
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: Ymah5SCPFGx6ScDP/gm1gwHegg96BwQnxEDRoym7gkw=
Subject key identifier: F4:3F:43:E8:EC:4B:43:32:8E:C0:22:3B:35:19:9D:3F:72:B4:E3:46
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019FF9B60DDB2CD8BD6CCCBD4BFFCD0E6847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 13DE
Signing time: Thu 13 Aug 2026 06:01:25 +0000
Manifest this update: Thu 13 Aug 2026 06:01:25 +0000
Manifest next update: Fri 14 Aug 2026 06:01:25 +0000
Files and hashes: 1: KNVzSibwcIeJsoSsffQEDCnxWf0.asa (hash: y8bkznZSy/A3ZDayRMz8nCgtieLCBzH6L8q9ZF7Ujzk=)
2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: L4XnxXX7hZqkVTuyc1DexkFMIYzJU1Avk1N05dzQLS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:0d:db:2c:d8:bd:6c:cc:bd:4b:ff:cd:0e:68:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Aug 13 06:01:25 2026 GMT
Not After : Aug 14 06:01:25 2026 GMT
Subject: CN=f43f43e8ec4b43328ec0223b35199d3f72b4e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:ff:00:22:ad:74:1e:b5:f5:a8:91:77:4d:
3f:ca:90:05:db:21:a8:c2:7c:0f:44:e0:e8:86:00:
66:40:92:91:42:ca:9a:50:3d:d6:53:40:67:5d:c7:
a6:d9:31:76:44:6a:bf:af:08:04:77:b6:95:94:99:
9f:64:48:f7:62:8d:d1:10:0e:b1:83:d6:cb:e9:c5:
45:76:bc:89:a9:c2:c7:c7:fe:7f:1f:da:98:8d:04:
72:3d:68:f2:b5:60:73:b7:5e:2b:29:0b:40:2b:e9:
03:4e:90:8f:98:9b:92:83:b1:7a:bb:5c:86:bd:44:
80:c5:57:54:03:75:c3:61:1e:e0:ea:6e:f1:25:37:
56:bc:38:f3:32:bb:ad:b0:e8:4b:96:e3:fd:ca:8f:
15:ca:55:95:58:75:94:32:8d:51:38:50:bb:8b:88:
4a:c6:2c:b2:f4:c0:ad:a5:f9:51:8e:e6:be:de:2a:
38:ec:1c:8d:d8:de:7b:a2:73:9f:62:83:ff:c7:40:
7e:30:35:a1:6e:12:2a:15:50:e1:7f:2f:f7:ce:0e:
8d:6b:bb:e4:02:16:91:3d:6e:7e:ec:59:0c:ff:40:
d2:b6:6a:aa:b7:e7:34:74:2e:ce:d1:68:74:5a:2d:
fd:85:63:e4:be:4a:c8:67:12:7e:c1:f7:9e:f8:d6:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:43:E8:EC:4B:43:32:8E:C0:22:3B:35:19:9D:3F:72:B4:E3:46
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:f9:dd:90:89:bc:22:22:c2:e8:05:a7:6b:91:85:c7:a0:
eb:00:aa:87:f8:f6:c3:4d:1e:2b:ab:58:dd:21:f1:e4:5c:a4:
ce:86:58:c7:48:c7:91:50:33:22:4b:45:06:4f:fe:31:a7:7c:
93:36:d1:a8:e2:7e:52:7f:92:bb:dd:2f:05:8f:0d:3b:06:f1:
51:2c:d3:98:d8:ac:85:75:95:02:67:4e:9f:06:30:ae:70:87:
a2:e6:0b:1c:4b:59:d7:e4:1c:cd:41:11:a3:9c:ee:21:14:6f:
76:61:42:d5:28:5f:94:f3:58:f3:e2:72:7e:5a:7c:d5:12:f1:
1a:c8:a7:8d:c7:76:a3:e6:7b:7c:ee:d4:12:c5:93:1d:f5:2b:
5e:84:8c:31:b5:36:e4:03:74:3d:16:6a:53:67:09:2d:14:02:
bc:7b:85:96:aa:93:94:4c:38:2c:26:03:3a:cc:4f:ad:1b:06:
22:79:01:87:73:c5:64:c2:a7:71:d7:82:86:31:69:8e:68:df:
37:37:f2:3c:70:ef:3a:af:db:6f:d4:ac:cd:b3:b4:e0:8c:15:
03:0f:6c:28:00:ef:4f:e8:61:57:11:77:ec:cd:fa:89:cf:a7:
c0:91:d9:33:2f:3b:35:76:62:be:b6:9d:1b:0c:42:eb:79:39:
3c:09:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:58:57 2026 by rpki-client