Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: Tc4o3bAcFCWkfyfBAPREUk6AFi/Z46ZXvfQ9XuKdQtg=
Subject key identifier: BC:DE:44:5F:5D:80:D5:04:F7:A5:67:62:DF:F0:6A:52:DC:39:C3:CB
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019FAD1AFC3CEDDAB80F0AEF4CC59266E4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 1100
Signing time: Wed 29 Jul 2026 09:00:54 +0000
Manifest this update: Wed 29 Jul 2026 09:00:54 +0000
Manifest next update: Thu 30 Jul 2026 09:00:54 +0000
Files and hashes: 1: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
2: isTKYtbUnSryrfFZr4-sBY4hH2k.roa (hash: YsbVFBRwd8pAe2/JAWEYBxt6vxRupWcftoItlak1zEs=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: A7ch7U+ZE9/8YnTtJUD2Fd5qmN4fdG+EywtQinzzjLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:fc:3c:ed:da:b8:0f:0a:ef:4c:c5:92:66:e4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jul 29 09:00:54 2026 GMT
Not After : Jul 30 09:00:54 2026 GMT
Subject: CN=bcde445f5d80d504f7a56762dff06a52dc39c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:9a:6e:3b:19:38:f8:7e:f2:71:62:03:36:
94:32:73:56:d9:11:50:37:b7:e9:20:46:40:6a:57:
97:8d:ca:aa:58:4b:1a:78:29:43:de:e7:e9:10:cf:
c1:34:45:24:88:18:9d:29:87:3b:2b:ed:5e:ac:5e:
23:b9:a5:e8:e3:df:57:c0:f1:9e:30:19:30:6c:ae:
01:39:69:23:f1:4d:4b:42:1f:73:57:53:ea:67:5e:
7f:43:4c:4e:c6:d6:17:35:59:51:d0:26:09:56:ca:
59:cd:44:f0:3a:b5:c6:70:93:74:d3:9a:24:2d:e3:
33:27:49:d6:69:7c:05:f3:ea:1e:ed:e1:06:7b:fd:
25:b7:c3:d7:cf:65:dd:d7:3e:07:70:fd:be:72:48:
e5:81:42:c7:dd:c0:7b:d8:b0:e0:11:84:52:05:27:
58:bc:77:82:8b:44:19:7a:7c:9c:de:4a:24:77:bb:
62:15:86:ad:39:c7:08:dc:27:0f:a9:6b:84:22:41:
97:e5:c0:73:53:b1:d1:e1:40:a7:eb:21:80:7f:b4:
5b:eb:ab:af:a4:ff:8a:77:44:94:51:be:55:43:1a:
59:3a:b2:32:92:e7:a1:27:91:f4:b4:bd:77:8a:55:
e0:e2:ad:82:81:5a:8d:80:f1:fe:5b:99:3f:d5:b1:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:44:5F:5D:80:D5:04:F7:A5:67:62:DF:F0:6A:52:DC:39:C3:CB
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3c:4e:dc:d7:33:eb:35:b6:e3:2c:ba:17:8c:aa:5c:c4:a8:
a5:f7:00:42:ad:70:84:7c:c3:ba:b3:ed:f4:89:48:49:93:2e:
74:dc:c1:f2:4e:d4:16:e2:ae:2c:70:f0:38:0b:fd:16:a2:30:
c3:9e:96:bd:3e:26:b8:fc:d3:ec:50:bf:c3:56:77:46:f6:cc:
a7:27:fe:68:0c:cb:fd:7a:4b:13:10:45:db:ea:55:60:41:72:
eb:bc:94:35:33:34:0d:d3:e2:19:c4:52:b7:53:24:6c:45:77:
bc:d5:42:91:f4:0a:1f:1f:99:f4:8b:ee:5b:9e:c9:1c:e8:3f:
a0:f7:79:4c:a3:84:b6:8e:97:fe:e0:34:f6:57:86:a1:61:5d:
8e:fc:ef:73:98:29:26:dd:0e:b1:65:85:95:93:58:2c:dd:fb:
26:fa:a4:18:27:8e:50:b6:8c:2e:2c:3c:dc:f4:16:cb:45:69:
bb:72:d9:d3:8d:a7:26:6d:5c:d8:60:a9:f1:56:50:96:19:ac:
30:c2:82:7b:57:ba:99:02:18:c4:fa:91:c1:08:43:df:49:81:
54:c4:46:bd:cd:cf:f7:2f:23:15:df:ae:5a:31:2e:e3:1f:f6:
af:d2:28:00:f2:28:6a:62:b7:de:40:e3:32:c5:65:d3:1b:0d:
ed:71:1c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGvw87dq4DwrvTMWSZuTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjYwNzI5MDkwMDU0WhcNMjYwNzMwMDkwMDU0WjAzMTEwLwYDVQQD
EyhiY2RlNDQ1ZjVkODBkNTA0ZjdhNTY3NjJkZmYwNmE1MmRjMzljM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PiabjsZOPh+8nFiAzaUMnNW2RFQ
N7fpIEZAaleXjcqqWEsaeClD3ufpEM/BNEUkiBidKYc7K+1erF4juaXo499XwPGe
MBkwbK4BOWkj8U1LQh9zV1PqZ15/Q0xOxtYXNVlR0CYJVspZzUTwOrXGcJN005ok
LeMzJ0nWaXwF8+oe7eEGe/0lt8PXz2Xd1z4HcP2+ckjlgULH3cB72LDgEYRSBSdY
vHeCi0QZenyc3kokd7tiFYatOccI3CcPqWuEIkGX5cBzU7HR4UCn6yGAf7Rb66uv
pP+Kd0SUUb5VQxpZOrIykuehJ5H0tL13ilXg4q2CgVqNgPH+W5k/1bEg3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzeRF9dgNUE96VnYt/walLcOcPLMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTxO3Ncz
6zW24yy6F4yqXMSopfcAQq1whHzDurPt9IlISZMudNzB8k7UFuKuLHDwOAv9FqIw
w56WvT4muPzT7FC/w1Z3RvbMpyf+aAzL/XpLExBF2+pVYEFy67yUNTM0DdPiGcRS
t1MkbEV3vNVCkfQKHx+Z9IvuW57JHOg/oPd5TKOEto6X/uA09leGoWFdjvzvc5gp
Jt0OsWWFlZNYLN37JvqkGCeOULaMLiw83PQWy0Vpu3LZ042nJm1c2GCp8VZQlhms
MMKCe1e6mQIYxPqRwQhD30mBVMRGvc3P9y8jFd+uWjEu4x/2r9IoAPIoamK33kDj
MsVl0xsN7XEcHg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:18 2026 by rpki-client