Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: g9iUeJd9oFv7Xq8hxgClP2Mglo683cfoz9Iz1LKM4hU=
Subject key identifier: 4F:02:98:8B:E7:FD:0A:2A:19:E9:51:2B:F7:D1:08:E3:49:01:0E:C2
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019DA0AEBAED34C713A5AAAA3088DF91818E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 18C5
Signing time: Sat 18 Apr 2026 13:01:38 +0000
Manifest this update: Sat 18 Apr 2026 13:01:38 +0000
Manifest next update: Sun 19 Apr 2026 13:01:38 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: Hp5lcQpbwhPN+C1DxSX4JPSSVB73B393LWycvAiRSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:ae:ba:ed:34:c7:13:a5:aa:aa:30:88:df:91:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Apr 18 13:01:38 2026 GMT
Not After : Apr 19 13:01:38 2026 GMT
Subject: CN=4f02988be7fd0a2a19e9512bf7d108e349010ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:87:ee:6c:c4:5f:9b:12:a3:08:cd:9b:17:
c1:d0:65:1c:05:e9:ae:99:88:65:f5:f3:ba:b5:55:
fa:7f:c2:ae:61:f1:23:2f:05:a1:fe:4b:f6:2b:6b:
f3:5c:41:8c:50:58:77:3a:c0:9c:3e:2c:b7:23:1b:
03:66:00:54:a8:b2:8e:04:90:b0:f4:e9:cb:4f:7a:
5b:a8:fa:28:7b:01:04:5c:dc:a4:7d:55:df:58:67:
14:bb:16:a6:5f:4f:1b:f4:df:e0:83:8f:11:a8:49:
8f:c4:38:68:57:ad:ec:e4:ac:10:93:b8:fd:20:47:
35:82:5b:f0:b6:18:67:63:4f:7d:56:21:43:bc:0c:
6a:04:e0:59:08:1b:fe:78:94:9f:27:19:b6:91:50:
6a:ef:8a:fb:fc:86:9e:94:5d:e8:b6:05:bf:c7:5b:
78:10:6d:22:1a:4c:94:4b:7d:8e:60:83:61:41:e7:
fc:2a:45:9e:d9:a6:01:fd:25:38:84:e2:9a:6d:50:
7c:58:9d:5c:b2:4b:e9:9e:00:64:a9:c9:15:62:2b:
30:be:9e:5a:f4:36:14:52:b3:81:18:be:a0:8b:24:
fe:ed:59:67:6b:c8:b8:91:a2:3f:b6:26:3e:d8:c7:
85:51:2b:33:a3:d6:57:80:55:ab:c7:b8:41:f5:26:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:02:98:8B:E7:FD:0A:2A:19:E9:51:2B:F7:D1:08:E3:49:01:0E:C2
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:82:dd:e9:a5:14:36:86:e7:84:04:31:91:38:88:44:63:43:
06:e9:85:4a:15:3d:4c:0b:f2:f5:55:29:9f:8a:21:51:8d:3f:
6e:0a:47:2c:1b:66:3a:5a:bd:5b:f4:b9:39:cc:bc:62:70:ca:
6f:d6:66:81:4a:11:b7:46:28:6b:d5:77:e1:b4:39:e9:9d:8e:
3e:d5:71:74:d6:8b:26:5e:e3:6f:93:14:92:80:b9:df:21:6f:
c1:9c:de:eb:52:56:7a:5a:22:2e:65:5c:3d:b7:19:9d:00:4d:
9f:b3:a1:0c:a1:6d:74:ef:d4:92:9c:30:79:15:e9:bd:81:52:
f3:3b:ec:ee:b2:1f:1d:5a:49:85:16:fc:52:7e:a8:12:2a:31:
11:83:bb:60:ae:fc:b0:55:7b:05:cc:33:82:6b:7d:2d:47:96:
7d:8c:71:e8:b6:ca:19:a8:1f:bc:08:b6:1c:33:e5:fb:dc:14:
3e:0d:7e:3f:49:cb:e1:20:0a:0f:79:ba:68:2d:ce:f9:a8:06:
83:3b:03:9f:42:ef:78:57:a5:fa:d1:74:e6:c4:33:18:0c:63:
5f:25:05:cd:2f:0b:bb:cc:9e:9a:dd:49:0e:aa:2a:b6:06:a2:
ad:ba:63:87:4e:03:3e:95:93:ab:12:3c:81:04:57:fa:5b:65:
b9:a4:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:42:35 2026 by rpki-client