Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File: mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier: K6k5EsRaoTkfDL3ktVkjrmlOdAjq5P0t4Twoq9T/IE4=
Subject key identifier: F9:EC:A4:F5:5D:28:18:8C:FE:1C:CF:A5:54:E6:18:94:0A:23:5C:34
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer: /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial: 01A0BE79CEBC6D35A0923B776000C4D8ABDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number: 0147
Signing time: Sun 20 Sep 2026 11:00:48 +0000
Manifest this update: Sun 20 Sep 2026 11:00:48 +0000
Manifest next update: Mon 21 Sep 2026 11:00:48 +0000
Files and hashes: 1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: eI/+qxhBj7KtbCoWOEiZbw6/06tAkdDokQmtkq4lY7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:ce:bc:6d:35:a0:92:3b:77:60:00:c4:d8:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
Validity
Not Before: Sep 20 11:00:48 2026 GMT
Not After : Sep 21 11:00:48 2026 GMT
Subject: CN=f9eca4f55d28188cfe1ccfa554e618940a235c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:bf:25:0d:f4:78:f0:e7:d0:3b:6e:6b:5f:
21:ae:9d:24:d1:7b:ac:68:9d:02:24:af:43:1a:7a:
fd:0a:cb:e6:e9:db:a7:a9:49:d8:96:87:2a:43:4f:
70:b1:97:02:0b:5c:08:59:fd:9c:b3:99:21:6e:22:
82:5d:af:b8:96:90:76:60:5b:a1:97:88:d8:9f:8b:
78:5f:12:f5:ef:71:31:d5:fc:b3:af:01:69:76:23:
a2:3b:0b:d8:84:fc:9a:8c:a0:db:25:00:e3:13:9d:
36:23:98:51:6c:7f:b5:7f:ad:28:75:18:df:4c:c3:
bc:5f:22:dd:9d:d3:0f:b3:ec:59:19:e8:77:54:5b:
f3:46:68:b7:12:65:87:cf:4b:60:87:20:4d:ad:55:
0b:d5:c6:ac:50:f0:72:d9:fd:a9:28:dd:aa:68:08:
a2:60:e6:53:88:89:14:ea:31:6e:60:5f:a9:a7:fa:
8e:c5:ed:c4:35:8d:d6:5b:c6:34:7a:ec:17:21:47:
61:bf:a8:49:3c:cb:3b:93:06:f8:3d:1d:1b:76:ea:
29:c9:5b:77:29:6b:d5:6c:0f:23:f1:c9:32:7d:e7:
97:43:37:47:21:b7:50:fb:6a:67:17:de:f6:2e:b2:
df:de:68:2d:b6:69:9c:f6:d0:4f:5c:37:c4:84:05:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EC:A4:F5:5D:28:18:8C:FE:1C:CF:A5:54:E6:18:94:0A:23:5C:34
X509v3 Authority Key Identifier:
keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c6:2a:aa:44:d0:03:1e:ea:bd:5a:06:f0:ae:19:1f:78:43:
28:be:52:05:21:d0:91:21:06:61:ac:38:9e:1d:94:33:37:de:
ad:7e:c9:55:69:5a:6c:09:1f:9a:b0:06:f7:34:8a:cf:7b:49:
8c:98:ab:6b:d7:ad:ea:23:d1:de:f1:05:d9:f5:21:ed:0d:41:
78:16:42:94:cb:d5:c9:47:4e:ce:09:c0:8e:e5:89:1b:32:fa:
c7:4f:eb:18:7e:d3:7d:b5:6e:ba:5e:e3:b2:9a:6c:fb:75:5e:
02:76:16:d9:37:97:c5:fa:c0:c4:d0:64:79:e8:91:7b:06:14:
3b:11:03:3e:9b:3d:65:d4:6a:64:54:de:5f:2c:e0:c0:a6:0b:
d7:e7:3b:8d:2d:40:29:a8:6f:85:c4:bc:bc:48:80:23:56:46:
67:90:10:5b:58:e7:81:82:61:eb:0d:f6:f4:cf:6d:be:61:da:
00:d1:32:0f:d6:72:43:e7:b8:b6:4e:20:b2:b6:e6:ad:ed:f8:
4a:7e:89:1c:f6:2a:01:5e:de:4c:8c:73:4e:4f:5c:cd:51:2d:
60:64:24:cb:dd:e5:f2:79:1c:67:57:f1:bc:c5:4b:cb:85:97:
cf:3c:41:f5:46:2f:57:15:28:13:6c:6d:98:4c:34:90:77:62:
0a:3f:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:06:02 2026 by rpki-client