Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: 92gR8ELoOolDmlvXZRCJ081PjsDioGm7JxNHNkg0f98=
Subject key identifier: 95:31:65:12:76:C0:C1:65:98:6B:21:92:5F:2B:72:CD:1E:2A:77:12
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019F1A55F9E1893D71606273322A48E958E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 21:01:09 +0000
Manifest this update: Tue 30 Jun 2026 21:01:09 +0000
Manifest next update: Wed 01 Jul 2026 21:01:09 +0000
Files and hashes: 1: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (hash: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: SoQtTFNhv/nhKngioHiCamDeOgJ6N8XVr1YOQcExtSs=)
3: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (hash: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:55:f9:e1:89:3d:71:60:62:73:32:2a:48:e9:58:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jun 30 21:01:09 2026 GMT
Not After : Jul 1 21:01:09 2026 GMT
Subject: CN=9531651276c0c165986b21925f2b72cd1e2a7712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:6c:19:e3:7c:17:f0:45:30:e3:ad:c8:a5:
e7:ef:f2:b3:f5:2d:be:29:9e:20:80:29:eb:fd:e4:
83:48:90:01:e4:28:76:aa:8c:da:99:0a:27:e9:7a:
3b:fe:74:56:54:29:f5:a7:5c:d0:fe:c5:12:5a:7c:
19:c3:27:5a:ef:e1:76:49:0a:5d:01:05:1e:23:9c:
ed:93:2d:39:06:b8:fe:c5:b8:34:1e:35:5c:ab:e8:
19:6d:fa:1d:42:2b:3b:81:10:d3:b6:2f:f4:99:4b:
f5:ea:22:e3:f7:50:f3:ab:fe:26:42:b7:b2:e4:29:
c8:2b:7e:3a:94:84:6f:ca:b7:42:71:0e:e2:02:08:
78:59:fc:94:4f:bd:a3:83:c1:67:7a:96:b8:09:13:
56:d6:88:01:fe:04:ec:25:37:7e:7f:88:24:3c:b2:
3d:02:a0:9b:4b:0a:39:7a:71:a7:20:80:84:5c:b8:
1c:70:16:16:5c:42:e3:44:54:19:bd:6d:76:9d:e5:
15:7a:34:b2:84:cb:37:a9:ff:85:87:0a:02:5f:8f:
79:f1:01:95:e2:ad:7d:6a:43:0c:1c:6e:ba:f7:7a:
63:6c:2d:36:92:47:7d:13:be:53:1b:a8:c0:f7:79:
fd:af:c6:84:28:16:f8:45:fe:32:5f:8e:b9:53:45:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:31:65:12:76:C0:C1:65:98:6B:21:92:5F:2B:72:CD:1E:2A:77:12
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e5:fa:b0:e3:95:05:6f:d0:71:18:8c:be:3e:61:d6:05:57:
19:67:cc:c6:2c:f4:4a:e4:24:d2:0b:95:52:7f:81:65:89:ad:
c2:31:26:a2:ab:54:d0:38:c4:c7:09:a8:ac:cf:6a:df:ff:fb:
37:5a:f4:5f:90:b3:69:f9:c2:56:bc:94:8f:34:27:b9:52:d1:
9e:9c:8f:e3:b1:c2:76:6c:ea:0a:91:6c:dd:ac:b0:80:fc:fc:
f1:9a:86:53:46:2b:0d:e7:97:e7:8f:1c:4b:b9:76:88:d8:3b:
2e:6a:23:78:62:bb:a7:74:d7:7c:a8:6f:38:57:da:68:13:96:
53:1d:23:ee:b1:cf:13:74:00:7b:e2:45:d4:65:e4:61:23:8a:
ae:f4:53:35:1f:74:7d:1b:5d:16:39:7e:6b:16:07:3c:17:7a:
0f:76:de:21:7c:1e:8e:6c:4c:6c:7a:45:05:c2:f6:2d:00:8d:
ae:af:af:5e:bb:b7:80:ae:f1:78:4c:56:c4:0f:f3:80:b9:c2:
3d:26:07:c6:37:10:fb:b8:0b:8d:58:93:ac:5b:05:9f:5c:80:
db:a1:7d:45:0a:05:b4:29:cb:fa:c9:48:16:05:5d:a9:e3:d2:
52:e9:b5:96:22:21:21:93:90:4c:ec:1c:4a:ef:b1:90:5d:12:
56:0a:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:20:00 2026 by rpki-client