Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: 1H4XS9qyXAxJ8flFft/eTUo/xKgSd2/7d/WsN4sePo8=
Subject key identifier: A9:14:2B:93:7A:6D:45:76:D3:EB:99:42:8E:55:50:A6:45:2D:2F:50
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019CAD90905C1C27002C74FEDBD3EAF3D079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0F71
Signing time: Mon 02 Mar 2026 08:00:58 +0000
Manifest this update: Mon 02 Mar 2026 08:00:58 +0000
Manifest next update: Tue 03 Mar 2026 08:00:58 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: AacGBdq4syt7semNP/GQ+mbLOp/6AzOndTCwD8hUJ0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:90:5c:1c:27:00:2c:74:fe:db:d3:ea:f3:d0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Mar 2 08:00:58 2026 GMT
Not After : Mar 3 08:00:58 2026 GMT
Subject: CN=a9142b937a6d4576d3eb99428e5550a6452d2f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:8b:d2:a1:78:8f:0a:3d:e0:28:73:ba:78:
35:62:31:de:d8:ba:99:ae:e2:44:a2:ed:94:df:cf:
2c:69:69:18:99:08:84:ad:99:b4:e0:48:17:30:4f:
1f:45:07:df:1d:0b:60:5f:93:2a:ba:45:c6:07:2a:
93:2f:24:47:39:ea:16:5d:a2:d4:5f:bc:ac:75:b4:
0b:97:e4:ee:5f:52:33:f2:3c:3c:13:65:62:fe:04:
08:b4:c3:a6:43:f2:51:a6:9b:e7:d1:bb:49:16:35:
b2:6b:f9:70:11:28:23:e6:97:5d:51:1f:e8:63:39:
3b:4d:34:ea:28:2b:08:0e:2a:64:ab:f6:26:d9:2b:
08:70:c9:00:cd:57:41:a2:07:43:1a:cd:c9:a2:5d:
8b:bc:7c:2c:2d:c5:4e:a4:7d:d0:fa:fe:4e:e8:41:
57:09:e9:0b:8d:95:ff:58:69:b5:ec:aa:54:96:c2:
93:d4:b4:c2:a1:d4:da:04:ec:20:1d:5a:6e:e1:77:
92:8b:75:a3:0f:ec:84:fc:16:4d:18:a6:4c:9c:d0:
7e:48:50:f0:2d:d0:a3:0e:05:fb:a5:60:3d:4f:10:
39:e3:43:85:89:13:1a:ee:0e:5d:0b:e2:f7:59:1b:
61:86:80:a1:2a:c0:02:54:2c:ad:25:30:b6:33:00:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:14:2B:93:7A:6D:45:76:D3:EB:99:42:8E:55:50:A6:45:2D:2F:50
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:58:b5:a5:3d:c8:04:b9:8d:59:be:f2:f3:be:5c:da:c0:
e5:74:19:a3:fc:7e:28:f4:84:2a:7a:c3:c1:70:65:5f:2f:ea:
fe:e0:fe:44:b4:84:fc:6c:09:a0:a4:98:df:a8:58:6f:69:2c:
a7:fc:25:86:1f:54:25:ab:2a:59:60:f7:3a:7a:f0:a3:1d:4d:
cb:00:f8:37:8e:61:21:73:ea:80:2d:aa:c5:5b:cb:41:2f:d2:
9b:ad:ff:6a:37:26:27:93:b5:25:3c:95:e6:fe:6c:65:f8:be:
db:cb:c2:5a:9b:6c:55:84:af:54:b4:27:bb:48:f8:79:f5:6f:
af:22:17:4d:d1:8a:9b:59:0a:f6:06:40:63:bc:43:31:3d:fa:
b4:57:23:f7:5a:f4:dd:10:1d:5e:3c:af:8d:6d:d2:2c:49:f9:
cd:1b:03:82:24:25:03:db:de:e7:f1:3e:90:09:73:11:c2:72:
63:94:11:57:e7:2b:41:45:4f:37:41:02:73:b1:a1:1d:d2:d6:
56:98:b9:79:b6:63:d7:1a:47:4a:d2:d4:34:fd:78:02:4c:10:
18:39:b1:e7:26:3d:fe:8e:3a:4e:4f:8c:69:d2:5d:64:c3:fa:
05:86:af:e0:f9:98:be:ac:51:ee:5b:af:35:4b:da:87:14:8b:
10:be:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:40 2026 by rpki-client