Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: pK91Dfpjj7VU09e69j1mEVSf6WYfs6Iv/m2tBBiWZuQ=
Subject key identifier: E8:0C:AC:EE:C6:CC:1C:C2:AF:31:10:F5:C8:09:82:D4:8B:8E:75:9F
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01A1249D54104C7DE49631F94A7FD7C628A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 11C6
Signing time: Sat 10 Oct 2026 07:00:52 +0000
Manifest this update: Sat 10 Oct 2026 07:00:52 +0000
Manifest next update: Sun 11 Oct 2026 07:00:52 +0000
Files and hashes: 1: E_NI4YaLo-4vH-xHThiTFQYzNlk.roa (hash: OdfijIjYnSuLrPJOtapUMNeSS4iKerolBSNZPTXhiPA=)
2: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: S71dIgyta10mcD8VGprsMNG1+W9tyU3D3+la/NRg1EE=)
3: ta3YrRrdv1SdTdEifs-O8MMw-Qc.roa (hash: 1+wnuaJfeEL2tMUfArBENrplxbQncr627FwtaLtNR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:54:10:4c:7d:e4:96:31:f9:4a:7f:d7:c6:28:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Oct 10 07:00:52 2026 GMT
Not After : Oct 11 07:00:52 2026 GMT
Subject: CN=e80caceec6cc1cc2af3110f5c80982d48b8e759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:1e:b7:1f:cc:f3:6b:e0:90:d5:7f:31:d1:
c3:4a:43:22:9b:30:3e:ef:3c:7b:13:18:78:05:10:
9e:5e:68:3b:5e:88:c5:3a:fe:f3:9b:3a:6a:51:0f:
a3:c7:0d:dc:db:40:2a:8c:e2:d2:20:40:6a:38:41:
20:6e:e3:21:45:dc:59:45:d6:ef:db:05:9e:b6:6b:
ad:42:26:91:3d:f5:11:c8:da:94:dc:b6:13:6c:f0:
e2:c2:31:c5:76:d9:aa:0d:e3:d4:be:75:94:30:fc:
64:1b:1e:5c:15:6b:27:3f:a5:95:6b:6f:6f:49:2a:
f0:88:c1:a8:9e:43:3c:03:f0:05:eb:d0:9a:58:0f:
3d:15:7e:53:ae:9a:78:44:54:d6:d6:f9:1e:20:96:
c7:94:35:84:71:ad:5a:dd:bd:c4:f6:c5:62:2e:4f:
47:bc:09:1d:e4:64:fa:ce:93:95:a6:2b:79:6f:3c:
f4:d5:fd:65:d5:59:40:f2:97:e2:78:78:72:c7:53:
a0:d8:bb:29:51:12:4b:ef:be:ff:60:9c:8d:52:1b:
f7:b1:3f:c9:8f:7a:19:21:5b:80:a5:d1:30:98:32:
a9:cc:9e:92:7f:7b:35:64:52:33:f3:c5:65:36:80:
3a:b4:83:5b:36:4e:ab:dc:73:12:b9:ca:98:0d:50:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0C:AC:EE:C6:CC:1C:C2:AF:31:10:F5:C8:09:82:D4:8B:8E:75:9F
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:5c:3e:e7:1b:e4:6d:22:ed:0f:e9:f3:56:72:cc:79:af:
85:a1:ea:fc:44:d4:78:6e:85:17:e2:92:f6:5a:81:28:02:14:
2f:8a:d7:cc:79:4f:d5:c7:d2:b6:7e:53:6e:ba:ff:a6:5e:8d:
f6:83:47:dd:e0:2a:28:de:aa:5f:99:7d:e0:81:e0:b5:33:32:
b0:68:60:1e:e5:39:90:54:85:36:b9:59:6f:1d:27:0f:e6:ed:
6a:7c:5b:45:56:3e:68:b6:93:e5:3d:78:85:13:de:91:0c:09:
6e:1d:30:46:ba:43:f0:7e:fa:9b:62:76:f2:00:ae:90:78:c7:
e6:95:02:42:59:d1:09:a6:b2:c4:5a:f1:7a:3a:d7:77:80:ef:
82:72:4c:5f:06:29:2e:be:9d:a9:ce:c4:83:c3:d3:b2:75:24:
65:2a:30:7d:ad:41:ed:2b:21:ed:f7:96:6e:17:75:d1:76:b1:
f7:95:6e:64:93:bc:db:70:79:95:e1:34:52:ce:57:99:2b:b7:
4f:91:fb:80:34:eb:92:df:80:6b:8d:4b:a3:36:7a:ff:85:b2:
be:2c:66:d1:27:4e:7d:c2:ca:60:71:69:40:37:69:c4:d6:06:
d7:ba:cd:7d:1d:25:be:e7:5e:bf:a1:f4:57:ef:8b:2a:cb:29:
0f:1b:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:52:48 2026 by rpki-client