Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: OrXLUiYPUuvqeo5aoCDvCYDJcIINFt7FhGeL/pDiFfc=
Subject key identifier: EA:71:C4:B5:EB:7C:38:57:BF:02:A1:4A:0E:F1:D1:A2:8D:E2:C2:8E
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 019CAC47976C8CC5FF3834601943457A55D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 1607
Signing time: Mon 02 Mar 2026 02:01:38 +0000
Manifest this update: Mon 02 Mar 2026 02:01:38 +0000
Manifest next update: Tue 03 Mar 2026 02:01:38 +0000
Files and hashes: 1: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (hash: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8=)
2: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: 7i9u/xHHybQ9LX0JxWrqjacbHc7qPzhCunSQd5XZ6Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:97:6c:8c:c5:ff:38:34:60:19:43:45:7a:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Mar 2 02:01:38 2026 GMT
Not After : Mar 3 02:01:38 2026 GMT
Subject: CN=ea71c4b5eb7c3857bf02a14a0ef1d1a28de2c28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:f3:14:49:e8:39:57:f6:94:d1:38:cb:bc:
8e:71:c6:d4:67:9e:ac:78:20:03:ac:8a:f1:2e:f5:
d2:0b:a9:fa:f0:ff:38:bd:22:4f:83:40:90:05:c3:
9c:81:c8:bd:67:af:5a:64:0d:e5:5e:88:7e:5b:17:
17:a2:f6:ef:74:24:cf:54:41:d5:ca:ea:b9:37:0a:
80:b3:37:e0:a8:51:eb:e6:0f:c2:a9:98:42:98:44:
9f:34:19:45:a7:02:f2:b5:20:2d:e1:3e:c4:45:56:
b5:c1:ac:de:7b:60:fe:24:9e:99:64:20:ae:73:21:
41:61:ba:d5:73:26:ec:d8:7c:be:5b:21:4b:f9:e3:
ee:83:76:1a:49:f2:3d:1e:5e:dd:38:03:7a:6d:87:
3a:38:b1:c1:da:b5:71:21:d5:3d:97:2f:a0:88:3e:
ad:c9:38:f6:65:a8:84:f9:66:1f:99:24:6e:e2:b8:
db:b3:e5:21:fe:b0:79:68:9f:90:8c:16:89:7e:f7:
2f:6f:67:87:98:1e:9b:9f:1f:58:ba:4f:42:a0:46:
75:ea:db:2e:02:65:2f:98:11:93:c6:be:ed:61:97:
89:04:c6:19:da:74:18:bf:10:66:12:e5:2c:8c:1d:
c8:2e:52:a5:b5:16:49:5a:12:08:b9:c1:70:0c:c1:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:C4:B5:EB:7C:38:57:BF:02:A1:4A:0E:F1:D1:A2:8D:E2:C2:8E
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:98:7a:b0:21:07:ba:2d:23:76:34:7d:8a:d3:86:74:73:
9d:8d:84:c3:5d:fa:7b:be:65:22:d8:18:ad:cb:c1:41:3a:88:
6c:d1:79:d0:27:d4:6a:91:67:8b:3d:f2:8c:39:48:cb:4d:83:
3d:e9:df:04:a3:7f:b0:4e:40:01:68:85:07:1e:da:fc:61:63:
b6:ec:98:5a:ba:28:f5:0f:9f:d2:ac:c4:a1:1b:e5:ff:78:12:
b9:84:4e:81:46:fd:4e:3f:5a:fe:76:d3:e0:93:49:d1:e4:51:
77:05:99:17:5f:62:fc:9a:cf:19:f8:05:7d:90:cd:98:e8:84:
a6:c7:5d:cb:74:e8:17:4b:4a:83:d3:3d:12:bb:20:47:d6:a8:
de:ec:82:1c:26:ba:77:c9:f0:33:e3:77:aa:74:1b:cd:87:6a:
a6:34:83:5c:43:2c:58:f9:f5:84:64:d8:62:68:1d:fe:3f:ae:
2b:eb:64:ae:0a:5e:f8:44:11:51:b4:da:f4:ab:74:da:62:57:
7c:84:40:f8:33:6a:28:54:2f:a1:43:9c:58:c1:5f:66:3a:3b:
3b:59:62:a4:8b:ad:6a:46:d6:d9:19:17:9d:87:53:b0:9b:be:
41:c5:d2:46:23:aa:e2:0c:7f:a1:89:41:7b:a8:60:a1:55:46:
8d:be:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:01 2026 by rpki-client