Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: dt+W63sddRY4hh+yIfUcQdqIGrViKEfaw4Gt0NQyRg0=
Subject key identifier: B1:F4:87:77:6C:8B:EE:E0:9E:26:2A:A7:5E:EC:F6:06:DB:9B:C2:C8
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 019D37C0CDBB341DFF64B1F724B628E4404E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=)
2: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=)
3: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=)
4: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=)
5: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=)
6: htEUr6Lt44lZvtJ-YrwomAVpms8.roa (hash: fr4tJOJHx4cibpVUjq4P3JJxw5JGxqyswZhZFvLizGs=)
7: jTqcYKHqLgJzkgKKyQoLjf3ZZiA.roa (hash: NOw0XonYdKd94pKios35a/MdMCRJkVJF3zHnY0kyMwo=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: cY2DJveijOetOYRXZI3GCq5W5PPMYf1DLUrYDqT8BOU=)
9: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cd:bb:34:1d:ff:64:b1:f7:24:b6:28:e4:40:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=b1f487776c8beee09e262aa75eecf606db9bc2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:cd:6d:c1:5e:29:88:84:76:ff:17:87:42:
13:2d:02:c5:d4:ae:0f:1f:6e:bf:5a:08:b2:e5:98:
59:c6:9c:8f:87:0b:dd:38:25:03:2f:6b:bd:ea:2a:
81:fd:13:5c:26:d3:07:e2:f7:3d:9d:c0:c1:11:44:
8f:96:a9:99:0f:a4:42:6c:fa:99:f0:f4:77:72:29:
92:43:85:27:e7:38:93:65:b7:92:95:f8:f4:0f:2f:
23:39:bf:4b:8e:db:76:de:8b:75:39:23:50:34:26:
0d:d8:90:5c:5c:13:82:75:38:8c:8e:f5:4d:99:9d:
12:c6:34:bc:20:32:0c:64:be:8e:d2:8d:20:2d:6d:
f0:83:4f:c2:13:16:46:c0:c0:3e:66:f4:f3:2a:42:
82:ea:d6:8a:fb:54:8f:39:1e:09:d0:ba:cd:39:a9:
89:4e:4a:61:64:81:f1:94:a1:52:70:9e:f9:e3:73:
68:55:8f:3e:a8:ca:2f:1b:36:55:90:40:b0:e4:b1:
cf:eb:61:07:1b:7f:70:d1:cb:1f:38:35:e9:34:12:
97:92:b4:cf:3d:7a:9b:fd:8e:31:59:5e:78:07:7a:
aa:2e:f2:a2:e3:85:ea:a0:c4:aa:fb:4a:72:6a:36:
c2:6f:c5:fd:bd:9f:ef:d0:cf:0c:45:51:62:bb:70:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:87:77:6C:8B:EE:E0:9E:26:2A:A7:5E:EC:F6:06:DB:9B:C2:C8
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:43:b6:04:20:18:14:d4:9b:9d:3e:bd:b9:f6:dd:87:e9:4d:
4e:35:1e:b2:c7:75:97:13:42:dc:82:3e:60:2a:f8:c0:3e:08:
82:2b:8b:a1:22:3a:74:9c:79:15:93:0a:bd:57:ac:db:eb:1e:
b9:5d:89:09:e9:4f:c0:e4:ba:23:22:e2:a3:4d:16:5d:c2:34:
82:de:69:5b:1a:46:b5:b7:8e:b3:13:ed:8b:12:c3:91:21:66:
77:09:01:9f:68:b2:b1:a7:6e:0e:89:34:c6:57:d9:f8:7f:30:
c2:e7:55:e2:b7:b9:54:8d:c9:a4:9a:5f:cd:d4:88:40:dd:0e:
5d:ee:69:c4:59:6c:f0:9f:f3:ae:83:7d:d7:2b:20:ee:4b:c2:
2e:c9:59:0b:ac:06:32:6f:4e:d0:a6:cc:86:6f:b1:51:1d:cf:
7a:89:af:2f:36:4e:52:d3:ee:a2:b7:6c:68:01:19:f1:35:8f:
25:7a:bf:06:3c:65:e2:6b:40:ed:15:f5:92:7e:ed:b6:db:19:
30:fa:70:ab:28:9e:45:16:68:16:46:0b:05:27:84:d6:14:76:
17:3a:0d:44:3e:d7:08:24:70:b5:f4:24:01:93:e3:06:be:b0:
1a:3c:be:ae:bf:7c:0d:04:98:ca:5c:31:66:8a:05:7f:c3:ca:
59:67:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:04 2026 by rpki-client