Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: mFmciH70Pf2Y6dG7KBorbbb94oNte0wkpFkqRjIVCjg=
Subject key identifier: 7B:56:0A:89:95:88:A8:9F:55:31:D7:C0:06:E4:5F:75:8B:A1:EB:6C
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019D98F4CE1A349FC7F62E2D70E0069C3AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:13 +0000
Manifest this update: Fri 17 Apr 2026 01:01:13 +0000
Manifest next update: Sat 18 Apr 2026 01:01:13 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: fV9Hu1yhSF5u8JtNFdtKkUqh9Z//dqo4WAbqMoC8N/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ce:1a:34:9f:c7:f6:2e:2d:70:e0:06:9c:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Apr 17 01:01:13 2026 GMT
Not After : Apr 18 01:01:13 2026 GMT
Subject: CN=7b560a899588a89f5531d7c006e45f758ba1eb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:ad:5e:d9:ab:90:04:e0:27:d5:9a:d4:03:
9d:c8:cb:41:50:47:d8:41:36:45:7b:96:c2:85:ce:
35:4e:96:5a:d4:c8:de:ae:6c:46:de:ef:32:91:34:
23:cb:f2:92:e0:35:4c:f3:b3:93:dc:a9:d2:75:54:
bb:3f:3e:b7:02:a6:29:e1:46:df:8d:0a:05:c7:96:
bf:f7:b3:2b:74:bf:6d:4f:80:79:6c:d9:67:a1:f8:
3f:a8:37:c5:61:c6:81:23:0c:08:78:ac:aa:54:1a:
4c:9a:aa:6c:b3:df:85:16:31:0f:11:cc:00:e6:c5:
54:11:52:cc:9b:5c:41:3d:68:ce:e2:9e:15:55:c7:
8d:31:5b:31:78:d8:6a:4d:c5:bd:26:4f:f1:f4:7f:
e8:60:59:43:a2:bd:7b:e3:0d:e3:9c:2a:43:da:68:
0f:0f:de:3d:aa:65:b0:ea:4d:b4:c1:3b:2b:a8:70:
cb:3a:ad:cd:15:95:dc:0d:28:bb:56:69:be:14:5c:
5d:bd:95:fb:22:76:83:86:7f:9f:9a:94:2f:f3:8e:
41:c8:96:39:a8:22:c4:58:96:ec:56:b5:05:94:10:
3a:a8:e3:24:b2:a0:2e:98:d0:ee:c5:b2:1a:b7:63:
5c:f7:a8:3e:90:ff:ce:66:05:37:fb:67:c2:18:e6:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:56:0A:89:95:88:A8:9F:55:31:D7:C0:06:E4:5F:75:8B:A1:EB:6C
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:29:4e:57:b0:b7:ce:cc:d0:00:12:bb:f2:9d:aa:24:75:07:
52:ca:65:a3:cb:9b:81:27:7f:13:90:16:f6:34:b2:b1:75:13:
5a:9e:81:80:20:f8:27:69:d0:a8:6a:84:bc:40:fe:ea:6a:bd:
df:ef:1f:dc:a1:b6:4e:c3:06:99:f6:05:57:68:ab:07:5a:ca:
69:ab:57:0c:33:d5:e4:46:25:db:46:b5:f8:41:12:31:fc:5b:
1d:57:31:39:d6:43:f1:6d:23:ae:46:7b:d8:bf:34:eb:0c:ad:
35:2b:f8:1e:af:93:18:d2:e1:76:05:00:b5:b3:39:4f:99:b6:
f9:13:3f:79:e0:13:30:73:c3:1b:af:25:b6:30:07:03:11:68:
be:f2:79:54:c4:2b:e1:c3:67:2f:b9:bc:5a:8f:d1:7f:22:5a:
7f:28:85:f3:c4:ec:97:98:1d:3e:41:c5:cf:4e:41:29:45:16:
5b:66:b3:45:9d:3f:4e:94:f5:48:ea:a3:a1:ed:8f:e9:2b:66:
08:b8:4e:06:87:5d:e9:3d:09:59:bd:46:24:22:cd:bb:cb:65:
69:5b:b9:5b:00:91:24:79:ba:1c:d2:55:f4:ec:d1:57:a1:be:
96:9a:d1:e6:69:f6:f9:3c:a6:52:3c:75:7e:35:b4:ec:a4:97:
9d:8f:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:41 2026 by rpki-client