Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: 4bwfPan3j2seaoftnF8hx7MFbsSfuaIyBgoF0om/bfc=
Subject key identifier: 97:C3:2B:CF:89:76:BE:30:12:F4:22:76:2D:C3:E4:74:B4:6E:68:AD
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 019D984FE1A88D689405E5F217C4FF3D308D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 18CD
Signing time: Thu 16 Apr 2026 22:01:05 +0000
Manifest this update: Thu 16 Apr 2026 22:01:05 +0000
Manifest next update: Fri 17 Apr 2026 22:01:05 +0000
Files and hashes: 1: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=)
2: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=)
3: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=)
4: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=)
5: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=)
6: htEUr6Lt44lZvtJ-YrwomAVpms8.roa (hash: fr4tJOJHx4cibpVUjq4P3JJxw5JGxqyswZhZFvLizGs=)
7: jTqcYKHqLgJzkgKKyQoLjf3ZZiA.roa (hash: NOw0XonYdKd94pKios35a/MdMCRJkVJF3zHnY0kyMwo=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: E4of1P9EKcdQS4zKPm3tfLpYmgWjOdmYI7E4zI+FmLU=)
9: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e1:a8:8d:68:94:05:e5:f2:17:c4:ff:3d:30:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Apr 16 22:01:05 2026 GMT
Not After : Apr 17 22:01:05 2026 GMT
Subject: CN=97c32bcf8976be3012f422762dc3e474b46e68ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:a7:c3:09:f9:cb:ce:4e:ea:46:90:51:0b:
a5:dc:b3:7a:ca:81:ba:9d:cf:0e:21:c5:bd:74:d2:
8e:d2:08:39:65:a5:34:1c:7f:63:e6:a4:81:61:0b:
19:2a:c7:3e:1d:ce:27:d4:61:d3:4f:73:f1:26:20:
af:03:77:61:17:ec:2d:44:42:54:3a:fa:41:67:5a:
92:fc:af:ab:0d:ec:a4:3b:8c:63:87:32:9e:10:b3:
d5:60:1e:57:dc:3a:16:e7:c2:92:10:75:53:da:c3:
74:37:bf:32:a9:95:7a:42:10:84:c0:78:3c:73:3d:
8c:6f:0a:fa:28:92:91:f6:c4:34:fd:7b:b4:03:86:
2c:ef:7d:89:d9:16:f2:95:63:7f:10:6c:fc:5d:d0:
a9:12:e0:ec:02:d4:16:78:c0:e6:15:a1:9b:e4:6e:
93:3c:20:fa:4b:67:ee:61:cb:c8:74:0e:71:08:a0:
b5:18:4a:d8:52:36:da:7f:80:06:e0:ea:91:c1:ef:
10:cd:e8:c2:b9:5c:55:1c:3f:5b:c1:a1:21:e3:f8:
af:5a:63:3e:62:0f:0a:61:e1:3b:50:6a:b1:19:9c:
fe:2c:09:99:ba:ca:ae:c8:ed:b6:fc:60:f7:26:13:
91:d5:d4:67:96:3a:9e:ec:cd:08:15:bc:fb:d6:ac:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:2B:CF:89:76:BE:30:12:F4:22:76:2D:C3:E4:74:B4:6E:68:AD
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:6c:aa:78:85:40:35:c3:1a:d4:3a:32:6e:48:47:5e:26:
89:8e:78:94:1e:73:34:33:f4:30:a2:ba:da:58:64:65:5e:dd:
9c:d6:e5:61:82:e5:75:58:57:ce:4c:a3:8a:14:c2:a1:3a:ff:
58:57:cf:6a:60:38:ed:36:48:ee:f8:df:59:32:85:cc:f2:a8:
ba:20:0b:a4:1b:42:81:77:41:5b:c5:0a:9e:be:ba:05:cf:04:
08:ec:3a:85:05:41:03:4a:7d:2b:73:5d:7e:b6:f0:86:97:11:
d7:90:2f:1c:37:ed:4e:19:35:18:5d:c3:74:d2:f0:3c:00:c0:
54:70:c1:ad:17:57:50:c6:8c:c1:67:29:1d:54:22:1d:42:e0:
93:6e:86:c2:31:1a:1a:7a:12:26:d2:08:c8:04:6d:a1:18:74:
a1:dd:b8:57:e4:a7:e0:11:d7:58:39:e9:53:c2:c2:58:12:cb:
11:49:dc:4b:e3:eb:0b:fd:cc:b8:8a:c3:30:0f:a0:f0:f1:c5:
5f:39:6d:d5:d4:f2:6c:e2:2e:b8:96:e1:fa:46:07:d5:14:c5:
d3:e4:a7:43:00:95:f7:28:28:b5:92:39:5d:ef:eb:d6:c5:78:
6a:85:67:70:a0:54:d7:eb:98:ce:03:d6:aa:2d:42:9b:27:bd:
70:b7:a7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:22 2026 by rpki-client