Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: OfNAZA+C9Zf/PQgVxfZII9frc+XnQiD1XhdA2xhV/C4=
Subject key identifier: E2:57:3B:C6:C4:04:9F:E2:DF:92:80:07:5E:89:F3:A1:46:B3:BB:42
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 019D97E1D6C51C3D15209DF00D9B261E7EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 1681
Signing time: Thu 16 Apr 2026 20:00:53 +0000
Manifest this update: Thu 16 Apr 2026 20:00:53 +0000
Manifest next update: Fri 17 Apr 2026 20:00:53 +0000
Files and hashes: 1: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (hash: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8=)
2: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: ONb1PW9QSje+n8wUlyW37XY6H2szB10wsgAPmF9eKVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:d6:c5:1c:3d:15:20:9d:f0:0d:9b:26:1e:7e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Apr 16 20:00:53 2026 GMT
Not After : Apr 17 20:00:53 2026 GMT
Subject: CN=e2573bc6c4049fe2df9280075e89f3a146b3bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f3:4d:0a:95:eb:30:36:51:36:3a:ce:15:3f:
07:18:78:cf:72:7f:30:55:c0:dd:26:f4:ce:cc:c9:
a5:49:a5:e0:76:f8:bf:24:2f:98:7c:68:7c:4a:f3:
67:a2:0f:8a:ec:1a:27:29:80:46:81:60:05:f3:8e:
f4:21:62:2e:c1:ce:f6:42:4f:70:1a:71:ce:3a:0a:
50:52:1b:1a:8f:5e:14:03:7c:5e:bf:03:0c:01:eb:
75:36:9a:06:48:4d:e5:83:7a:b9:33:14:12:ed:6e:
eb:06:c2:85:ab:60:90:c0:a1:b0:75:d6:48:f3:b6:
8c:fe:c0:c6:bd:63:2d:e1:72:2a:4b:47:2e:f1:0b:
20:a5:ef:14:92:71:03:b4:ce:ca:11:a0:53:a3:01:
a8:cf:49:a7:38:ac:98:c5:d4:7c:0a:5b:e9:91:0c:
72:1a:ad:0d:68:48:9b:96:eb:3e:ca:72:b3:01:2e:
a5:6b:64:6a:07:a7:b1:69:95:45:87:00:01:4a:d2:
b6:fa:8f:96:62:2e:4c:09:66:d0:69:5e:dd:96:a9:
d8:e3:ab:a2:35:84:5d:d2:dc:d2:43:41:27:52:77:
4c:c4:0f:7a:01:01:d2:1a:31:23:a2:1b:aa:d0:ce:
1d:48:27:d1:19:2e:10:ee:48:6f:8c:8b:b0:7d:bf:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:3B:C6:C4:04:9F:E2:DF:92:80:07:5E:89:F3:A1:46:B3:BB:42
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9d:23:1b:30:5e:e2:e6:35:c1:43:9d:68:cb:19:b5:95:c6:
30:03:d7:2d:c1:43:47:74:69:47:c6:8c:7e:c0:31:8d:64:d2:
70:43:bc:ee:22:c0:41:bc:70:c0:1f:20:85:8b:27:38:05:75:
5c:37:8d:34:2b:d6:b2:27:c5:f2:6b:dd:18:25:93:56:d1:de:
59:58:9a:73:a9:b3:65:98:11:05:14:50:9d:b4:23:10:cd:4a:
0d:14:10:98:d8:f4:39:a4:90:14:d9:9f:58:aa:0f:22:8b:cb:
4c:6a:79:ea:a0:91:c0:66:4e:fe:64:ec:dc:5c:25:94:b5:64:
5e:9d:eb:c5:8d:c0:ef:87:26:19:42:46:7c:2b:2b:b8:22:80:
37:d1:d0:32:2d:23:ff:bb:63:c0:c7:02:6d:e7:e2:6e:2a:9c:
22:75:e1:2e:c7:7a:e4:68:80:3b:dc:10:27:f2:db:d9:76:b1:
c6:d6:aa:c8:86:89:ce:d9:8b:f8:67:c9:be:5c:17:1f:42:75:
14:c3:7c:05:a5:06:cf:a0:90:2c:93:e3:69:24:6d:01:00:4c:
bf:f9:25:ee:3e:16:af:72:8a:c8:af:0c:1b:b0:62:13:f1:22:
79:bc:59:5f:1f:66:80:51:fd:49:61:52:2d:29:18:d6:10:b1:
6f:c1:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:20 2026 by rpki-client