Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: TNHg69uVC/5i+XELSwCPMLrP3owS/5nXkr/xwbBky3c=
Subject key identifier: F8:46:17:17:14:2B:0C:BE:2E:1D:3E:76:10:C8:65:6F:0F:96:3B:B7
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019FAC0873B156CAD773F29CC68AD3403051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 04:01:02 +0000
Manifest this update: Wed 29 Jul 2026 04:01:02 +0000
Manifest next update: Thu 30 Jul 2026 04:01:02 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: VV+obVnOCrxzam24mjB6Vm5cSCAw41SXQeP0eeKMgHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:73:b1:56:ca:d7:73:f2:9c:c6:8a:d3:40:30:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Jul 29 04:01:02 2026 GMT
Not After : Jul 30 04:01:02 2026 GMT
Subject: CN=f8461717142b0cbe2e1d3e7610c8656f0f963bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:2b:0d:77:fa:da:57:84:90:4b:21:a4:51:
8e:9a:92:55:4a:08:f4:4d:d4:44:22:b6:36:ea:ec:
38:87:3b:93:29:7a:2a:5f:4b:45:68:cd:e1:ed:e9:
cc:30:5b:19:eb:61:6b:aa:bc:57:58:ce:bb:54:a2:
1f:00:7a:c1:01:2b:a0:1a:cb:08:2c:48:42:8e:a2:
7b:8f:d0:ba:5a:f8:ef:f5:55:79:13:5d:19:a7:7e:
f5:d7:93:f9:df:db:0b:56:ee:fd:3d:8d:ff:dc:22:
d1:63:b5:be:66:2c:81:1c:8c:b2:8d:54:ca:3a:e9:
cc:8d:e4:99:d7:85:c8:f5:3d:73:c9:7b:ef:a1:9f:
06:28:46:bd:ae:9e:b5:d4:8c:cc:57:20:84:83:bf:
89:f7:14:22:5c:d5:f1:d7:56:81:4b:7e:f0:51:3a:
e0:0c:17:7a:d2:c7:e5:14:30:47:1a:25:46:0a:02:
63:d5:eb:48:db:33:e2:3b:61:a7:0d:a2:17:72:eb:
04:fe:00:2e:81:98:c0:c4:fc:cc:9d:b8:3d:08:7d:
69:47:8e:dd:ae:05:99:1b:a5:e0:c1:1b:da:de:1a:
e1:33:a1:1b:8b:ac:de:18:0d:67:51:ef:c5:80:6e:
7b:73:99:a1:5b:c9:0c:07:ef:50:76:f7:cb:a3:99:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:17:17:14:2B:0C:BE:2E:1D:3E:76:10:C8:65:6F:0F:96:3B:B7
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:14:e1:7c:5a:a3:77:d5:b6:a9:75:0b:89:9d:3b:21:2e:c8:
a8:9f:1d:6a:0f:44:83:af:ad:13:b6:ed:a3:fd:6f:a6:08:33:
0a:a9:d3:55:a8:61:7f:3f:13:25:b4:0f:ba:c8:5a:be:07:03:
a3:0b:86:43:ba:85:20:0c:7a:6b:9b:7d:ed:f5:36:a3:ba:f4:
dc:3a:9b:9c:90:69:cd:cd:cc:2d:80:cf:bc:8e:dd:2f:0b:d8:
a7:94:f1:77:f7:58:ef:38:f1:16:1f:00:9b:22:42:07:c6:81:
6f:92:90:51:a9:3c:31:84:0a:84:77:7a:23:6d:cd:a2:a8:83:
82:51:26:d7:e4:b8:6e:65:17:3b:12:68:a4:9d:3a:c0:ee:0a:
55:26:f9:0a:7a:40:83:36:5d:a9:7c:b1:06:8d:c0:8e:fd:b1:
a3:7e:1f:28:a4:b0:b6:95:7d:f7:19:15:f3:b1:19:90:99:58:
cf:5c:b1:37:fd:ef:8b:ef:e9:bd:ea:1e:62:af:a4:6a:25:4a:
c9:6b:20:4c:08:7b:ee:90:64:b6:7d:71:b2:94:1c:cf:01:34:
93:f1:2f:e6:d7:f0:42:1e:0d:d2:9d:f6:77:bb:53:ce:10:96:
c5:82:be:57:3b:b3:f4:00:c2:82:7f:ea:6f:a3:b4:72:e7:6c:
7f:3b:a3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:10 2026 by rpki-client