Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File: mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier: U1kYXHGla3MbWcDf0zTxTB+IBZrywHgPKVoF4H0WW6Y=
Subject key identifier: 1C:06:88:B4:7F:8F:81:2C:E9:E8:94:D3:8D:E6:B1:95:6F:48:F9:D2
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer: /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial: 01A0E8F6BE81A8621255AC9A6DF55C58D57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number: 015D
Signing time: Mon 28 Sep 2026 17:01:19 +0000
Manifest this update: Mon 28 Sep 2026 17:01:19 +0000
Manifest next update: Tue 29 Sep 2026 17:01:19 +0000
Files and hashes: 1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: kAa5rM35W2I6/GbGS5GVGfs2VPHILo/xTGj311E4/7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:be:81:a8:62:12:55:ac:9a:6d:f5:5c:58:d5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
Validity
Not Before: Sep 28 17:01:19 2026 GMT
Not After : Sep 29 17:01:19 2026 GMT
Subject: CN=1c0688b47f8f812ce9e894d38de6b1956f48f9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:d6:a4:52:84:56:61:6e:29:15:0f:67:e0:
b6:bf:f1:f8:3e:88:1e:ec:7a:a6:f1:db:42:b0:b5:
71:dd:b6:5a:99:01:8a:70:a2:bd:16:12:23:db:a6:
74:e4:03:8d:ad:58:ef:ab:42:d6:2b:6a:1c:0f:75:
b5:6b:37:5a:80:2a:8e:e7:60:4b:fb:23:79:2e:90:
f9:c7:61:7f:f7:2a:e9:41:a4:d8:7a:de:37:9f:43:
5a:b2:fe:40:16:a7:eb:80:e2:25:2d:f3:fc:54:1d:
f8:03:b6:b7:aa:b3:d6:c1:84:b5:16:b7:7a:e3:2d:
65:0e:44:a9:a3:04:73:bd:9f:1c:57:de:e9:b4:e2:
39:8c:4c:5c:f6:93:c9:12:80:d4:e9:35:4c:29:3e:
ff:a9:a6:30:6f:a5:45:7d:fb:ef:22:44:53:6d:5c:
ec:84:62:26:40:33:f8:ad:39:28:44:54:46:9b:0e:
d2:db:b5:19:e8:e6:a2:29:a8:54:a8:8f:0d:0d:86:
5a:56:57:ca:53:f2:15:b4:8b:00:9f:e8:cf:35:d7:
e3:92:10:a4:6c:52:07:ac:e2:40:47:15:e6:e6:58:
94:a1:88:30:7b:ff:2d:40:95:8e:47:b4:f9:02:06:
92:fd:65:0b:67:c2:a5:69:f0:46:cb:53:e7:f0:59:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:06:88:B4:7F:8F:81:2C:E9:E8:94:D3:8D:E6:B1:95:6F:48:F9:D2
X509v3 Authority Key Identifier:
keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:35:c5:66:d8:06:a6:ea:f5:50:20:a6:f6:fb:83:24:cd:26:
4f:36:a6:32:c4:8b:58:11:ef:1c:02:af:23:15:c1:a7:c0:5a:
ee:0f:5d:c5:24:bb:f3:f5:33:8a:ba:f1:86:49:99:a4:b5:d4:
93:2e:e3:c3:34:11:b7:36:85:b3:67:d1:94:c3:3c:c1:3e:74:
10:65:bb:05:66:7d:b9:0f:2b:4c:3d:0d:6c:fa:23:de:93:61:
da:d7:c9:29:5f:1d:2a:24:96:1a:b6:13:75:ee:cd:78:75:0d:
5b:37:f1:42:ce:a7:4d:3d:03:ac:91:12:7e:89:62:63:75:1e:
19:6d:9f:72:f4:f9:0c:3f:85:e2:73:df:c8:a8:bb:2c:ab:28:
d5:05:b2:0f:a0:cb:d9:31:c4:e6:20:d3:a2:cf:43:3e:d5:55:
c7:4f:23:4d:ae:f8:dc:5c:5b:ed:95:48:7a:a1:1f:95:84:80:
ab:c3:af:fe:31:89:ad:54:5f:83:41:61:a9:b4:c7:ec:fe:65:
f5:14:5c:16:b2:1a:7d:36:a5:7c:6e:cf:4e:f7:b5:38:2a:37:
eb:16:f2:7d:bc:ed:0c:64:d8:0f:9f:b8:38:16:e2:fe:89:07:
be:88:84:d3:e3:c6:82:e9:98:dd:74:1f:36:f1:35:fb:72:af:
b2:0b:6d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:30:10 2026 by rpki-client