Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.mft
File: mlhgQ0WdqFb7LSsadj6lbhZGcRE.mft (raw, json)
Hash identifier: iT0QE4pD8cJi/QLmYXM9qUn4OA57Eno/F6vdHogM6bk=
Subject key identifier: 7A:41:4A:30:4B:9F:D8:71:4B:1E:93:53:D9:D6:29:C7:CB:21:5F:0A
Authority key identifier: 9A:58:60:43:45:9D:A8:56:FB:2D:2B:1A:76:3E:A5:6E:16:46:71:11
Certificate issuer: /CN=9a586043459da856fb2d2b1a763ea56e16467111
Certificate serial: 019D3A8A6578135F150F29D8EDD09D8D5C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlhgQ0WdqFb7LSsadj6lbhZGcRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.mft
Manifest number: 0B
Signing time: Sun 29 Mar 2026 17:00:41 +0000
Manifest this update: Sun 29 Mar 2026 17:00:41 +0000
Manifest next update: Mon 30 Mar 2026 17:00:41 +0000
Files and hashes: 1: ZQXydve_JKp-rurhg8nSngve8PA.roa (hash: 6FWaOGU/DRpGXEfkBJvFZ9nK8hOIfWUXXko/99ThS9g=)
2: mlhgQ0WdqFb7LSsadj6lbhZGcRE.crl (hash: BT+wrtKCzJ1kkLwmA4TCbpn3M8N2wd9bVgnmKzH8wjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlhgQ0WdqFb7LSsadj6lbhZGcRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:65:78:13:5f:15:0f:29:d8:ed:d0:9d:8d:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a586043459da856fb2d2b1a763ea56e16467111
Validity
Not Before: Mar 29 17:00:41 2026 GMT
Not After : Mar 30 17:00:41 2026 GMT
Subject: CN=7a414a304b9fd8714b1e9353d9d629c7cb215f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:5d:98:57:ec:b3:7a:7d:be:93:25:84:ac:
94:62:83:b8:b4:3e:8a:49:e6:3b:98:b6:42:f2:08:
b5:4c:66:a1:18:46:44:0e:c6:ba:c1:c2:f0:21:d6:
60:56:e8:1b:c9:68:d1:01:34:e6:9c:3c:fd:85:e8:
a4:32:f4:83:e0:8a:d9:32:34:e5:e7:d4:b4:c2:11:
4a:da:9b:13:1f:c2:3a:76:54:9a:fa:e1:79:14:81:
ac:24:b2:33:b0:4c:f6:2f:89:d6:3a:39:07:6d:97:
73:74:62:ea:89:b3:b7:4a:ab:80:4c:90:2c:2c:0d:
3d:53:d9:be:dc:0c:13:f8:b1:4f:86:d1:ff:a4:cc:
59:b2:76:bf:1d:98:4a:cb:e1:81:49:46:68:8b:a4:
d4:cd:8e:e7:db:29:ce:1d:61:b9:2e:5e:3c:b7:00:
f9:7a:07:5a:19:f2:7d:9e:82:55:fc:29:ab:f8:94:
46:bc:73:0d:06:62:92:d4:35:92:f6:3d:47:b6:af:
a8:34:0f:15:01:96:37:5f:a8:01:1a:1c:9c:4f:75:
9d:cb:ee:07:a0:9d:eb:a2:50:ba:9b:3f:78:8d:d7:
8b:8a:e5:32:38:76:22:20:3c:fa:d3:1a:99:84:8c:
d6:cc:9d:6d:bf:f7:55:0e:7b:46:8d:dc:22:0f:4f:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:41:4A:30:4B:9F:D8:71:4B:1E:93:53:D9:D6:29:C7:CB:21:5F:0A
X509v3 Authority Key Identifier:
keyid:9A:58:60:43:45:9D:A8:56:FB:2D:2B:1A:76:3E:A5:6E:16:46:71:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlhgQ0WdqFb7LSsadj6lbhZGcRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f1f320-fade-4503-8c0b-ddd3b82c2017/1/mlhgQ0WdqFb7LSsadj6lbhZGcRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e1:48:ce:b1:f1:1d:cb:4a:d9:01:76:40:2a:17:4f:f9:e9:
ff:8b:d8:14:9f:1f:8b:b6:f2:81:26:b0:6c:2c:73:1e:72:2a:
67:cf:2f:61:a3:66:58:4f:fe:4c:d0:79:e9:14:88:1e:36:b8:
e6:dd:7e:b2:9c:4d:82:9d:43:d3:ee:70:83:01:01:24:b1:34:
b3:83:5d:ff:5b:40:7f:fa:45:e0:c6:89:ad:a4:03:57:e8:51:
d1:99:b4:70:49:6f:f7:94:ee:99:c9:b8:2a:28:ec:f4:fd:9e:
84:5e:c9:2e:62:af:cd:c1:a8:00:d6:dc:97:fa:3d:d5:b1:fe:
7a:56:b2:35:1e:7c:9b:6d:29:54:22:78:9a:27:0e:26:94:42:
37:b8:87:e9:00:61:fb:34:b1:e2:61:5e:d4:42:cb:28:f8:87:
ff:e4:b3:31:7a:3a:55:c3:52:aa:75:9f:1c:95:e4:9e:fa:bf:
14:8d:41:78:8a:b3:43:fb:4a:84:3b:95:23:53:b6:ad:32:3a:
a5:db:c5:09:62:80:5f:14:a7:bc:78:dd:a8:c2:f3:1a:9a:c5:
d6:de:a0:d5:0a:b3:d6:9d:f2:41:04:8c:28:aa:30:ab:21:f8:
cc:a2:ba:49:99:84:e1:09:00:1b:70:95:ee:00:b9:92:7e:6e:
c2:3a:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:27 2026 by rpki-client