Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: mtgOowwV0k63nW4oMZHieC+S5iCbp4zxfD7FssfzAbM=
Subject key identifier: A0:2B:A9:AB:90:FF:FC:B9:A6:C4:A9:22:2D:39:3D:5D:98:09:43:C9
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019EBEED62A4D471EF4C5B0B09E664DF9A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 133B
Signing time: Sat 13 Jun 2026 03:01:28 +0000
Manifest this update: Sat 13 Jun 2026 03:01:28 +0000
Manifest next update: Sun 14 Jun 2026 03:01:28 +0000
Files and hashes: 1: KNVzSibwcIeJsoSsffQEDCnxWf0.asa (hash: y8bkznZSy/A3ZDayRMz8nCgtieLCBzH6L8q9ZF7Ujzk=)
2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: SaiXMxj1njo5/0t4ZqXEvywYU1Es31aq9c34XhIiW8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:62:a4:d4:71:ef:4c:5b:0b:09:e6:64:df:9a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Jun 13 03:01:28 2026 GMT
Not After : Jun 14 03:01:28 2026 GMT
Subject: CN=a02ba9ab90fffcb9a6c4a9222d393d5d980943c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:3d:65:65:ec:6f:16:cc:a4:d9:0f:29:39:
ca:27:87:c8:80:d0:bc:7f:ef:68:be:88:34:9f:65:
ac:a4:43:12:88:61:10:47:5c:29:59:06:e9:6a:ab:
b2:14:89:fb:89:93:d8:07:3d:60:89:20:2f:ec:84:
3f:50:1b:58:1d:bb:d3:25:72:4d:54:3f:15:53:41:
bd:2f:ab:c9:ba:cf:3f:79:da:db:2e:4c:7a:9a:fb:
c8:3d:0f:dd:7b:0d:fe:bb:b8:d9:ad:53:9a:e4:65:
ac:a8:af:ea:59:81:8d:87:e3:f8:aa:64:b9:62:df:
ae:2e:fa:71:8f:e4:cf:77:e4:26:46:3d:46:e7:c4:
5e:9c:c1:84:38:7c:fe:48:85:17:22:2d:b1:82:c0:
0a:9c:a2:43:bd:96:4c:90:a3:8d:09:54:ce:24:19:
ec:27:b3:95:ce:33:24:6e:e9:b9:04:ef:3a:d1:29:
61:a0:6e:4c:31:3a:0b:d0:9c:2e:11:fc:52:74:61:
88:6e:0b:d6:c3:47:88:63:5d:17:a2:90:78:cf:34:
0b:2a:4c:fb:8d:2f:cb:17:03:23:39:d4:c1:86:aa:
84:56:86:99:96:6e:df:fd:51:2d:e3:e4:c3:bf:12:
8a:79:ab:e9:4c:ec:46:bc:47:e3:54:2f:b5:12:9a:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:A9:AB:90:FF:FC:B9:A6:C4:A9:22:2D:39:3D:5D:98:09:43:C9
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:98:65:72:70:c7:71:76:67:73:fa:0c:7a:3d:81:0a:58:2f:
1e:ed:67:2b:4a:f9:cb:26:51:fa:e6:03:96:d4:05:b9:12:7c:
15:f3:2a:1e:6d:37:d7:81:5f:0b:31:57:ff:61:e5:81:a0:72:
c6:12:bf:a3:d8:29:cc:11:dc:1f:f7:a9:91:c9:e8:9b:61:20:
aa:d3:e0:55:bf:04:47:71:8c:c9:68:4a:38:39:54:09:c0:e4:
7a:bd:77:44:e5:46:0a:7b:6d:08:7b:65:15:2c:03:59:6d:58:
7b:5a:19:9a:8f:b0:c1:af:d6:82:20:de:f1:d8:55:60:8c:4a:
78:11:0e:9e:45:5c:8d:8e:17:2a:3c:b1:6a:75:da:be:97:ae:
0e:c3:87:ab:9f:d7:23:4f:45:38:c3:cc:61:64:6f:7e:b2:5a:
f9:0e:c5:95:a8:7e:7f:35:f3:02:90:6e:ad:b6:c3:85:16:d7:
1b:f3:ac:02:c1:4b:77:b3:29:25:88:86:2a:aa:3b:f8:21:ac:
0f:aa:99:6e:57:ac:7c:55:2a:41:1b:8f:a6:df:aa:9e:8c:fd:
0f:0d:7e:3e:45:47:a5:da:c6:31:84:7c:c8:5a:d6:94:97:df:
39:d9:50:e4:37:6d:7c:e8:91:79:dc:c5:ff:e9:b5:62:af:b6:
ee:00:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:42 2026 by rpki-client