Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: 9ReZavUMZpBNkFX26ViFDJwd30LBI/TF5Dzrvuq/kX0=
Subject key identifier: C1:D2:CE:D1:AF:C3:F0:EB:5E:08:72:59:43:1D:57:3B:B7:5A:13:FF
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01A179285CF6B163A30EDE92FEE912383AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 1AD1
Signing time: Mon 26 Oct 2026 17:00:50 +0000
Manifest this update: Mon 26 Oct 2026 17:00:50 +0000
Manifest next update: Tue 27 Oct 2026 17:00:50 +0000
Files and hashes: 1: 8PG-fi4UKZTsI-qGra5FYLxhK7U.roa (hash: rVcMkzlcbjAZCYKt1vWuh1f3Uw3Bkd84bPp/2fCkd84=)
2: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=)
3: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=)
4: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=)
5: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=)
6: bt4XElFmmymOYPm9YwLV1WhS8dg.roa (hash: elowfO4U8unek9TrOUffWVUXwXcPjKzkg7IwSpkvbEk=)
7: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: T/N4dV015fIO3XWO6KCYSZImO6Uydzir+HjVl2ARJ6U=)
9: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:5c:f6:b1:63:a3:0e:de:92:fe:e9:12:38:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Oct 26 17:00:50 2026 GMT
Not After : Oct 27 17:00:50 2026 GMT
Subject: CN=c1d2ced1afc3f0eb5e087259431d573bb75a13ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:c1:e8:29:f1:27:cd:f2:71:f6:55:4b:09:
31:5d:26:78:ca:37:a3:16:4d:25:9e:d6:5a:f6:9b:
01:6d:23:8e:a0:1f:ef:a2:4f:cb:cf:d8:25:6a:8a:
7c:76:71:a4:50:06:0b:65:a1:61:d4:78:c5:03:bd:
dd:85:3d:90:ca:79:e1:84:7a:42:23:b2:88:52:85:
68:ec:37:b9:a2:c2:b3:ae:d0:2b:8f:54:bd:ad:58:
2c:4f:ca:f1:a2:bb:bc:8c:f2:d4:a6:bd:cb:0c:92:
26:e6:00:ff:fb:f1:4b:38:ef:35:bb:d0:6c:9b:fb:
28:e8:01:4a:98:93:a0:36:68:01:86:a4:b5:31:f0:
c6:d2:36:2b:54:a2:ec:d7:5b:62:e5:62:a9:44:95:
32:e2:ad:08:47:c9:d3:ac:32:ce:4c:ea:e5:81:89:
27:d9:e2:89:fe:24:1c:4e:02:f1:19:44:c0:5d:7b:
c9:19:61:41:b7:4c:16:07:30:63:ec:1c:57:af:5a:
4b:e9:d2:fd:ae:b0:0c:08:2e:81:fd:29:91:24:ee:
48:be:02:e7:9d:a6:07:71:ae:f9:32:06:77:78:6e:
f6:ec:96:91:17:4b:f9:77:fe:97:cc:4e:b9:6a:48:
1a:c0:97:20:cd:c5:04:5e:f6:12:51:ab:78:41:1f:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D2:CE:D1:AF:C3:F0:EB:5E:08:72:59:43:1D:57:3B:B7:5A:13:FF
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a7:5b:16:fb:5b:0f:24:b1:0f:ac:bd:a6:0d:73:3f:db:bd:
1a:8b:f4:f7:91:ea:2e:97:67:fc:5f:60:72:e5:85:0f:5d:39:
0b:51:65:f7:8d:12:c7:c1:fc:5e:06:40:8d:df:97:89:45:15:
af:e5:e1:1a:99:14:74:79:ff:ab:3c:a1:80:5a:72:99:20:ee:
fc:52:e2:ba:69:0d:07:98:aa:60:9a:af:43:60:d2:fe:c3:40:
f6:2e:8d:62:2c:c1:6c:a6:30:44:8e:a0:86:56:4d:45:ad:a8:
2a:ba:81:ef:c7:37:41:e4:85:1c:3c:3d:fa:31:c1:f4:6d:bb:
2b:71:49:09:16:b4:37:bc:af:04:7b:60:1a:11:1a:15:9a:40:
32:52:1f:21:a2:b0:89:f0:24:7e:69:93:52:05:bb:f6:a8:1e:
68:9b:ea:d7:3f:b6:24:41:bd:cb:74:30:89:8c:c5:9c:4e:76:
6e:45:f8:08:03:d6:7f:d1:81:97:4f:e6:c8:09:eb:d0:a8:65:
3f:92:16:6d:22:dd:c1:18:be:5c:aa:06:60:3c:e0:ba:5e:03:
52:1d:67:21:55:78:e1:4e:b5:ba:68:f0:cf:fc:a9:03:18:1e:
32:9c:0a:44:23:47:68:e5:6a:4f:48:50:b4:45:b4:74:90:75:
89:8c:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:21 2026 by rpki-client