Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: qa7ViHqJE5r0axHCGTAqgW71HkA/kUj+eUYePvUD0KI=
Subject key identifier: 08:20:EB:05:21:40:C9:9C:72:2A:35:93:91:70:EF:E5:9E:3E:70:E0
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01A08BD62EE2F15059FE8FE380CDD1447DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 1174
Signing time: Thu 10 Sep 2026 15:01:04 +0000
Manifest this update: Thu 10 Sep 2026 15:01:04 +0000
Manifest next update: Fri 11 Sep 2026 15:01:04 +0000
Files and hashes: 1: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
2: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: rsSMmxVR6MSOM4rrCOnT7zMwtgRfVB1gwUNnaw0mLco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:2e:e2:f1:50:59:fe:8f:e3:80:cd:d1:44:7d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Sep 10 15:01:04 2026 GMT
Not After : Sep 11 15:01:04 2026 GMT
Subject: CN=0820eb052140c99c722a35939170efe59e3e70e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:28:0f:fb:5d:6a:a6:ee:03:6c:ce:3e:33:
3e:c7:6b:27:c3:01:2d:3d:a1:2d:e6:14:f4:ba:c8:
ca:7a:89:c9:a5:2c:c2:26:09:19:a5:f5:cb:46:66:
2e:4d:ff:67:51:fa:58:93:3f:96:6a:e5:32:5f:ad:
71:ba:58:71:7d:07:b9:92:83:5d:2c:fa:fd:6f:b8:
00:fa:04:c5:ca:74:e5:ce:81:4e:d5:82:80:d2:a9:
3a:47:d3:1c:a9:f5:8d:df:3d:c6:9d:fb:46:aa:36:
ef:34:17:1a:2f:e7:0d:2f:fd:de:f7:5c:8d:26:e0:
5d:77:fd:70:2d:b7:d2:9b:06:72:f1:c2:11:66:42:
ea:70:43:36:90:5f:83:48:0a:b4:3e:f4:46:f8:3f:
26:99:6b:25:8e:b5:54:c9:83:a2:af:20:2b:ae:ec:
80:cf:93:55:b4:b0:6e:56:68:f9:f7:16:b8:51:a0:
96:0a:78:fd:f2:57:5c:21:da:44:05:c7:5a:fc:40:
dd:09:2b:dd:08:e4:e2:6c:96:51:3c:44:a8:21:26:
54:40:2f:57:b4:17:b7:f8:e3:53:86:e1:20:54:30:
c1:5d:a8:f7:d0:6c:78:32:33:fb:65:b0:4b:be:41:
ca:15:62:7e:c0:f5:81:46:a8:39:5b:e4:85:74:db:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:20:EB:05:21:40:C9:9C:72:2A:35:93:91:70:EF:E5:9E:3E:70:E0
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:af:fb:e2:f1:e3:9e:79:95:01:17:a9:9f:3d:c8:57:e7:20:
85:80:4d:7b:bf:a2:f2:bc:f5:c2:e9:22:2a:17:4a:eb:1b:7c:
a9:29:a9:74:f3:68:51:90:5e:78:39:20:ba:8a:8f:3d:ce:32:
68:6f:cb:b5:13:ff:96:34:8e:aa:88:bd:4b:39:25:b3:f3:12:
e2:bb:57:c0:f5:56:2c:db:51:eb:eb:df:f9:45:2a:47:56:44:
b3:a4:0a:4d:e9:70:ae:bc:7a:3d:99:fb:fa:23:a8:d7:9f:d9:
a8:8d:02:54:1f:9f:1e:3d:0c:9f:5e:b6:32:85:cf:50:55:38:
75:35:e0:48:82:81:88:4a:ef:52:c6:e1:df:ff:9d:8e:03:ac:
66:9b:f3:8c:f5:69:48:86:4f:6e:02:eb:bf:91:0b:d9:9b:cc:
1b:d1:1e:5a:75:54:f3:0e:a9:4d:cc:3c:0f:2b:45:d6:db:4b:
12:35:2b:77:f5:41:e9:15:5f:4d:cb:4b:44:fc:62:35:90:a5:
ad:f7:96:f5:9b:0b:6e:4f:a2:03:98:19:d9:41:44:c6:a5:73:
0f:d2:51:d9:17:a5:90:21:dc:bd:32:ae:4c:71:8f:33:fb:01:
a6:93:bd:19:2f:78:42:e9:82:6d:f6:90:7b:b4:fe:5a:c2:0a:
c6:cc:aa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:34 2026 by rpki-client