
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File: mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier: MXeBYLGjnG5SIx+PEAQWn9mZSz7jxbaTQ2XKAJnfMLY=
Subject key identifier: F3:A0:29:A8:E5:E0:06:05:C0:A4:F5:A5:12:3F:73:9F:D8:41:C1:A5
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer: /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial: 019FA86206386C865B7E918AF62011B55B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number: B7
Signing time: Tue 28 Jul 2026 11:00:24 +0000
Manifest this update: Tue 28 Jul 2026 11:00:24 +0000
Manifest next update: Wed 29 Jul 2026 11:00:24 +0000
Files and hashes: 1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: vqtCgiYF4EAd28IO7/icViAjmUpBh9np4kgd/8jprRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:06:38:6c:86:5b:7e:91:8a:f6:20:11:b5:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
Validity
Not Before: Jul 28 11:00:24 2026 GMT
Not After : Jul 29 11:00:24 2026 GMT
Subject: CN=f3a029a8e5e00605c0a4f5a5123f739fd841c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:d8:9f:00:3a:b0:6d:6a:af:26:37:64:73:
e3:3c:fd:54:db:f1:b6:a8:0d:b3:27:39:42:da:36:
0a:48:50:98:f5:45:ba:df:53:10:ea:bd:11:76:f9:
34:88:55:00:63:34:66:da:47:87:26:0d:b4:a9:2a:
cf:04:f4:2b:c9:68:72:96:49:1b:b1:69:e1:78:88:
24:4e:93:5d:9d:83:d1:d4:f3:32:cb:25:39:d1:36:
46:55:de:80:5e:e3:4e:27:63:d0:63:30:ee:ae:25:
8e:40:1e:05:d0:88:cc:46:36:ce:23:3a:66:3e:be:
48:61:f3:5b:c9:5f:ba:55:c4:8e:df:7d:8f:d4:07:
05:22:e6:03:51:e0:7c:86:c8:8f:c9:76:4c:db:ab:
12:e4:01:f0:d6:ce:7c:fd:7c:f3:1d:70:18:30:9b:
a1:e4:9d:76:49:a6:61:7b:1b:80:ed:cb:32:b8:6a:
52:57:55:d5:f2:d0:04:87:c2:47:37:03:41:47:dd:
d7:4f:7d:fa:e1:60:dd:ed:fe:79:1d:cb:0e:b8:53:
d4:14:2f:27:a7:28:ae:5a:4a:fd:78:0b:39:27:5c:
82:85:7a:b5:39:d8:e5:be:6c:36:17:f8:c5:98:9a:
fa:11:6b:fa:67:ba:40:7b:88:e2:8a:17:eb:98:80:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:29:A8:E5:E0:06:05:C0:A4:F5:A5:12:3F:73:9F:D8:41:C1:A5
X509v3 Authority Key Identifier:
keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d9:60:d8:c6:d9:99:36:ca:fa:db:7c:d0:c4:a7:68:61:ed:
59:4f:fe:63:97:c5:f4:c8:d8:d4:62:af:e0:09:d8:d4:f4:f5:
88:3b:35:26:29:9c:3e:aa:d7:06:b6:58:d1:d2:2c:50:2b:ca:
48:93:d3:0f:b8:71:f1:9f:bd:b2:fa:bb:86:51:14:82:c1:4f:
6f:31:07:27:7f:ee:9a:9f:75:12:bc:c0:b3:1b:b3:72:b7:8f:
3a:0c:c0:3b:fa:8a:e4:94:7c:b8:6b:c8:ce:db:ce:2f:cc:17:
c1:da:42:55:9b:e7:c4:dc:d3:f2:16:ae:8f:10:17:fe:35:74:
13:d2:c2:e2:b1:67:0d:74:83:fc:59:be:c6:b4:71:77:fe:b8:
e8:0c:70:39:5f:b9:a6:3b:53:bd:5b:84:07:d8:da:c6:dc:62:
f3:ba:9c:25:b3:85:27:bc:e3:3a:31:77:82:96:a5:40:ca:5e:
e9:c8:b8:ef:45:b7:e7:bc:87:2c:ec:ee:98:53:58:53:2f:3b:
d1:2a:db:3f:08:7a:57:16:84:7a:b6:46:ce:d7:78:c9:4e:7b:
c6:dd:39:63:4a:d6:7a:73:ad:f0:8a:8f:c3:5f:b3:bb:c1:bd:
48:80:17:d4:63:05:ea:a8:9e:1a:cd:21:d6:90:7e:d6:b2:21:
3a:e2:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:32 2026 by rpki-client