Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: jQmAi2Ni2w+JGJd7UDcIEt6Mdcmva2gbWvsVlciLqAU=
Subject key identifier: 62:27:B2:97:29:96:AD:9B:BD:33:E8:78:DC:F2:1D:D5:31:4F:62:91
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019F9F95FD46C2F5040B4EFC517D1A9D45C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 10F9
Signing time: Sun 26 Jul 2026 18:00:34 +0000
Manifest this update: Sun 26 Jul 2026 18:00:34 +0000
Manifest next update: Mon 27 Jul 2026 18:00:34 +0000
Files and hashes: 1: Jeq4TgUQ9SJRNMX5zRtvXEi8Psc.roa (hash: 9mKyUHXrjKG9cn7mDvXLaSXoGK20AHchQ+9WrItANtE=)
2: isTKYtbUnSryrfFZr4-sBY4hH2k.roa (hash: YsbVFBRwd8pAe2/JAWEYBxt6vxRupWcftoItlak1zEs=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: jT7UBJa1zd7O0mYOWzkBXhonAEKz6/fF0R8C5wwZAAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:fd:46:c2:f5:04:0b:4e:fc:51:7d:1a:9d:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jul 26 18:00:34 2026 GMT
Not After : Jul 27 18:00:34 2026 GMT
Subject: CN=6227b2972996ad9bbd33e878dcf21dd5314f6291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:db:73:e0:ab:df:0b:17:01:46:52:25:4b:
98:0c:53:d1:e2:10:36:e0:c1:b0:df:ca:4f:7c:e3:
d8:d8:5c:6c:7d:a1:ff:08:cd:08:0c:d1:60:2a:8e:
ed:ca:f4:22:8a:76:c6:74:4a:ee:3f:34:ce:f3:3e:
94:33:90:d2:2e:2d:16:6e:35:6e:f0:ff:c1:79:70:
64:84:9f:1e:e7:7d:6f:5c:5d:76:5f:c9:04:06:35:
2a:c9:a4:0c:95:41:9a:fc:31:62:ae:f0:59:57:65:
46:f8:1e:9c:33:fc:f0:66:be:ea:c4:10:b9:f4:8c:
ad:af:b9:8f:ec:bd:64:4a:56:fc:93:f0:eb:91:ac:
33:bc:40:a4:33:26:30:95:18:3a:38:44:ca:73:84:
c7:cd:46:1b:13:0c:c1:93:64:0e:f1:61:25:ca:8e:
3d:28:f6:f8:93:19:a1:d1:77:4e:cd:55:42:c8:66:
e2:b1:3f:d0:aa:da:af:ac:de:31:4d:d6:44:d2:7a:
eb:34:c3:99:40:65:fa:50:90:a4:86:88:06:5f:b9:
ff:2b:17:0a:bc:ea:cf:ec:40:be:ce:55:7d:4f:65:
dd:2e:e2:4c:98:af:8a:a8:4a:b6:66:e7:2a:fa:1a:
a4:fd:ef:c5:62:19:d5:13:f2:05:53:3d:ef:6c:45:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:B2:97:29:96:AD:9B:BD:33:E8:78:DC:F2:1D:D5:31:4F:62:91
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:57:76:63:88:3f:9b:f7:7d:ce:32:b3:2a:b8:4b:6c:cc:bc:
be:b7:5e:89:55:03:03:4a:e5:a1:8d:92:70:b2:e5:f0:bd:66:
6f:ea:e3:8d:3a:4c:7f:1f:10:86:05:be:fb:79:84:97:58:d6:
65:f4:b3:22:47:8a:2e:8a:22:c4:f8:39:2f:9a:c6:fe:b8:43:
03:e7:e7:ec:19:95:2b:cf:ad:40:b0:51:0f:d1:ef:f2:73:76:
34:dd:38:3c:5e:ad:21:5d:11:03:64:7f:f2:1d:92:da:07:e2:
e6:cd:db:64:d5:e8:db:07:63:c7:6d:c8:b5:9e:57:cc:38:75:
06:03:0e:1a:31:48:db:31:46:cd:53:71:df:27:5c:77:fb:68:
e9:6f:39:9b:29:28:d6:fb:cd:97:0b:72:c6:52:5a:58:01:97:
e0:b3:60:52:63:63:81:54:1e:fe:19:ac:5b:69:fa:d0:38:63:
0a:4e:98:7e:46:2c:d8:02:c1:93:1c:e3:95:39:73:31:8d:7b:
71:fd:21:72:90:e5:cb:1c:af:b9:5d:e4:62:da:5b:93:3e:af:
58:05:8b:7f:26:d1:a2:8b:88:05:35:78:c6:1d:0c:eb:a3:43:
52:69:f2:2b:a9:c7:3c:5f:58:6d:82:f8:44:dd:65:64:33:50:
d5:b3:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:23 2026 by rpki-client