Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: SPJCywJ4Y/aR85H7hzyjElBILC7h2N89a1eJy3E7u8Q=
Subject key identifier: 97:BF:F0:91:C7:93:D0:7B:AF:71:94:1B:3A:E2:89:18:D4:E7:FB:01
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 01A155F7BC57EF7EDBFBC530AE97D5C70A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 21:01:01 +0000
Manifest this update: Mon 19 Oct 2026 21:01:01 +0000
Manifest next update: Tue 20 Oct 2026 21:01:01 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: PhTjIkLIZu2v0IofJcXZrnXw07kTxsR75+i+K31xgeE=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f7:bc:57:ef:7e:db:fb:c5:30:ae:97:d5:c7:0a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Oct 19 21:01:01 2026 GMT
Not After : Oct 20 21:01:01 2026 GMT
Subject: CN=97bff091c793d07baf71941b3ae28918d4e7fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:72:f1:45:24:ef:28:0d:f3:ae:dc:9d:5a:
1e:0a:3f:d9:6b:19:56:b9:59:79:a7:09:a1:3b:dd:
55:f3:96:12:38:24:84:3f:64:de:b9:85:9e:d3:8d:
32:30:a4:db:96:07:57:95:e4:05:0b:4c:d4:11:88:
a6:16:38:5f:14:5b:86:76:fc:72:4a:1a:5f:87:2e:
32:f1:69:9c:c6:90:97:39:c4:41:d1:cc:80:3c:a9:
9c:a3:60:a8:99:63:c2:e0:b4:e9:fe:3d:4b:d8:52:
2b:4e:1c:4f:b6:51:18:fe:ad:ff:14:76:af:cf:c2:
9a:d1:37:f4:7c:8c:1d:30:63:3f:54:70:d5:9d:3d:
d5:60:14:55:fd:ab:99:a8:26:f6:39:5b:1f:fc:f3:
50:de:93:b8:58:8a:ef:ba:b1:57:2e:68:ea:bf:97:
8e:d0:fb:c9:9c:14:f4:41:cf:d6:1a:27:e9:c3:d1:
75:65:45:03:00:2e:24:da:d7:d9:3c:1f:e8:26:7d:
10:97:3d:62:0d:d7:43:dd:45:2b:9e:9e:1c:e7:91:
ea:cc:51:75:f9:ef:ca:ff:98:08:ad:a9:ee:c4:f8:
b7:fa:b9:97:63:9e:b1:55:b5:75:b8:6e:d3:9e:f0:
c1:2e:e3:ec:c8:e6:30:6a:d3:68:25:6c:30:e4:f8:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:F0:91:C7:93:D0:7B:AF:71:94:1B:3A:E2:89:18:D4:E7:FB:01
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:04:d6:f6:3a:64:6f:bd:9d:70:1c:9e:d7:de:f6:5d:d8:14:
49:cf:de:0d:bb:bb:d3:a3:08:46:12:b0:d5:93:fb:d2:fa:64:
9d:23:4c:ea:77:a3:7e:3c:35:e9:ed:b9:59:46:a6:9b:26:67:
11:d4:03:af:d0:54:51:01:e8:9c:0e:3d:86:37:69:a8:9c:b6:
00:fa:c4:f1:c0:c2:6f:ae:a1:64:05:98:20:25:e0:94:0b:23:
ad:1c:28:a7:d6:00:ef:a9:b5:3a:81:c3:97:a3:34:e5:7d:44:
df:a5:cd:9c:5d:34:34:dd:f5:1f:57:10:52:66:24:56:3a:f5:
e1:d4:5b:72:2e:e3:64:f4:27:5a:c3:f8:d2:02:89:ee:16:90:
0b:01:5e:83:11:32:f5:07:6e:f3:3f:7a:59:cb:d8:ce:2d:3f:
31:a4:6a:92:df:b7:34:64:4c:b4:4e:45:31:79:f5:0a:9e:d1:
f3:50:9b:24:58:c1:54:3a:7d:32:c3:49:57:50:c3:d3:29:d8:
ec:e1:f2:89:a3:47:0f:20:b8:1e:d7:4f:88:e9:a9:fe:9b:3a:
70:76:67:b5:f6:65:60:ea:41:a1:ce:9b:84:09:d2:6a:22:00:
c0:c6:40:3e:75:d4:0d:77:a3:86:ce:a9:df:23:f1:92:15:75:
ab:94:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:59:37 2026 by rpki-client