Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: 0yw6R8tHq7RL+cHnYoYu/DxtTw8OqzbrVvwgYk0p3mI=
Subject key identifier: 95:C8:64:3A:EE:70:B4:65:8E:6D:E2:CB:C0:21:4A:13:E3:FF:77:FB
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019CE5919FEFB6C666E94481601D59B30F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0F8E
Signing time: Fri 13 Mar 2026 05:00:51 +0000
Manifest this update: Fri 13 Mar 2026 05:00:51 +0000
Manifest next update: Sat 14 Mar 2026 05:00:51 +0000
Files and hashes: 1: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (hash: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY=)
2: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: Wh+6ushSxJYAQ8jm2OgPMsZMT37nFacnYEtMVkqKKn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:9f:ef:b6:c6:66:e9:44:81:60:1d:59:b3:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Mar 13 05:00:51 2026 GMT
Not After : Mar 14 05:00:51 2026 GMT
Subject: CN=95c8643aee70b4658e6de2cbc0214a13e3ff77fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:6f:ed:93:e5:91:8a:43:78:f4:7d:e5:4c:
9e:6c:9f:69:fd:28:55:db:e8:89:95:90:d5:41:e8:
61:93:80:6d:ab:d7:af:8d:c4:f6:31:62:33:65:50:
4a:2d:b1:14:3d:9d:10:35:56:f3:2c:89:66:7c:5c:
e3:63:1f:82:ea:41:f9:ef:08:17:19:c0:23:85:42:
16:f2:5e:dc:2b:43:cf:64:0c:e7:2d:95:84:2d:d0:
f6:38:e2:f6:0c:7b:4c:c8:e6:ff:b2:de:77:dd:9b:
00:4d:ae:23:bb:23:b2:21:d7:07:db:37:eb:15:d5:
b4:5d:d6:67:41:4b:18:f8:8c:0a:a7:8f:68:13:5a:
61:14:45:1f:64:ae:23:5b:8f:90:11:26:1b:05:32:
19:8f:68:d6:03:a3:37:8b:63:58:f9:ac:f7:ad:23:
1a:03:26:ea:f7:c4:59:65:dd:87:e9:e9:3a:d6:b8:
e0:61:9b:76:5a:f5:b2:1d:06:8a:f0:f4:5a:6f:aa:
b3:7c:78:43:42:8e:32:f1:28:c8:90:5e:40:4d:07:
91:db:ba:23:4b:c8:0d:78:a0:84:81:cf:56:e8:d5:
44:0d:de:e3:df:e8:32:af:f0:77:6b:13:1d:7b:8f:
e2:c3:4c:3c:8c:80:7d:3d:dc:0d:f3:29:5f:a3:d4:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C8:64:3A:EE:70:B4:65:8E:6D:E2:CB:C0:21:4A:13:E3:FF:77:FB
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ba:3b:0d:97:c0:53:e2:3b:10:ab:03:3e:22:2c:76:56:df:
1e:1c:db:3a:45:66:a7:da:e6:72:1a:52:dd:0a:4e:24:bc:14:
3b:c8:96:21:8f:c3:c3:aa:d4:8f:54:1b:08:78:08:4a:c7:5c:
39:b3:9b:8e:c7:c3:f1:80:a4:68:b3:c4:2b:7b:04:de:96:ff:
66:a0:87:d1:b8:8c:36:07:8a:a7:b3:87:ac:8b:e8:92:d1:b9:
da:ef:77:a5:35:9f:c4:01:5a:3c:05:95:a6:e0:7b:ce:f8:a6:
7a:b3:35:b5:04:fc:32:a0:97:ad:5d:c9:ca:5f:10:ff:3b:43:
d7:b2:b6:c5:0c:f2:13:68:f2:4d:87:51:ec:b5:bf:5a:de:f0:
98:7c:53:33:e8:53:70:11:21:af:46:10:8b:28:af:97:d2:5a:
15:59:58:7c:b0:46:53:1c:3b:4b:ec:54:fe:c3:ca:98:7a:4f:
04:fe:6c:7c:8a:cc:6b:db:e8:72:22:7f:53:9c:6b:09:e7:47:
ab:c3:1e:b4:d3:dd:e5:f3:f7:65:c9:61:37:59:80:a0:41:ff:
79:5a:3e:65:8b:8d:cf:3f:99:5b:6b:bc:53:9f:61:c7:55:b4:
ba:84:6c:f5:20:94:ca:4d:68:f5:40:0e:09:d4:a0:08:79:64:
bd:ae:cb:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkZ/vtsZm6USBYB1Zsw94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjYwMzEzMDUwMDUxWhcNMjYwMzE0MDUwMDUxWjAzMTEwLwYDVQQD
Eyg5NWM4NjQzYWVlNzBiNDY1OGU2ZGUyY2JjMDIxNGExM2UzZmY3N2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZZv7ZPlkYpDePR95UyebJ9p/ShV
2+iJlZDVQehhk4Btq9evjcT2MWIzZVBKLbEUPZ0QNVbzLIlmfFzjYx+C6kH57wgX
GcAjhUIW8l7cK0PPZAznLZWELdD2OOL2DHtMyOb/st533ZsATa4juyOyIdcH2zfr
FdW0XdZnQUsY+IwKp49oE1phFEUfZK4jW4+QESYbBTIZj2jWA6M3i2NY+az3rSMa
Aybq98RZZd2H6ek61rjgYZt2WvWyHQaK8PRab6qzfHhDQo4y8SjIkF5ATQeR27oj
S8gNeKCEgc9W6NVEDd7j3+gyr/B3axMde4/iw0w8jIB9PdwN8ylfo9R5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXIZDrucLRljm3iy8AhShPj/3f7MB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqro7DZfA
U+I7EKsDPiIsdlbfHhzbOkVmp9rmchpS3QpOJLwUO8iWIY/Dw6rUj1QbCHgISsdc
ObObjsfD8YCkaLPEK3sE3pb/ZqCH0biMNgeKp7OHrIvoktG52u93pTWfxAFaPAWV
puB7zvimerM1tQT8MqCXrV3Jyl8Q/ztD17K2xQzyE2jyTYdR7LW/Wt7wmHxTM+hT
cBEhr0YQiyivl9JaFVlYfLBGUxw7S+xU/sPKmHpPBP5sfIrMa9vociJ/U5xrCedH
q8MetNPd5fP3ZclhN1mAoEH/eVo+ZYuNzz+ZW2u8U59hx1W0uoRs9SCUyk1o9UAO
CdSgCHlkva7LaA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:13:30 2026 by rpki-client