Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: i5G8IIUkEki1Jcowfpvk6Aoy8I/WIeYU46rLMJeYz8k=
Subject key identifier: 9F:71:10:89:49:6B:7C:C4:F1:D1:F2:B7:74:D9:CF:85:A2:AE:17:59
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 01A059D65420F82B6BB77A88F2593DBE6D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 1A2E
Signing time: Mon 31 Aug 2026 22:00:13 +0000
Manifest this update: Mon 31 Aug 2026 22:00:13 +0000
Manifest next update: Tue 01 Sep 2026 22:00:13 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: SQCNo06fHlr2fVUe4KzocD3J8Cgx256wfBwYWeg+aJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:d6:54:20:f8:2b:6b:b7:7a:88:f2:59:3d:be:6d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Aug 31 22:00:13 2026 GMT
Not After : Sep 1 22:00:13 2026 GMT
Subject: CN=9f711089496b7cc4f1d1f2b774d9cf85a2ae1759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:51:c2:8c:b2:fb:7b:f9:ab:f6:41:d4:82:
14:77:fd:e2:0d:ba:cf:0c:55:9a:b3:79:42:5a:fd:
fe:f6:00:f7:12:df:d9:88:75:28:2f:f9:b1:32:ed:
a9:03:a5:89:b0:a7:c4:c1:7f:ca:7b:8d:f3:51:b6:
82:0e:72:c0:e1:94:5d:f5:51:86:03:f1:ea:d6:f0:
a6:d9:5e:f1:d5:58:d8:20:78:51:7a:56:f5:85:5f:
fe:6a:ff:8a:16:e5:4e:95:03:42:c8:94:e5:7c:95:
31:40:99:5e:09:31:cd:62:b6:56:ef:01:bc:d4:0b:
5b:df:b7:a8:74:9c:ad:2f:a5:e5:5f:6e:08:2d:5c:
32:18:a7:a7:23:64:61:dc:6d:66:0c:60:67:3f:23:
1d:9b:c1:a8:d5:4a:ee:33:35:c6:17:a2:00:93:31:
ed:f3:22:20:e6:eb:0d:61:8e:54:06:ca:08:19:ee:
fa:61:08:37:67:44:c4:4d:0a:3d:59:f8:d6:fb:f4:
b6:c3:23:41:83:c3:6c:a1:af:c9:51:50:64:d5:65:
6e:71:2d:da:1a:2c:78:43:ea:29:38:98:e1:7e:39:
b4:92:b9:df:0b:22:8a:0b:f7:4e:08:fb:07:59:32:
8f:e9:6d:bd:d2:52:63:93:57:60:ec:aa:20:64:95:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:10:89:49:6B:7C:C4:F1:D1:F2:B7:74:D9:CF:85:A2:AE:17:59
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0e:d8:32:4a:fe:f0:aa:23:9e:62:5a:7f:c2:af:42:3a:85:
95:20:08:ec:e9:d1:5b:72:79:41:9b:04:41:e2:77:ad:d1:0a:
05:eb:c6:f7:42:30:59:31:47:c4:41:fb:16:c0:ba:3f:b4:c6:
cf:f6:01:e0:12:b8:69:f9:3d:82:8d:74:ba:ad:84:8c:5c:cb:
56:a7:44:24:21:36:3f:e6:98:cf:4a:bb:95:9b:8a:31:a2:af:
48:37:c7:91:de:41:a0:7e:23:c9:d9:22:01:b3:9e:d4:ad:73:
ee:a7:f2:1d:09:3a:a5:f3:d7:0c:ba:0a:d7:05:3e:21:42:17:
85:6e:de:5d:e6:73:0d:b5:3d:f6:07:91:99:dd:0b:cd:a4:d6:
cc:32:70:4c:14:50:93:d4:0a:0b:12:53:4d:d1:ac:94:3b:43:
cb:c8:14:52:7d:7b:93:02:4e:f6:de:12:d3:b3:ec:64:66:66:
29:18:b5:79:ed:14:fa:db:c0:d5:02:d3:ca:22:90:26:0c:ec:
bc:d1:ec:3e:7a:3b:19:be:b5:4a:2e:a7:ae:47:b6:bb:cb:5f:
fc:17:88:10:04:a0:55:53:61:f5:21:b0:23:17:0c:69:34:37:
df:db:c1:78:a5:3c:50:12:ea:31:4a:00:65:8c:3b:c4:18:b2:
3c:da:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:10:22 2026 by rpki-client