Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: d686aTQG9D01kiHWCImeHcIQ4K47OtZx5NkS1vk/JYw=
Subject key identifier: 0F:1F:88:DE:D8:E0:26:86:C0:F5:67:AA:74:B4:D0:58:BA:7C:B4:CE
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019D9B1A0B567D6022B46095E843638504D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0FEC
Signing time: Fri 17 Apr 2026 11:01:08 +0000
Manifest this update: Fri 17 Apr 2026 11:01:08 +0000
Manifest next update: Sat 18 Apr 2026 11:01:08 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: FJzx4uDrGBEgg5E85jjsZJ6VGUgn1FXlS0m9V+pezHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:0b:56:7d:60:22:b4:60:95:e8:43:63:85:04:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Apr 17 11:01:08 2026 GMT
Not After : Apr 18 11:01:08 2026 GMT
Subject: CN=0f1f88ded8e02686c0f567aa74b4d058ba7cb4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:8b:1c:e6:53:f3:10:9a:d5:8b:49:2c:46:
30:97:09:49:62:cb:8b:ae:9a:03:7e:e3:4b:b4:fe:
5f:7b:9f:2a:de:fe:e9:b7:0c:9c:8b:d1:ce:00:bf:
06:a8:1b:6c:bf:10:9a:83:ad:5c:9b:d4:06:f1:ab:
a1:c9:09:ce:0f:ba:ae:5b:b5:dc:a6:8f:88:59:0d:
8a:4b:3c:d8:e9:1f:b9:32:87:48:ab:5e:ae:33:4c:
08:4c:16:e4:e3:b5:35:82:dd:11:75:f9:33:1d:69:
58:dd:c7:7e:74:eb:37:d4:8d:3a:7b:27:9c:4a:91:
bb:0e:d7:aa:58:56:98:8b:81:21:b0:1e:65:b3:49:
72:54:9e:d0:59:13:d2:f7:65:4e:38:f0:ad:14:77:
7a:36:c5:e7:a3:44:75:21:18:7d:a1:b1:b1:08:40:
48:85:02:12:29:40:f1:e3:5d:ad:40:00:41:ef:da:
13:ab:6b:8f:2a:4a:15:45:bb:31:21:fe:df:36:d7:
86:5f:cf:db:f1:31:f3:b8:b4:c3:c0:66:8a:f9:e3:
09:6b:ae:ae:ae:ca:20:d8:fa:df:ba:cc:a1:dc:1f:
39:bc:b2:a9:41:fd:63:aa:8f:9d:0a:8b:01:e0:57:
25:70:16:59:9f:f0:d3:67:ba:c1:5b:c5:3d:ab:84:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:88:DE:D8:E0:26:86:C0:F5:67:AA:74:B4:D0:58:BA:7C:B4:CE
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f5:af:d3:d7:2d:89:de:02:25:66:b6:6c:ba:41:7d:ad:01:
2f:98:ed:cf:86:9a:28:b9:b9:ed:18:1a:e3:50:1b:33:01:e6:
46:ba:7a:43:f9:bb:64:af:67:7f:51:65:ee:66:eb:fb:6f:b3:
7c:f3:be:7e:c6:32:1b:68:28:78:ac:43:67:c0:ed:d2:1f:8a:
90:94:59:93:19:e0:03:63:76:f1:08:7a:1e:77:3a:77:03:1b:
f1:08:75:ee:c0:31:b9:65:cd:31:24:58:02:02:08:34:0b:d1:
ab:e9:39:a9:47:1d:13:e0:f2:54:5c:c9:60:4a:1a:21:5a:88:
09:cc:45:0f:af:01:6f:a6:db:57:e5:57:9d:7a:79:30:b2:b2:
21:0e:2a:58:d2:7e:f5:9c:82:3b:6f:29:6b:5f:15:f9:1d:fd:
a1:c4:63:4d:fd:d6:30:0e:4f:40:f0:42:9a:c1:1c:a3:22:a9:
fc:18:00:38:6a:51:78:2f:0d:ba:5d:6c:87:1f:97:7a:ee:d1:
05:d4:7b:cb:ef:d1:cc:76:90:3d:ad:78:85:d5:12:11:7d:e3:
42:f5:05:0a:94:af:06:cd:a6:62:92:93:eb:1e:19:83:0e:88:
f7:dd:0f:c3:e3:87:d7:55:93:f6:f5:b3:cb:b5:da:5c:9d:9c:
ed:93:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:24 2026 by rpki-client