Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: mHlcyQvaCd4UAHoMofeUr0TjpB0CSInlSzNHlvFgn0c=
Subject key identifier: 66:7C:C0:B2:03:32:A7:0F:28:D2:7F:69:3B:AB:CF:2F:82:D6:53:29
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019D3789035F3E69743035A2656DF6981E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:19 +0000
Manifest this update: Sun 29 Mar 2026 03:00:19 +0000
Manifest next update: Mon 30 Mar 2026 03:00:19 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: o2TY9njYllkhWwZ7JZDgEM0ZJUGNygPU8QygtyhA4lo=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:03:5f:3e:69:74:30:35:a2:65:6d:f6:98:1e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Mar 29 03:00:19 2026 GMT
Not After : Mar 30 03:00:19 2026 GMT
Subject: CN=667cc0b20332a70f28d27f693babcf2f82d65329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:b2:f9:11:dc:1b:d2:d6:a6:4a:09:63:f5:
a5:c3:4c:59:28:c6:ae:05:cc:6b:a7:38:69:f5:7b:
27:e6:84:c2:5c:47:75:f3:ff:91:f4:7c:66:e9:63:
4d:29:ea:1b:99:93:01:8e:59:60:c1:5f:f2:8a:6f:
50:65:3d:da:99:2e:48:84:1a:c6:93:c9:92:57:81:
82:21:24:67:bd:6c:00:a1:2b:cb:bd:21:d6:ce:ec:
0d:85:4b:f8:23:7e:d2:29:eb:8b:09:f5:a2:f5:a5:
95:62:66:64:92:1a:17:e0:ca:98:5c:d5:ee:a0:75:
2d:54:30:31:9d:30:14:c0:5c:ac:2c:a5:19:94:07:
a2:31:95:4d:06:77:fc:99:0a:c9:6c:14:24:a2:de:
30:4e:ce:fd:11:13:a8:6c:5a:92:9d:c9:86:0d:64:
74:6e:8b:fc:b2:a0:91:dc:84:40:c6:c5:dd:62:be:
14:a9:23:11:83:c1:b3:c3:1f:f6:f0:3e:15:92:8d:
03:14:f7:84:24:7f:dc:bd:04:8b:d8:2e:d9:d4:03:
2b:41:63:2a:8f:56:62:ae:58:86:fc:72:c6:cd:fd:
a8:26:2a:48:a9:6d:3b:0d:d8:07:61:8e:c7:39:13:
c6:ee:3a:2e:04:66:4f:ac:bd:9c:bf:f8:9e:06:c2:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7C:C0:B2:03:32:A7:0F:28:D2:7F:69:3B:AB:CF:2F:82:D6:53:29
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8e:00:fd:c2:f9:ff:c2:a0:2d:96:96:fe:44:c0:13:0b:1f:
3e:c6:b5:c8:10:7f:3f:5b:a8:6a:7e:c1:60:6e:32:2a:26:91:
9e:10:44:d5:db:0b:50:90:be:94:a8:aa:7c:b4:c1:e0:bb:6b:
84:18:8e:ed:b5:03:fd:f8:68:70:b1:78:fd:c6:c9:e0:3b:69:
e0:4d:1b:65:1e:39:4b:de:df:18:06:a0:04:54:f8:cd:17:0a:
59:cc:8a:e8:6f:ff:90:31:75:bc:1f:bc:4d:69:b4:66:4d:36:
2d:02:33:2e:c6:d8:6a:3e:ad:72:ba:da:5d:cc:2a:ca:c3:55:
12:12:bb:1b:f9:c1:df:7e:22:03:13:ac:8f:48:e5:30:72:ba:
1a:c8:44:60:f9:e5:12:bd:68:bd:f1:ac:42:02:49:10:36:4a:
9f:ee:86:17:4f:5c:93:19:f5:34:c4:15:8a:f6:8e:9c:4a:5d:
93:a5:de:0d:bd:a0:04:85:d7:8f:22:90:b5:5a:40:b0:34:3c:
66:84:e4:7a:90:1e:b9:ca:fa:f3:d6:1f:3a:45:bb:b6:a4:8f:
e8:05:20:5a:0b:48:52:2c:ff:19:27:5a:c8:24:60:a0:6b:f8:
2f:7d:e1:23:f9:f5:4e:e2:d1:f5:27:82:35:a9:b8:24:48:ac:
ce:ea:d7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iQNfPml0MDWiZW32mB5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTBkNThkNzdiMGZhNWRjZWM0ZjQyYWU5NmYzNDdiYzgw
ZGFhM2UwHhcNMjYwMzI5MDMwMDE5WhcNMjYwMzMwMDMwMDE5WjAzMTEwLwYDVQQD
Eyg2NjdjYzBiMjAzMzJhNzBmMjhkMjdmNjkzYmFiY2YyZjgyZDY1MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Oy+RHcG9LWpkoJY/Wlw0xZKMau
Bcxrpzhp9Xsn5oTCXEd18/+R9Hxm6WNNKeobmZMBjllgwV/yim9QZT3amS5IhBrG
k8mSV4GCISRnvWwAoSvLvSHWzuwNhUv4I37SKeuLCfWi9aWVYmZkkhoX4MqYXNXu
oHUtVDAxnTAUwFysLKUZlAeiMZVNBnf8mQrJbBQkot4wTs79EROobFqSncmGDWR0
bov8sqCR3IRAxsXdYr4UqSMRg8Gzwx/28D4Vko0DFPeEJH/cvQSL2C7Z1AMrQWMq
j1ZirliG/HLGzf2oJipIqW07DdgHYY7HORPG7jouBGZPrL2cv/ieBsKKAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ8wLIDMqcPKNJ/aTurzy+C1lMpMB8GA1UdIwQY
MBaAFDJQ1Y13sPpdzsT0KulvNHvIDao+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUt
M2UzMGE0YzRiODI2LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUtM2UzMGE0YzRiODI2
LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn44A/cL5
/8KgLZaW/kTAEwsfPsa1yBB/P1uoan7BYG4yKiaRnhBE1dsLUJC+lKiqfLTB4Ltr
hBiO7bUD/fhocLF4/cbJ4Dtp4E0bZR45S97fGAagBFT4zRcKWcyK6G//kDF1vB+8
TWm0Zk02LQIzLsbYaj6tcrraXcwqysNVEhK7G/nB334iAxOsj0jlMHK6GshEYPnl
Er1ovfGsQgJJEDZKn+6GF09ckxn1NMQVivaOnEpdk6XeDb2gBIXXjyKQtVpAsDQ8
ZoTkepAeucr689YfOkW7tqSP6AUgWgtIUiz/GSdayCRgoGv4L33hI/n1TuLR9SeC
Nam4JEiszurX+Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:02 2026 by rpki-client