Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: PtmFfa3j1cKzuLbAg/pJHPv62q4RJMENDOREl/cx4Dg=
Subject key identifier: 4F:9C:4E:FF:0B:76:E5:98:A9:E2:65:13:F3:A9:BB:31:20:33:E6:99
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 019DA30A4063660E0D2DD1B4879E9C8FC73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0E8C
Signing time: Sun 19 Apr 2026 00:00:51 +0000
Manifest this update: Sun 19 Apr 2026 00:00:51 +0000
Manifest next update: Mon 20 Apr 2026 00:00:51 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: 8lPyq2ZHI4HO6ywGoltf04d0hI7v0wUbebEPP387V5Q=)
2: nxHN94erHa9XYS8Sqo0AW7u75gg.roa (hash: bvgVC0oBjDczyWwpa0vlSgIaguhY3On+SlQmXNJvC6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:40:63:66:0e:0d:2d:d1:b4:87:9e:9c:8f:c7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Apr 19 00:00:51 2026 GMT
Not After : Apr 20 00:00:51 2026 GMT
Subject: CN=4f9c4eff0b76e598a9e26513f3a9bb312033e699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:56:7f:44:75:d2:a1:35:7a:1b:f8:0c:d2:
21:f9:c3:8e:5c:6b:2e:a5:1b:bf:03:ac:9d:24:4e:
cd:34:a3:34:b3:c2:77:da:df:2a:8f:86:ad:25:2f:
1b:10:97:4a:8c:7d:b5:04:b4:44:78:91:9e:6c:d9:
e3:0b:4b:44:ab:4c:0e:13:e1:28:92:1d:c9:52:c7:
97:c8:89:04:e5:4c:53:08:be:ea:5d:60:1d:1c:43:
d9:23:7a:90:54:ea:3d:ed:10:fe:eb:4d:01:99:a5:
e5:e3:f7:08:ba:89:ff:b9:ba:d9:21:d4:2e:1d:06:
2a:59:55:cc:4f:83:b0:af:83:c3:16:ed:25:dc:d2:
18:90:e8:13:bf:b9:6d:ea:4c:9e:c9:dd:f7:19:04:
6c:d9:3a:44:50:e1:60:a4:80:d6:96:15:65:03:26:
3a:66:31:7d:bd:90:14:36:77:25:ec:ea:6b:a3:9b:
d4:15:dc:68:d3:5c:36:fb:a5:06:50:8e:ed:d3:a3:
40:9c:a2:77:7e:8c:97:a9:0c:66:30:5a:12:1c:b1:
a5:67:c1:52:59:17:5d:9d:76:6d:59:64:a3:c4:bf:
2f:96:36:2a:95:5f:cb:fa:1f:db:b8:32:a7:9a:b8:
0a:e7:09:d4:02:b7:62:cc:87:b3:b5:a6:34:ee:ab:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:4E:FF:0B:76:E5:98:A9:E2:65:13:F3:A9:BB:31:20:33:E6:99
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:05:0a:ae:9c:73:ee:0b:14:ef:6a:94:32:54:b3:5d:cb:ab:
1e:f5:dd:e3:9d:e6:d1:e8:a4:07:79:dc:53:a1:8c:83:48:fc:
93:66:ce:3b:7f:f4:ce:cd:27:60:a6:1e:c7:63:c1:67:3b:7d:
ff:29:63:08:48:59:ac:a9:8a:dd:c2:51:b2:76:f4:48:6f:e9:
9c:30:7b:87:3c:86:62:cc:54:c7:cd:46:57:1a:e6:8e:83:7a:
67:fc:02:d4:0a:ae:eb:25:90:17:89:fa:4a:1f:ba:8c:fe:e6:
15:dc:ad:fc:d2:b7:4d:93:23:18:48:33:0c:8f:af:64:44:32:
a3:de:41:ed:44:d6:18:7b:60:b9:dd:84:8e:05:82:46:b4:12:
3b:e4:0c:b0:b6:e7:b9:77:2d:56:d4:82:49:0b:e3:59:4c:ca:
9c:59:7d:73:ef:33:25:f8:12:a0:9e:64:32:12:22:18:1f:38:
26:2f:fc:88:d9:9a:5d:28:58:83:1c:f8:5f:89:3c:c8:ff:81:
a9:6a:3e:a5:1d:92:00:0e:05:f4:c9:b8:0e:3a:e2:56:b4:df:
45:ed:5a:91:a8:54:d1:0c:d2:e9:4e:93:53:61:48:d4:45:04:
fc:41:58:c7:98:bd:5d:de:3a:3c:b0:8c:05:2d:53:b4:b6:89:
82:cb:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:01:46 2026 by rpki-client