Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: +FF+B0DOLX3iw9sqoOBlC3vr3TviQ0hSBMage/gFOig=
Subject key identifier: 53:5C:41:A9:87:32:11:A1:1B:36:F3:35:E9:82:8F:64:32:93:D3:C8
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019EC2926D192B113EDB14098042911FD527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 1085
Signing time: Sat 13 Jun 2026 20:00:36 +0000
Manifest this update: Sat 13 Jun 2026 20:00:36 +0000
Manifest next update: Sun 14 Jun 2026 20:00:36 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: Dj67eAWRyMJleaGr7C2IVQwzHFf+35kx+BOMot3JDqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:6d:19:2b:11:3e:db:14:09:80:42:91:1f:d5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jun 13 20:00:36 2026 GMT
Not After : Jun 14 20:00:36 2026 GMT
Subject: CN=535c41a9873211a11b36f335e9828f643293d3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:08:08:41:17:72:81:4d:a8:67:63:d3:f7:
2c:a7:e8:42:42:82:a2:32:0f:3a:cd:af:4b:49:56:
b7:2d:33:00:7b:23:ec:6b:ac:8e:bb:52:91:b4:3d:
cd:b8:ab:59:12:eb:cc:98:c9:9e:3d:42:7f:ad:ee:
cf:97:b5:fc:18:60:e6:68:c0:72:36:8c:d8:ad:3f:
28:54:cb:61:fc:56:46:b7:cb:1d:1e:ec:3d:45:05:
f9:92:ef:b4:cc:e6:73:67:3f:16:05:6f:78:b8:b8:
18:1a:bb:58:4f:ca:0d:39:47:4c:c0:fb:3b:5d:e8:
54:a8:1e:95:58:df:2d:d6:05:51:23:f0:8f:02:9e:
8f:5c:f9:d1:0a:cf:87:35:57:90:53:e8:c5:b3:83:
b1:e5:9f:c0:6f:aa:67:ef:00:47:47:d3:12:03:b1:
41:26:1f:c6:c0:e2:be:e9:73:b4:1e:0a:24:81:42:
ec:d0:9f:98:e5:30:99:5b:69:37:f6:d3:a8:50:f6:
55:d9:0b:28:24:f5:56:bf:c0:94:c9:18:fc:8e:a3:
f7:c1:f1:22:92:f3:be:42:1b:26:b5:e6:03:f9:36:
0b:36:c3:25:bf:e4:dd:0d:05:43:d8:de:91:0c:06:
de:a5:e6:64:23:4d:17:bf:81:91:52:70:2d:91:bb:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:41:A9:87:32:11:A1:1B:36:F3:35:E9:82:8F:64:32:93:D3:C8
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8e:0d:8c:e9:b0:32:71:07:a1:c4:6d:09:0b:c7:c0:c5:47:
5b:53:a1:20:8c:9d:36:fa:3c:74:6f:fc:e7:76:c5:63:fb:a6:
56:a0:9a:83:e4:e7:43:5e:5f:48:ea:0d:4e:77:08:6b:4b:30:
6b:76:00:65:5b:24:aa:6f:f9:44:f6:00:eb:e4:cd:83:92:de:
e6:07:d9:fc:49:23:80:12:da:ea:90:31:5d:b0:b4:27:a8:ac:
23:cd:27:70:13:a3:3a:92:5b:15:41:a0:4f:fb:27:52:e4:75:
0b:d0:59:5a:fc:ef:8f:ab:29:76:1c:d0:74:4e:54:72:2c:3a:
ff:da:b2:2e:f5:ac:e6:ef:34:89:a4:62:84:6c:64:b8:37:d1:
3f:3e:08:fc:f3:ca:45:6a:b7:46:78:3e:62:94:54:0a:da:5d:
78:d2:ad:37:aa:52:71:9c:d6:c5:36:7b:bc:34:4f:fe:b0:97:
40:13:84:8a:3e:fa:04:84:6b:86:7f:2c:a6:1f:eb:09:df:fc:
03:94:d5:c8:c3:34:12:6b:ba:e8:8b:a5:da:2d:99:b4:6e:15:
ce:80:46:f1:72:92:43:c6:74:11:29:a3:37:c3:3d:51:57:14:
b5:a1:12:b3:02:be:bc:cf:c9:3a:76:c8:37:16:02:2d:03:52:
90:a4:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:22 2026 by rpki-client