Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: naN026eSYH8AdkzHjjcp85rfHFJRM902XDJvss9v38E=
Subject key identifier: CB:20:A0:53:77:B1:01:B8:96:2C:0B:CD:21:51:CB:A8:CB:F7:1A:1D
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 01A0DB3AE2479AA69A064BCAB8141B44D6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 01:01:04 +0000
Manifest this update: Sat 26 Sep 2026 01:01:04 +0000
Manifest next update: Sun 27 Sep 2026 01:01:04 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: Bg9gK03XagGHQZ6Xac8lLVCwm/ysje1CGKvYoSLn+jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:e2:47:9a:a6:9a:06:4b:ca:b8:14:1b:44:d6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Sep 26 01:01:04 2026 GMT
Not After : Sep 27 01:01:04 2026 GMT
Subject: CN=cb20a05377b101b8962c0bcd2151cba8cbf71a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:4c:57:41:f4:ce:96:1f:83:49:16:1b:2c:
cc:d6:8b:21:7f:52:d4:69:3f:11:01:eb:0e:ed:a6:
13:3b:f9:e8:e7:80:f3:be:5f:89:7a:3f:3f:78:cb:
9c:30:df:5a:7b:02:98:31:9d:f5:3f:1f:04:3a:85:
63:cf:1a:99:af:7e:5a:e2:dc:54:07:c1:cd:13:62:
3d:09:ff:fd:88:0e:44:11:89:dd:ed:93:90:2b:8d:
47:6a:26:84:c2:ca:ea:2c:12:51:6a:b4:db:b1:46:
31:ac:e6:f1:82:8c:c7:94:5d:ab:b3:00:d6:0f:66:
d9:a6:86:87:0d:50:f2:a6:48:14:5e:67:53:82:41:
63:3d:65:36:7a:86:e4:69:b1:10:21:b2:0b:5f:a1:
86:59:15:4b:02:03:42:ea:b8:f7:39:75:bc:80:c5:
10:98:fd:b1:66:5e:fc:97:0c:71:51:eb:e3:90:98:
84:62:62:09:71:e9:dc:7e:9a:d2:4d:1d:a0:bc:7a:
68:23:56:23:bf:9c:10:44:ce:25:f6:65:2a:26:34:
2a:03:0e:aa:68:dc:71:86:46:5f:1e:a6:00:d4:9d:
37:53:29:90:ce:1e:a5:6c:4f:be:67:9e:b6:c9:cf:
18:ec:69:76:34:8c:cb:4e:be:8f:5d:35:b6:12:44:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:A0:53:77:B1:01:B8:96:2C:0B:CD:21:51:CB:A8:CB:F7:1A:1D
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:32:af:e7:6a:bb:39:9a:e1:94:f9:0a:fc:5a:00:48:c6:
15:e8:de:9d:e5:8b:ce:41:76:b9:bf:88:b4:01:ba:b3:50:63:
83:1c:51:86:60:aa:d1:74:e2:de:1d:3a:01:d4:48:7f:1c:3b:
0f:92:ca:60:16:88:9a:b6:93:9a:fd:70:8e:34:c2:f8:45:c4:
4d:32:e1:cb:00:9b:9e:15:4b:9a:e9:37:63:a8:a0:36:dd:62:
18:f4:06:cd:ba:ca:28:8e:93:5f:af:95:7d:4a:71:cc:e0:6b:
be:9b:44:fe:f0:af:19:eb:d3:4d:c3:d8:7d:30:5d:ae:62:f2:
28:69:cc:dd:0d:ba:76:fd:8a:21:c6:cb:63:1f:67:58:58:1a:
21:ab:e4:63:96:fa:81:8f:83:2c:3a:03:ea:82:08:70:a5:cc:
12:d8:4f:b8:a2:ef:85:ee:b0:91:ec:50:4b:c1:98:7f:89:bb:
38:7f:2c:cb:8c:48:d1:6d:9c:e9:dc:67:a7:00:8a:d8:31:7e:
c3:27:d8:64:a5:07:dd:6b:af:ea:ac:b8:c8:8e:42:cc:ad:63:
be:c0:d8:cb:8c:84:fb:f0:ff:80:22:57:16:71:d2:7e:76:26:
6d:87:cf:81:33:37:e7:aa:37:40:f1:a6:fd:57:f3:8c:1d:d7:
f1:5f:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:15:53 2026 by rpki-client