Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File: ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier: 41u3MSUtoYNgLf50EAt8m8kBFx59ruyRs6uYRpiAULA=
Subject key identifier: 47:A2:D9:17:B9:9D:74:82:1E:DB:01:C7:00:54:09:B0:5A:66:3B:62
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer: /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial: 019D37C03D2B82F161421198745EC6B42BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number: 071C
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: 5_csqvkktJBZAA3nhx1y4Q3XeS4.roa (hash: GAIVCEQBXdTwic9D+gPxQqB/RbqD3kqUWwWSbtrlvQU=)
2: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: uT3ayfGZ2/ozAspa5s5ifjzlb+MGSKsq1iPGeJJIxXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3d:2b:82:f1:61:42:11:98:74:5e:c6:b4:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=47a2d917b99d74821edb01c7005409b05a663b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:bd:07:25:9a:16:dd:ff:da:4d:b2:97:58:
9a:3e:0a:c2:0c:20:fd:cc:d5:46:b8:b5:84:31:08:
4f:06:9e:b4:78:11:cb:22:7b:6a:5a:ef:5b:b0:f4:
5a:8d:b1:fb:9b:6a:18:5b:69:66:76:3f:dd:e3:fd:
60:85:7e:57:a4:1a:2e:7d:ad:8d:dd:c1:18:9d:79:
be:ab:f0:7d:7f:41:f3:ee:7c:05:af:f9:ce:7b:e3:
31:81:12:01:63:84:ac:87:b2:7d:70:1e:d4:db:db:
2e:24:e5:71:03:85:0a:9e:36:28:0a:fc:bc:ab:af:
68:61:d6:37:4d:b6:28:df:76:0a:fc:1d:be:dd:42:
79:54:d3:ce:d1:d5:0b:fb:1a:6c:0e:f4:8f:24:bb:
ce:df:aa:77:c0:95:9d:d9:c8:80:0b:23:98:ea:7a:
a4:a0:05:6d:50:da:5e:1b:aa:80:ec:6c:33:db:3f:
05:b0:f3:52:10:31:dd:8c:22:92:f1:65:ff:8e:84:
1f:2a:36:52:35:c7:19:ac:89:ae:44:84:8f:02:ce:
9e:27:da:bc:54:3f:b5:b6:fc:78:ac:ff:3a:3e:0c:
55:61:82:73:8a:7e:db:86:26:51:b9:fa:12:bb:4b:
97:e9:fc:73:2f:4e:e7:a0:25:6d:3f:a3:a5:ad:13:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:D9:17:B9:9D:74:82:1E:DB:01:C7:00:54:09:B0:5A:66:3B:62
X509v3 Authority Key Identifier:
keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f0:54:2f:30:3a:ca:22:16:d6:64:7d:f0:12:d2:e5:c9:51:
1c:32:6b:55:78:5c:2b:3d:e2:8c:25:37:b2:e8:bf:30:32:1b:
f3:72:b3:59:a2:c9:4c:f1:b9:43:90:68:be:96:b5:cf:61:b7:
7c:70:e8:e2:88:8c:83:38:ce:25:a6:ec:13:28:89:82:60:44:
c7:a8:d1:8d:a1:d0:b3:6c:06:cc:2c:7e:e9:c1:89:df:c8:01:
97:22:00:55:55:96:ad:11:f9:cb:2d:5e:95:26:40:c8:16:06:
9c:20:0e:29:81:5b:03:a2:8c:13:72:50:d3:1c:b4:b2:a4:f3:
24:14:42:a4:0d:0e:4c:85:dc:34:8f:3c:21:16:17:df:7e:7c:
2a:33:2b:d5:ef:6a:9e:a4:76:53:e4:ce:27:73:da:8e:60:bb:
9d:5b:d2:bb:08:1f:0d:d4:ec:fe:c0:e3:a9:f3:07:24:2c:17:
7a:fa:17:45:29:2c:b3:8d:55:96:e5:79:24:38:2c:45:09:b8:
0b:bd:b0:ff:fb:42:07:8c:11:c5:ac:d4:26:c7:a7:da:82:87:
1f:86:7f:93:b3:1f:d4:4f:cd:ae:95:ea:08:8c:25:d2:49:b6:
a7:e3:0a:6f:ee:d2:95:9c:68:8e:a5:2a:6c:97:08:02:55:b2:
f8:76:44:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wD0rgvFhQhGYdF7GtCuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWZkMzY2ZmU3NmU5OTk4NmY3NjgwZGZjY2YzZGNiOTRk
NmRlMTQwHhcNMjYwMzI5MDQwMDM4WhcNMjYwMzMwMDQwMDM4WjAzMTEwLwYDVQQD
Eyg0N2EyZDkxN2I5OWQ3NDgyMWVkYjAxYzcwMDU0MDliMDVhNjYzYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg69ByWaFt3/2k2yl1iaPgrCDCD9
zNVGuLWEMQhPBp60eBHLIntqWu9bsPRajbH7m2oYW2lmdj/d4/1ghX5XpBoufa2N
3cEYnXm+q/B9f0Hz7nwFr/nOe+MxgRIBY4Ssh7J9cB7U29suJOVxA4UKnjYoCvy8
q69oYdY3TbYo33YK/B2+3UJ5VNPO0dUL+xpsDvSPJLvO36p3wJWd2ciACyOY6nqk
oAVtUNpeG6qA7Gwz2z8FsPNSEDHdjCKS8WX/joQfKjZSNccZrImuRISPAs6eJ9q8
VD+1tvx4rP86PgxVYYJzin7bhiZRufoSu0uX6fxzL07noCVtP6OlrRMbeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEei2Re5nXSCHtsBxwBUCbBaZjtiMB8GA1UdIwQY
MBaAFJpf02b+dumZhvdoDfzPPcuU1t4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxfVFp2NTI2Wm1HOTJnTl9NODl5NVRXM2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85NDM0MjYtYTVlZS00N2U5LWFkODIt
NzhmOTJlYjFiNjJmLzEvbWxfVFp2NTI2Wm1HOTJnTl9NODl5NVRXM2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85NDM0MjYtYTVlZS00N2U5LWFkODItNzhmOTJlYjFiNjJm
LzEvbWxfVFp2NTI2Wm1HOTJnTl9NODl5NVRXM2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfBULzA6
yiIW1mR98BLS5clRHDJrVXhcKz3ijCU3sui/MDIb83KzWaLJTPG5Q5Bovpa1z2G3
fHDo4oiMgzjOJabsEyiJgmBEx6jRjaHQs2wGzCx+6cGJ38gBlyIAVVWWrRH5yy1e
lSZAyBYGnCAOKYFbA6KME3JQ0xy0sqTzJBRCpA0OTIXcNI88IRYX3358KjMr1e9q
nqR2U+TOJ3PajmC7nVvSuwgfDdTs/sDjqfMHJCwXevoXRSkss41VluV5JDgsRQm4
C72w//tCB4wRxazUJsen2oKHH4Z/k7Mf1E/NrpXqCIwl0km2p+MKb+7SlZxojqUq
bJcIAlWy+HZEyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:12 2026 by rpki-client