Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: zIUsX1jWDDoVapvEvE0vq04pG4gqVBj79TUi51Ou20k=
Subject key identifier: FE:0D:6F:DE:81:9F:97:7C:AB:6A:3C:36:F6:2E:F1:3C:CF:6F:6E:83
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019EC0A411B71224A1CCDCAB4C9CAE38B027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 1084
Signing time: Sat 13 Jun 2026 11:00:38 +0000
Manifest this update: Sat 13 Jun 2026 11:00:38 +0000
Manifest next update: Sun 14 Jun 2026 11:00:38 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: 3MExYP6q/lLwNIxZbMv0xcmsdAp5jEo5iGe+vVP+eRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:11:b7:12:24:a1:cc:dc:ab:4c:9c:ae:38:b0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jun 13 11:00:38 2026 GMT
Not After : Jun 14 11:00:38 2026 GMT
Subject: CN=fe0d6fde819f977cab6a3c36f62ef13ccf6f6e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:01:f2:ff:58:ae:90:bb:63:61:4e:5b:7d:
41:7d:d5:9e:85:5d:88:b6:14:aa:23:12:7c:1f:e0:
ae:05:c0:3d:bd:0f:e3:cd:3e:de:10:48:04:68:ad:
bb:dc:f3:b7:42:3c:41:42:ae:b3:46:f4:87:c0:e7:
31:7e:76:f6:6c:97:18:30:ee:dc:9d:e3:d2:8a:25:
10:78:43:f3:92:19:22:b2:5d:23:c6:c5:57:fe:62:
98:2e:b5:f9:50:f7:fb:d0:6c:b9:8c:b1:e3:62:82:
d2:ab:99:72:3b:91:70:a6:7a:06:82:d7:e2:40:a8:
64:5e:6a:71:25:a5:e0:0a:9a:3b:49:45:3e:02:1a:
ff:58:b0:b0:69:6d:6e:5a:cc:92:d8:49:53:a5:54:
58:ae:f7:a2:38:17:59:ef:52:c3:d8:d5:b0:1e:e7:
c0:7e:73:c7:03:cf:f3:bf:fe:e5:82:f8:5c:fd:78:
1e:19:78:ef:0c:34:bc:3c:ba:77:ae:11:11:d8:f8:
d3:f4:d1:e6:8e:a0:ab:4f:b1:4d:75:22:fc:fb:61:
60:38:54:69:d0:78:ad:c2:65:0c:d4:4f:73:03:26:
2f:07:8d:fb:83:4c:03:ff:bd:57:98:01:3e:a3:f6:
db:47:85:c7:d8:e5:32:a8:09:89:37:2e:31:ae:7f:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:6F:DE:81:9F:97:7C:AB:6A:3C:36:F6:2E:F1:3C:CF:6F:6E:83
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:68:9a:e0:29:77:14:9c:c8:dd:3f:65:e5:d3:70:4c:2e:
35:de:48:04:16:33:a1:96:d6:20:d7:f2:a3:55:25:3a:fa:9f:
47:d6:1b:15:66:0b:6a:09:61:14:fb:5c:2c:68:ea:49:42:b3:
09:1b:d7:62:56:ae:b8:d0:6b:86:25:58:f1:e6:71:52:8c:61:
2d:5a:ef:81:a1:3c:5e:61:d5:66:6f:2a:3f:fd:38:39:20:6e:
b5:6b:ed:26:65:44:ef:70:c1:9b:e6:df:8d:46:bf:1d:52:0a:
c3:58:b0:d1:b7:7b:18:d0:e9:db:cd:90:c4:61:57:58:3f:84:
31:d7:91:18:dd:db:b7:1c:f3:7c:ba:8a:fd:b4:cc:3f:79:34:
1a:ea:a6:b1:67:26:1c:6e:06:9a:32:25:78:fe:ab:ed:84:b3:
fc:b8:7b:78:2c:64:e8:ae:de:f9:cc:a2:a3:25:10:eb:83:b2:
00:1a:45:a4:ac:86:29:47:8a:8b:f9:e0:20:ad:7e:f3:ee:6a:
fe:17:12:af:0f:49:c9:42:c6:01:47:4a:e1:23:22:5e:67:cc:
86:6a:c9:c6:d8:11:c2:d0:a2:6b:9b:9f:84:6c:dc:11:51:a1:
b3:ee:e6:5b:5d:29:eb:c2:05:6a:fa:6c:06:87:a3:00:c6:95:
39:ec:2c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApBG3EiShzNyrTJyuOLAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjYwNjEzMTEwMDM4WhcNMjYwNjE0MTEwMDM4WjAzMTEwLwYDVQQD
EyhmZTBkNmZkZTgxOWY5NzdjYWI2YTNjMzZmNjJlZjEzY2NmNmY2ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6oB8v9YrpC7Y2FOW31BfdWehV2I
thSqIxJ8H+CuBcA9vQ/jzT7eEEgEaK273PO3QjxBQq6zRvSHwOcxfnb2bJcYMO7c
nePSiiUQeEPzkhkisl0jxsVX/mKYLrX5UPf70Gy5jLHjYoLSq5lyO5FwpnoGgtfi
QKhkXmpxJaXgCpo7SUU+Ahr/WLCwaW1uWsyS2ElTpVRYrveiOBdZ71LD2NWwHufA
fnPHA8/zv/7lgvhc/XgeGXjvDDS8PLp3rhER2PjT9NHmjqCrT7FNdSL8+2FgOFRp
0HitwmUM1E9zAyYvB437g0wD/71XmAE+o/bbR4XH2OUyqAmJNy4xrn8huwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4Nb96Bn5d8q2o8NvYu8TzPb26DMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsStomuAp
dxScyN0/ZeXTcEwuNd5IBBYzoZbWINfyo1UlOvqfR9YbFWYLaglhFPtcLGjqSUKz
CRvXYlauuNBrhiVY8eZxUoxhLVrvgaE8XmHVZm8qP/04OSButWvtJmVE73DBm+bf
jUa/HVIKw1iw0bd7GNDp282QxGFXWD+EMdeRGN3btxzzfLqK/bTMP3k0GuqmsWcm
HG4GmjIleP6r7YSz/Lh7eCxk6K7e+cyioyUQ64OyABpFpKyGKUeKi/ngIK1+8+5q
/hcSrw9JyULGAUdK4SMiXmfMhmrJxtgRwtCia5ufhGzcEVGhs+7mW10p68IFavps
BoejAMaVOewsMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:10 2026 by rpki-client