Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: jtrk0DvT7uVD1Hkjm28E4f2Km7LYMhQbjOnLtXKeBhQ=
Subject key identifier: 67:18:E4:1C:D6:9E:AB:0C:2B:52:9C:BA:52:33:00:0E:0C:4F:48:23
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01A17D73E304FF3F1C0DFB5F4BA309C18BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 11F4
Signing time: Tue 27 Oct 2026 13:01:48 +0000
Manifest this update: Tue 27 Oct 2026 13:01:48 +0000
Manifest next update: Wed 28 Oct 2026 13:01:48 +0000
Files and hashes: 1: E_NI4YaLo-4vH-xHThiTFQYzNlk.roa (hash: OdfijIjYnSuLrPJOtapUMNeSS4iKerolBSNZPTXhiPA=)
2: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: Ug8OMeYM9dvkuQOpBm96jmLRyDZd3yGFSalQax/mgIM=)
3: ta3YrRrdv1SdTdEifs-O8MMw-Qc.roa (hash: 1+wnuaJfeEL2tMUfArBENrplxbQncr627FwtaLtNR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:e3:04:ff:3f:1c:0d:fb:5f:4b:a3:09:c1:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Oct 27 13:01:48 2026 GMT
Not After : Oct 28 13:01:48 2026 GMT
Subject: CN=6718e41cd69eab0c2b529cba5233000e0c4f4823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:90:97:52:37:91:f6:de:4d:08:54:a1:b9:
1a:df:1e:25:18:1b:6d:22:10:6d:bc:17:03:b3:40:
47:15:d1:dc:83:57:d7:6a:e3:44:c5:08:3a:0c:2f:
11:c7:a4:ca:5b:e4:72:47:3d:b0:b4:1e:21:ce:93:
15:cd:f0:db:5c:c1:60:6d:10:bf:18:d1:55:14:0a:
45:13:3f:2d:82:01:39:19:ca:cd:42:8f:e1:f6:74:
60:e4:8b:24:cd:3a:f2:8c:f6:5f:f1:fc:ac:18:bc:
62:cd:79:6b:99:21:69:7d:d5:90:e0:8a:ea:a4:1e:
62:3b:39:fd:e5:26:19:7a:ea:86:0a:b1:d8:02:b3:
30:24:09:a0:02:89:51:54:d3:e9:6e:5d:3e:29:b0:
d6:b7:23:51:9c:dc:ea:3c:cc:a6:22:22:ac:99:d4:
eb:62:12:65:1d:cb:5d:80:06:f8:c4:43:06:66:a7:
af:59:fc:00:01:1e:6e:bd:09:fe:3c:b9:e5:2e:b1:
8c:79:c3:86:a6:68:6f:c1:f9:f3:a6:3d:19:6f:2b:
d8:72:79:f7:c4:11:b7:4a:1d:14:65:25:91:10:c2:
5e:ad:f0:0a:7e:db:d1:80:83:06:ed:63:89:42:3e:
da:af:53:2a:be:71:82:47:cd:02:3a:45:34:0d:c1:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:E4:1C:D6:9E:AB:0C:2B:52:9C:BA:52:33:00:0E:0C:4F:48:23
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a0:0c:44:06:77:64:cf:4b:9a:c6:1b:36:5d:9a:4e:a3:9d:
62:14:79:53:30:09:75:54:4b:1c:d1:7a:2e:a0:a7:fd:95:92:
53:b9:41:72:7a:dc:4a:00:f8:80:e2:8c:b5:f7:9e:4b:76:b8:
b2:55:1f:f6:ee:a8:8b:44:3e:90:60:5a:54:be:ad:72:21:11:
08:af:d2:c9:35:70:74:3e:54:84:ce:0a:97:d7:56:5b:da:eb:
a5:92:a1:5e:b0:e1:9c:3f:36:50:7c:d9:c4:8f:2a:b2:18:db:
6c:a4:2a:a5:65:ca:f9:a3:62:41:d4:45:25:a5:0a:1a:d4:6c:
78:5f:af:c7:a1:90:ed:0d:15:db:40:3d:76:ab:05:a7:b8:0f:
d6:40:f7:7b:22:44:18:29:22:84:51:8a:d6:a9:d3:70:5c:d9:
7d:68:ed:a0:3d:1b:17:2b:2b:de:78:16:f9:e2:33:7b:c6:91:
51:ff:b9:18:21:91:32:b2:27:77:12:f1:30:69:ae:05:e0:c6:
64:65:c4:21:a2:55:30:e2:9d:c4:b0:b9:ed:af:93:cd:35:18:
09:f6:ae:44:62:84:31:18:3e:9e:e2:e7:ab:a0:54:e5:8c:55:
b6:4f:d2:39:03:bb:a0:d8:45:5f:81:fe:6c:dc:2f:e0:44:39:
6d:a9:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:36:26 2026 by rpki-client