Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: B+GyY9SrNKINIbiMsJf+9B2//4sDUCQb3CLR7bGPHlY=
Subject key identifier: CF:1A:B7:3F:D2:CB:B2:27:79:18:8C:25:1C:CC:C7:AC:A0:10:E7:5E
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019D9774AC567A1B1B863924B98E4CA09322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 12A2
Signing time: Thu 16 Apr 2026 18:01:39 +0000
Manifest this update: Thu 16 Apr 2026 18:01:39 +0000
Manifest next update: Fri 17 Apr 2026 18:01:39 +0000
Files and hashes: 1: KNVzSibwcIeJsoSsffQEDCnxWf0.asa (hash: y8bkznZSy/A3ZDayRMz8nCgtieLCBzH6L8q9ZF7Ujzk=)
2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: RRvrPgTM+6KSoubY8RZ6jZ2vDLcK6zkYHtcCnMGoZ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:ac:56:7a:1b:1b:86:39:24:b9:8e:4c:a0:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Apr 16 18:01:39 2026 GMT
Not After : Apr 17 18:01:39 2026 GMT
Subject: CN=cf1ab73fd2cbb22779188c251cccc7aca010e75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:79:48:92:5c:3c:2e:3f:8c:b3:1b:30:47:
2c:a8:d9:6d:66:86:f1:db:48:c5:fe:f2:fd:94:e6:
30:c2:35:f3:6e:ad:b6:f5:e8:9d:e4:1b:fe:25:d5:
34:8e:8a:e1:f6:7b:b6:08:e3:48:97:df:2d:87:ac:
95:fe:cb:44:b7:f4:e8:da:a5:60:23:03:14:33:09:
08:10:9d:fa:04:d2:61:9a:ba:1e:f3:9b:c4:4a:9f:
df:c7:5e:f9:15:14:c3:34:bd:9a:ba:69:93:79:56:
9c:0f:91:8f:2f:99:f9:f4:74:df:e0:42:3d:bd:1b:
58:e7:36:22:b9:36:37:66:ad:b0:7f:04:1f:60:9f:
21:c7:00:d1:45:f0:20:5b:30:52:38:ab:51:2f:83:
70:df:30:17:ff:fb:30:26:0f:59:99:6f:fa:38:f3:
41:12:b4:4c:2e:bc:fe:78:8d:50:d0:6b:85:92:c4:
70:78:21:bb:dc:8c:a9:68:09:43:01:97:00:af:b3:
a3:02:fe:e5:91:4b:0d:8e:84:a0:e1:52:b6:53:e1:
43:c0:e4:07:e1:2a:ef:c0:9b:05:71:c5:75:af:4f:
ba:b0:35:47:f9:2b:c6:c7:24:61:b0:ff:51:3b:8f:
41:22:e7:6c:dc:d1:ee:15:ca:a8:54:cc:b1:15:97:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:B7:3F:D2:CB:B2:27:79:18:8C:25:1C:CC:C7:AC:A0:10:E7:5E
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f7:a9:6b:21:7d:aa:52:58:e0:61:1b:f3:48:b6:e9:d4:af:
6e:e4:4d:e8:d1:80:9c:28:b0:cb:c4:00:1c:5a:8f:1e:3f:06:
53:db:40:84:fd:6b:0f:35:00:7f:20:9a:ee:69:85:3a:da:65:
43:fb:c6:bc:5a:12:3f:f4:18:19:70:11:aa:03:a0:92:0e:5d:
8c:70:10:14:f7:3a:aa:85:4d:29:a3:9c:ef:c5:d4:71:0b:59:
0a:d7:e9:cb:0a:fa:78:25:ce:69:69:05:36:dd:da:06:83:e0:
1e:f7:b1:3a:d1:84:f6:08:56:dc:1c:d3:98:01:8e:41:c6:69:
84:c8:eb:be:cf:92:6e:ad:95:d8:7a:83:ff:b0:82:42:ed:0d:
12:58:fe:49:f0:b8:1a:91:e7:ad:69:11:6c:05:8e:2c:f3:2b:
4e:0c:27:bf:fa:ab:18:19:eb:6c:cb:22:25:2f:15:d3:c5:d2:
b5:da:64:7d:51:b8:91:71:53:95:0c:78:77:c4:8a:ef:13:28:
75:d5:4b:39:90:12:93:ab:dd:71:ee:0d:fa:a9:55:a7:56:b8:
d0:16:cf:79:b3:6c:76:ed:73:db:c5:f3:0a:a5:32:b1:4c:d4:
d9:d4:ac:15:07:9f:c9:a5:14:1e:cf:9b:31:77:9c:10:a7:d4:
6b:d6:03:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:51 2026 by rpki-client