Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: hpuTkWtlJG5VJTQsCI+0EWQ1YcAZt+1A14Nvbq1p3VE=
Subject key identifier: 5D:DD:ED:60:56:AD:7D:26:54:65:60:2C:B7:28:5D:9C:D4:05:1A:B7
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019E30A969CF49263B546F32E4CC0F47CB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 12:01:09 +0000
Manifest this update: Sat 16 May 2026 12:01:09 +0000
Manifest next update: Sun 17 May 2026 12:01:09 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: lH0vsEFGUaUt2l3B2PUSWBfGGWf+E1L0+G+uW/1kDpQ=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:69:cf:49:26:3b:54:6f:32:e4:cc:0f:47:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: May 16 12:01:09 2026 GMT
Not After : May 17 12:01:09 2026 GMT
Subject: CN=5ddded6056ad7d265465602cb7285d9cd4051ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:d7:3b:6a:4e:78:21:fc:ca:ec:8e:e4:07:
a6:b3:c2:0d:ce:72:30:f0:61:fe:03:7e:fe:29:15:
3e:4b:86:94:6d:93:f3:7d:30:66:59:a8:0d:04:a6:
96:52:1c:c6:03:7d:4d:ac:45:bc:65:3e:e1:0e:f5:
bd:9b:6b:45:f7:8e:e2:f2:e3:75:ca:de:ed:1e:93:
ac:37:29:b3:87:2c:e9:08:28:c1:ac:e3:f0:af:59:
62:b5:a4:2a:60:26:b0:f0:62:8a:a0:ec:d5:8d:7f:
88:da:1f:fd:d4:63:ae:bd:7d:a4:b0:64:c5:d0:02:
88:c0:cf:9b:57:7d:30:f6:61:cd:b4:70:12:05:4a:
16:87:0b:9b:d6:7e:a9:eb:a9:51:1a:91:6d:22:c7:
b6:92:8f:75:c6:07:76:17:8d:32:c5:02:1f:8c:7e:
24:13:d2:5f:22:7f:bf:c0:55:b7:90:25:a8:47:37:
87:14:90:45:8b:c0:1a:c1:7d:bd:7d:52:a0:7b:e7:
bf:9b:f0:75:0c:37:b8:5e:a7:b5:71:14:98:97:11:
3a:f4:67:41:fc:86:d0:c2:9c:d9:7d:6a:83:b6:1b:
c9:98:43:1c:9f:7d:41:f7:34:49:7c:5f:0e:9a:be:
f3:53:d4:d4:db:f6:6e:c5:f3:32:bb:89:f1:c3:b0:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:ED:60:56:AD:7D:26:54:65:60:2C:B7:28:5D:9C:D4:05:1A:B7
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:a9:9f:ba:e3:a1:17:bb:9a:18:72:a5:59:a6:1d:9e:9b:
12:40:23:98:6c:5c:f1:a7:36:4f:f2:f3:4b:cd:ef:ed:9c:83:
d5:7c:e1:54:f5:db:6d:1a:18:14:eb:30:61:0a:4e:38:1a:8c:
5b:1d:01:54:34:ca:f3:49:4a:6f:51:8b:0b:7e:aa:50:0e:51:
2a:e7:23:6c:cc:4e:c8:a1:58:6f:01:0c:96:ee:76:d7:a9:c8:
ab:36:ee:17:f5:c2:fc:c2:37:b9:c2:8c:ec:2a:03:45:ad:dc:
64:29:e4:bc:a8:9b:2e:af:4a:40:7d:be:c4:4b:15:18:f9:00:
f4:a0:0d:22:5a:5c:74:ba:aa:fd:93:ce:f2:6b:5e:d3:cb:8a:
15:98:13:9c:41:c9:da:63:9b:70:cc:30:c4:ac:41:f8:a6:96:
64:dc:3c:b0:e2:74:b7:e9:86:97:17:eb:48:ce:01:b2:9b:9c:
3e:ee:aa:32:0c:41:34:7e:14:67:5b:13:c5:0a:8f:27:3a:b3:
82:64:21:b0:fd:03:2a:59:4b:12:dc:7d:14:20:c2:6e:19:5e:
3f:bb:bb:97:9a:fc:d4:b7:08:7f:2d:e4:20:89:e1:ca:e0:10:
9b:fc:13:17:da:90:af:93:d7:4d:1f:1a:8a:f3:d9:e9:18:7d:
97:02:65:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqWnPSSY7VG8y5MwPR8tkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTBkNThkNzdiMGZhNWRjZWM0ZjQyYWU5NmYzNDdiYzgw
ZGFhM2UwHhcNMjYwNTE2MTIwMTA5WhcNMjYwNTE3MTIwMTA5WjAzMTEwLwYDVQQD
Eyg1ZGRkZWQ2MDU2YWQ3ZDI2NTQ2NTYwMmNiNzI4NWQ5Y2Q0MDUxYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ3XO2pOeCH8yuyO5Aems8INznIw
8GH+A37+KRU+S4aUbZPzfTBmWagNBKaWUhzGA31NrEW8ZT7hDvW9m2tF947i8uN1
yt7tHpOsNymzhyzpCCjBrOPwr1litaQqYCaw8GKKoOzVjX+I2h/91GOuvX2ksGTF
0AKIwM+bV30w9mHNtHASBUoWhwub1n6p66lRGpFtIse2ko91xgd2F40yxQIfjH4k
E9JfIn+/wFW3kCWoRzeHFJBFi8AawX29fVKge+e/m/B1DDe4Xqe1cRSYlxE69GdB
/IbQwpzZfWqDthvJmEMcn31B9zRJfF8Omr7zU9TU2/ZuxfMyu4nxw7A8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3d7WBWrX0mVGVgLLcoXZzUBRq3MB8GA1UdIwQY
MBaAFDJQ1Y13sPpdzsT0KulvNHvIDao+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUt
M2UzMGE0YzRiODI2LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUtM2UzMGE0YzRiODI2
LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIupn7rj
oRe7mhhypVmmHZ6bEkAjmGxc8ac2T/LzS83v7ZyD1XzhVPXbbRoYFOswYQpOOBqM
Wx0BVDTK80lKb1GLC36qUA5RKucjbMxOyKFYbwEMlu5216nIqzbuF/XC/MI3ucKM
7CoDRa3cZCnkvKibLq9KQH2+xEsVGPkA9KANIlpcdLqq/ZPO8mte08uKFZgTnEHJ
2mObcMwwxKxB+KaWZNw8sOJ0t+mGlxfrSM4BspucPu6qMgxBNH4UZ1sTxQqPJzqz
gmQhsP0DKllLEtx9FCDCbhleP7u7l5r81LcIfy3kIInhyuAQm/wTF9qQr5PXTR8a
ivPZ6Rh9lwJlUA==
-----END CERTIFICATE-----
Generated at Sat May 16 20:23:22 2026 by rpki-client