Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: rcfTd8eRh1Dqv8ycR0N2Nc+nHAzft3AfhS0rp8t7VkU=
Subject key identifier: CF:EB:7F:66:56:66:FA:1E:12:D9:A5:34:55:18:3F:A8:FB:5D:5A:68
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019CA9B39D025B2E9230A29A8B1014FFBED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0F6F
Signing time: Sun 01 Mar 2026 14:00:46 +0000
Manifest this update: Sun 01 Mar 2026 14:00:46 +0000
Manifest next update: Mon 02 Mar 2026 14:00:46 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: pxDnhM3SUdrT0Cy/PJybD6zTJ4OjDqt3WEWziVFb4dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9d:02:5b:2e:92:30:a2:9a:8b:10:14:ff:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Mar 1 14:00:46 2026 GMT
Not After : Mar 2 14:00:46 2026 GMT
Subject: CN=cfeb7f665666fa1e12d9a53455183fa8fb5d5a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:2c:76:2a:83:87:c9:83:a7:37:0e:dd:ec:
8f:f0:73:04:98:3d:74:6e:c6:be:bb:b5:ee:48:5b:
62:2f:51:2d:24:88:d9:c0:e4:d0:1e:d9:71:96:2d:
53:3c:d5:dc:2e:a2:84:27:9e:e0:13:0c:7d:63:27:
7c:47:65:65:ed:ac:db:4b:a0:8e:12:3d:e3:76:81:
dc:49:32:0e:44:b3:cf:f5:3e:f3:0c:fa:96:74:f4:
7d:78:4a:17:34:cc:d8:92:89:5e:a7:f9:53:4a:a9:
62:04:4a:2c:f1:ac:12:92:60:19:fd:86:3c:31:46:
06:79:49:07:65:30:a2:48:4d:5c:5e:11:c1:f3:0b:
c1:f1:59:c1:ec:08:58:a6:f6:d6:16:b7:6a:ae:e8:
34:92:ce:a8:4b:7e:11:61:f5:b7:4b:29:7e:b2:b8:
cf:25:27:ee:49:81:8b:33:5a:d5:c6:51:73:24:7f:
2b:ad:bf:19:a5:98:f2:73:87:e0:35:b9:0b:a9:48:
dd:59:9a:93:25:8c:d1:17:24:c1:5b:5b:40:37:6d:
a0:a0:04:14:9f:1b:c6:35:a7:3d:71:6d:3b:a2:07:
da:6c:52:21:f6:69:96:1a:fa:dd:f8:ed:04:ec:2c:
c9:79:4e:1d:e9:54:44:d2:a0:bb:4b:9b:d9:b6:a5:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:7F:66:56:66:FA:1E:12:D9:A5:34:55:18:3F:A8:FB:5D:5A:68
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:47:41:c3:39:cc:c5:46:0a:d5:4e:6a:bc:d6:29:80:48:4f:
85:6c:9d:da:41:ab:1d:59:23:3e:4a:09:72:ab:61:d3:b5:39:
cc:b0:b2:47:6e:10:10:45:2c:d8:f7:85:48:44:e7:ca:95:d2:
a1:66:91:91:e4:3e:c0:00:d9:e3:59:09:01:2b:68:9c:6b:ce:
21:e9:5b:31:52:ea:11:41:7b:b3:6f:fb:69:a6:35:e5:56:93:
0e:98:1c:5e:58:45:aa:34:fd:6d:e9:2b:04:c4:2d:3e:48:c7:
0e:1a:ef:95:9c:94:c6:d5:2e:c4:e9:72:a4:46:ab:a5:95:4a:
69:89:fe:3c:6c:c8:a6:79:b3:7d:81:0b:f5:fc:09:7c:ab:65:
fe:2f:13:2b:b4:cd:25:25:d7:2a:71:8d:6f:13:ac:ff:72:31:
ec:79:13:94:4d:55:ab:cf:05:31:e2:e5:9d:a5:dc:9c:3e:f9:
af:a2:c7:10:85:f5:9d:47:14:d1:3b:f5:19:f1:8c:9c:d4:4e:
85:f9:e4:e4:cb:9d:15:91:4f:f8:9d:4c:ba:d7:ae:b8:d6:09:
56:a5:c7:da:81:87:d4:ef:d4:d6:f5:dc:0c:33:ef:14:05:f6:
02:3e:5b:f4:85:f5:4b:61:87:2c:cd:f4:a5:bd:97:78:8c:77:
73:8c:99:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps50CWy6SMKKaixAU/77ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjYwMzAxMTQwMDQ2WhcNMjYwMzAyMTQwMDQ2WjAzMTEwLwYDVQQD
EyhjZmViN2Y2NjU2NjZmYTFlMTJkOWE1MzQ1NTE4M2ZhOGZiNWQ1YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ksdiqDh8mDpzcO3eyP8HMEmD10
bsa+u7XuSFtiL1EtJIjZwOTQHtlxli1TPNXcLqKEJ57gEwx9Yyd8R2Vl7azbS6CO
Ej3jdoHcSTIORLPP9T7zDPqWdPR9eEoXNMzYkolep/lTSqliBEos8awSkmAZ/YY8
MUYGeUkHZTCiSE1cXhHB8wvB8VnB7AhYpvbWFrdqrug0ks6oS34RYfW3Syl+srjP
JSfuSYGLM1rVxlFzJH8rrb8ZpZjyc4fgNbkLqUjdWZqTJYzRFyTBW1tAN22goAQU
nxvGNac9cW07ogfabFIh9mmWGvrd+O0E7CzJeU4d6VRE0qC7S5vZtqVMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/rf2ZWZvoeEtmlNFUYP6j7XVpoMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzEdBwznM
xUYK1U5qvNYpgEhPhWyd2kGrHVkjPkoJcqth07U5zLCyR24QEEUs2PeFSETnypXS
oWaRkeQ+wADZ41kJAStonGvOIelbMVLqEUF7s2/7aaY15VaTDpgcXlhFqjT9bekr
BMQtPkjHDhrvlZyUxtUuxOlypEarpZVKaYn+PGzIpnmzfYEL9fwJfKtl/i8TK7TN
JSXXKnGNbxOs/3Ix7HkTlE1Vq88FMeLlnaXcnD75r6LHEIX1nUcU0Tv1GfGMnNRO
hfnk5MudFZFP+J1MuteuuNYJVqXH2oGH1O/U1vXcDDPvFAX2Aj5b9IX1S2GHLM30
pb2XeIx3c4yZyg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:39 2026 by rpki-client