
96:69:cf:3d:f8:95:82:fd:fa:69:ee:31:8c:f5:f1:d7:45:fb:
97:6b:8e:a5:4a:b1:e2:fc:7d:a5:20:9d:47:7f:db:83:94:ba:
9c:54:24:d2:87:b5:2d:cf:15:77:16:d5:79:3a:c3:d5:f1:eb:
d6:a5:8d:30:5c:95:74:1c:5f:a9:7f:9a:99:6e:46:fd:41:41:
e3:65:e1:7e:96:20:f8:1e:ad:8f:ba:16:1c:33:a0:ed:54:33:
1b:2e:9b:ee:7c:1f:1d:e1:07:1b:a1:82:e8:b7:7a:63:68:d2:
18:8f:85:6e:a6:a1:31:14:89:86:9b:88:68:a5:cf:94:f5:45:
f9:07:03:81:04:27:86:75:aa:2c:e3:3d:10:92:bf:21:62:74:
b1:47:23:66:44:63:a3:fb:52:24:03:1b:27:f7:ab:75:ea:92:
e3:e6:72:30:ff:69:5b:04:6f:bf:af:e3:3b:0c:2d:f5:a3:46:
1e:8e:3e:5a:51:67:c3:07:c8:46:6e:bb:fd:c8:bc:d1:38:71:
8c:d6:a5:67:78:e6:40:c6:b3:8c:b2:89:44:5c:84:35:15:04:
ac:06:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:27 2026 by rpki-client