Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: V7h84+PF+Qu68n4/66FBthfMg7/sjEkpvApWSW6N5bk=
Subject key identifier: B6:1D:EC:AB:C3:30:7C:71:2A:A5:59:1A:84:75:19:13:2B:A2:AF:79
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01A0D315C1863A1D3389C55448C73F8284F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 1A7B
Signing time: Thu 24 Sep 2026 11:03:33 +0000
Manifest this update: Thu 24 Sep 2026 11:03:33 +0000
Manifest next update: Fri 25 Sep 2026 11:03:33 +0000
Files and hashes: 1: 8PG-fi4UKZTsI-qGra5FYLxhK7U.roa (hash: rVcMkzlcbjAZCYKt1vWuh1f3Uw3Bkd84bPp/2fCkd84=)
2: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=)
3: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=)
4: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=)
5: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=)
6: bt4XElFmmymOYPm9YwLV1WhS8dg.roa (hash: elowfO4U8unek9TrOUffWVUXwXcPjKzkg7IwSpkvbEk=)
7: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: v12qOkHS74LA9AulYr/Dz+vpzJpoel1LuVFVQ3QKSbs=)
9: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:c1:86:3a:1d:33:89:c5:54:48:c7:3f:82:84:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Sep 24 11:03:33 2026 GMT
Not After : Sep 25 11:03:33 2026 GMT
Subject: CN=b61decabc3307c712aa5591a847519132ba2af79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:f5:53:fe:b1:ab:af:0e:f5:32:f2:d1:1d:
5d:6b:3c:a7:02:3b:5b:83:7a:6b:e4:9f:80:7c:ea:
fd:b2:ea:86:10:f8:89:71:61:76:12:1c:98:56:67:
d6:04:a6:77:25:7f:d1:00:b4:8b:fa:b1:21:41:32:
f9:07:b4:98:1d:f4:63:4f:46:4e:da:cc:71:d2:5e:
85:12:23:00:6f:cf:7b:7a:45:78:c4:8c:1c:8a:fa:
d8:97:99:71:ed:0f:fc:e8:8f:f9:e5:7a:fb:bd:1c:
e4:8d:51:9b:11:b7:01:5c:b1:e7:a0:b8:c1:d9:04:
f4:66:33:08:f4:94:94:2e:94:37:7a:b1:74:bb:89:
1a:44:4e:63:e1:95:9d:c2:ea:bf:79:31:4d:91:0f:
a7:1a:ef:1a:0e:6d:17:90:44:df:c0:52:b8:a9:ef:
c2:9f:bf:4e:3b:e1:42:9e:aa:62:05:49:82:31:3a:
57:bb:54:a7:9b:42:97:a6:93:d9:eb:15:6c:e3:39:
8a:c2:0e:f8:30:76:83:64:a1:cc:b2:64:7f:05:ba:
30:a6:8d:a7:2e:ff:c6:ca:c1:b9:f5:4a:a5:91:87:
3c:8f:60:85:ea:fd:99:6d:7a:21:32:7a:d3:4f:07:
c2:03:a2:22:85:81:73:a3:fa:b9:bb:95:c9:06:b8:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:EC:AB:C3:30:7C:71:2A:A5:59:1A:84:75:19:13:2B:A2:AF:79
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:14:6e:9d:42:4d:72:ef:e7:0e:25:7d:3c:30:2e:2c:da:a7:
e3:6a:28:59:ca:ce:6c:03:a4:c7:7f:c3:42:d2:c6:a2:6d:48:
cf:45:05:82:99:7d:db:3f:94:61:1e:83:31:c0:51:26:b5:13:
79:6b:23:b1:2b:0f:66:d4:1d:af:5e:80:55:05:df:6d:10:13:
63:3a:b1:fb:ac:17:07:ce:47:08:9c:71:04:c0:d7:b9:2b:36:
fd:e6:03:90:7b:71:41:2f:c6:ec:48:54:36:c4:f1:80:c1:8f:
85:8f:39:18:3f:eb:9c:15:76:77:23:02:85:99:3a:9e:a5:04:
77:56:e7:91:29:d2:55:b1:ec:e6:5b:92:75:7e:15:25:19:99:
db:2f:5e:28:21:45:e8:6d:e4:0a:ba:3f:67:23:2f:04:ff:87:
c1:2b:60:3e:bf:f1:40:d4:02:da:77:32:80:88:18:bc:93:b4:
ff:91:23:2c:60:85:da:32:4e:2e:a5:7e:49:14:1e:18:24:d6:
1b:a3:8b:5f:e9:2c:0a:94:f5:9a:fe:70:6c:af:4c:fc:d6:e6:
40:b1:9b:39:e7:e4:46:25:b4:b5:18:a4:1f:ea:c0:50:bc:ce:
21:75:cc:f7:d2:09:e8:97:f1:97:13:5d:f1:9b:6a:78:0d:f0:
e1:7a:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:26:20 2026 by rpki-client