Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
File: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft (raw, json)
Hash identifier: v79GoTGvtS2MPCSunIZi6iH9/S7ceDcfZcXiKjLR/KY=
Subject key identifier: 4E:A5:76:2B:4B:15:8D:43:DD:0F:6B:65:6D:38:05:C7:6B:72:E7:60
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial: 019D382EB49D849E02F182EBDF49F18B1004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 06:01:18 +0000
Manifest this update: Sun 29 Mar 2026 06:01:18 +0000
Manifest next update: Mon 30 Mar 2026 06:01:18 +0000
Files and hashes: 1: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl (hash: kxVoYP7BYSJUSG+1Gu/zEjHAHmWajxPZskrWONOmrvY=)
2: lKGOd5BHzMG9lnuCN04rKWjeYTY.roa (hash: k6Z+gJiAn4RiySPTJPoY7GBm1+WgZnuRGtskfS6kogI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b4:9d:84:9e:02:f1:82:eb:df:49:f1:8b:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
Validity
Not Before: Mar 29 06:01:18 2026 GMT
Not After : Mar 30 06:01:18 2026 GMT
Subject: CN=4ea5762b4b158d43dd0f6b656d3805c76b72e760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:5e:42:aa:8e:fd:dc:8e:b1:12:d8:85:d7:
6c:38:14:bd:9d:2e:f9:04:dd:0b:53:5f:2c:b3:bf:
44:c6:93:16:b7:ef:a3:7e:0c:85:ce:8e:e4:bd:d9:
fb:ae:6a:77:6e:f4:25:29:21:f6:ba:df:20:37:59:
45:53:0e:b5:05:43:d2:5d:e7:66:07:f9:7c:57:2f:
e1:de:66:9a:5e:e1:98:fa:28:df:ca:c4:af:1b:26:
65:aa:e9:95:bc:e7:7d:93:72:4c:14:af:48:da:ea:
57:a5:32:ca:e7:19:cb:92:0f:76:10:f8:1a:75:6e:
2f:47:16:3f:98:ae:e8:db:fd:9c:08:3e:d7:51:0f:
06:4b:35:98:41:08:41:7e:42:14:6a:d0:56:93:bd:
67:74:bb:f5:b2:d3:f4:0c:a4:85:cf:49:15:04:87:
6c:6e:19:dc:2d:84:5c:d9:91:70:9c:0d:73:c4:e0:
ae:07:8c:a0:40:77:ad:83:2c:7e:46:ce:23:3c:4b:
fb:eb:75:cc:6f:cc:84:bc:09:84:a1:59:9b:e7:73:
45:09:98:3e:03:a5:30:19:ad:b9:7e:4b:84:89:ae:
11:31:9f:81:db:4f:1c:8a:a0:b2:84:ff:09:73:4d:
56:04:3c:25:ee:2e:54:87:38:4b:98:de:a3:a5:98:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A5:76:2B:4B:15:8D:43:DD:0F:6B:65:6D:38:05:C7:6B:72:E7:60
X509v3 Authority Key Identifier:
keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6a:29:b2:84:56:21:fa:6f:25:64:c8:f5:0d:87:dc:7c:4b:
d1:5f:d4:4a:b2:89:58:80:4c:35:28:e4:fe:44:a6:8a:8b:a5:
c6:48:30:79:69:ac:b9:66:6f:c6:b2:40:ba:c5:73:87:bc:a7:
17:10:88:aa:43:1a:1b:d8:fc:b2:d0:2d:7c:fb:c5:5e:43:de:
77:6c:d2:5b:62:27:74:65:a7:5a:a8:8a:ac:71:4c:5f:57:18:
8b:3e:dd:87:8a:e4:c6:0b:74:c2:b7:12:a5:ee:11:91:5c:f5:
de:bd:9e:b0:55:a1:1b:87:23:dc:e0:81:e8:da:78:ec:4d:6f:
25:35:c1:95:d2:97:52:c2:39:38:fc:15:dc:39:27:55:93:b6:
f4:9c:39:29:d3:ad:23:6d:36:c7:5f:91:a9:d2:ce:e9:86:c0:
9c:98:96:72:bc:ed:cf:a2:43:04:fe:47:02:67:8f:1f:4a:e1:
d9:9a:5a:d6:1f:9f:62:1b:c6:a5:0d:28:63:41:4c:7b:1b:9e:
ef:9a:f7:b9:1f:13:46:37:1d:5d:7b:63:cc:cc:81:d8:8d:05:
dd:cc:49:2d:e9:c0:a0:71:4d:16:a2:ad:72:6d:83:65:34:60:
68:c4:07:c6:db:7b:e6:4e:05:00:da:d1:d9:c0:55:e5:78:24:
1d:8a:52:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LrSdhJ4C8YLr30nxixAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA3ZjllMDc4YmU4OTkzMmU5MWIyM2FjZjg4MmFiNDY3
YzZhYTcwHhcNMjYwMzI5MDYwMTE4WhcNMjYwMzMwMDYwMTE4WjAzMTEwLwYDVQQD
Eyg0ZWE1NzYyYjRiMTU4ZDQzZGQwZjZiNjU2ZDM4MDVjNzZiNzJlNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NdeQqqO/dyOsRLYhddsOBS9nS75
BN0LU18ss79ExpMWt++jfgyFzo7kvdn7rmp3bvQlKSH2ut8gN1lFUw61BUPSXedm
B/l8Vy/h3maaXuGY+ijfysSvGyZlqumVvOd9k3JMFK9I2upXpTLK5xnLkg92EPga
dW4vRxY/mK7o2/2cCD7XUQ8GSzWYQQhBfkIUatBWk71ndLv1stP0DKSFz0kVBIds
bhncLYRc2ZFwnA1zxOCuB4ygQHetgyx+Rs4jPEv763XMb8yEvAmEoVmb53NFCZg+
A6UwGa25fkuEia4RMZ+B208ciqCyhP8Jc01WBDwl7i5UhzhLmN6jpZjwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6lditLFY1D3Q9rZW04BcdrcudgMB8GA1UdIwQY
MBaAFDJQf54Hi+iZMukbI6z4gqtGfGqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEt
OWQxOTZhMGUzMmEwLzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEtOWQxOTZhMGUzMmEw
LzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2opsoRW
IfpvJWTI9Q2H3HxL0V/USrKJWIBMNSjk/kSmioulxkgweWmsuWZvxrJAusVzh7yn
FxCIqkMaG9j8stAtfPvFXkPed2zSW2IndGWnWqiKrHFMX1cYiz7dh4rkxgt0wrcS
pe4RkVz13r2esFWhG4cj3OCB6Np47E1vJTXBldKXUsI5OPwV3DknVZO29Jw5KdOt
I202x1+RqdLO6YbAnJiWcrztz6JDBP5HAmePH0rh2Zpa1h+fYhvGpQ0oY0FMexue
75r3uR8TRjcdXXtjzMyB2I0F3cxJLenAoHFNFqKtcm2DZTRgaMQHxtt75k4FANrR
2cBV5XgkHYpSgw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client