Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: syD7j2IYeNZht+8Vswa6eSrTFvTfWXIMP+WBPDrx170=
Subject key identifier: A8:25:7F:73:54:25:19:CF:F9:3C:86:EE:BD:8B:78:E2:4D:17:BF:A4
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019DCF3E1E37DFC63D9C8A5EE51F8925ED3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 1007
Signing time: Mon 27 Apr 2026 14:00:47 +0000
Manifest this update: Mon 27 Apr 2026 14:00:47 +0000
Manifest next update: Tue 28 Apr 2026 14:00:47 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: vh0t0nfdpxOb+nanV7lD4qHH5E5jQ9sC/F1wThi/w84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:1e:37:df:c6:3d:9c:8a:5e:e5:1f:89:25:ed:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Apr 27 14:00:47 2026 GMT
Not After : Apr 28 14:00:47 2026 GMT
Subject: CN=a8257f73542519cff93c86eebd8b78e24d17bfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:82:96:8e:65:f0:eb:66:61:2b:59:a3:0e:
58:59:9b:9a:16:9a:5b:f3:39:52:7a:25:2f:0b:3d:
dd:23:b4:8b:09:f2:d2:82:94:85:5d:e6:8a:44:f2:
94:98:f2:47:66:a0:8d:08:01:e1:ec:45:59:e9:8b:
46:a0:aa:b9:11:0c:60:60:e9:19:f2:35:ac:e0:1c:
a7:2d:04:34:45:62:d0:33:3a:ca:0f:92:1c:22:7b:
6c:40:ee:11:b0:62:36:dd:01:8d:35:a3:bb:a8:72:
7d:8b:14:5f:d8:3e:2d:39:d2:9c:07:87:14:51:81:
31:87:e6:3e:2f:18:cf:9d:a8:6d:81:a2:c2:de:f5:
39:9f:28:00:ce:9c:17:7a:38:80:d2:d7:cd:3a:52:
8d:80:25:33:1a:47:b0:0c:12:99:ea:f5:06:d4:c0:
81:66:85:59:1b:ba:77:26:15:d3:3a:de:6d:2b:a5:
a8:b1:d5:e7:3c:b8:65:ba:ca:57:21:be:10:be:7f:
6d:41:6c:36:28:1d:7f:2a:b7:9e:be:54:8e:bc:d0:
3b:35:df:1a:e0:c9:97:9a:0f:71:fe:4a:11:c6:3b:
a1:9c:f2:53:4b:68:1b:55:85:e8:ed:b1:5f:8b:56:
d9:a0:1c:ae:0d:82:9e:15:b9:09:4d:76:9f:c2:b1:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:25:7F:73:54:25:19:CF:F9:3C:86:EE:BD:8B:78:E2:4D:17:BF:A4
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fe:4e:88:ee:8e:bb:07:a9:b0:31:bd:9e:d3:8e:73:db:11:
53:e2:ae:ee:69:5b:03:9d:a5:c9:cc:30:cd:ab:86:7e:20:03:
a3:cd:d7:6b:06:f5:2d:82:2f:91:4e:62:84:85:de:85:66:2d:
e5:d4:a5:3e:e9:4f:75:24:2c:45:a2:47:ee:4a:d0:15:21:2d:
d1:25:02:8a:e5:4f:d5:44:96:bb:13:19:c6:fe:5d:61:f5:92:
c4:1d:2c:bf:a5:1e:7b:2a:59:ab:71:94:f5:9c:58:94:39:49:
50:5a:b9:79:9f:f8:91:05:2c:54:fd:a2:3b:68:ff:ef:e7:40:
a0:49:a9:77:2d:b4:c9:41:c8:b0:f4:a8:ac:5a:0b:dd:d8:15:
f8:34:f4:59:34:62:a5:42:15:43:20:cc:a5:9c:18:0d:b3:82:
7f:94:57:ba:71:73:5f:8d:c0:4c:b7:e1:e6:3e:b7:a5:0f:fe:
a2:ef:42:66:37:53:d9:24:2f:3f:f8:17:83:c7:9f:94:79:e4:
a7:dc:62:d6:0b:5e:19:b3:0b:c3:70:73:65:d6:f4:5d:a5:32:
6e:61:ae:0f:eb:f6:90:b2:07:19:05:66:44:b8:29:f4:5b:f9:
67:5b:be:8f:82:8d:25:01:07:85:c8:a3:b0:f3:64:45:1c:73:
19:5c:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:17 2026 by rpki-client