Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: zz1TPz0Ajx+Ahz00+WkWou83BptV260V2FGIdFWWuoU=
Subject key identifier: A9:02:D4:38:E8:A9:88:CD:01:10:E9:2D:44:76:37:8D:16:B2:67:60
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 01A005B9C2C399ED2534E6F4905E95C413ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 17C3
Signing time: Sat 15 Aug 2026 14:00:55 +0000
Manifest this update: Sat 15 Aug 2026 14:00:55 +0000
Manifest next update: Sun 16 Aug 2026 14:00:55 +0000
Files and hashes: 1: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (hash: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8=)
2: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: euhE2ihrQUcuQidqMC5XwbFz0wQ6IUyUgrMxnwOakzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:b9:c2:c3:99:ed:25:34:e6:f4:90:5e:95:c4:13:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Aug 15 14:00:55 2026 GMT
Not After : Aug 16 14:00:55 2026 GMT
Subject: CN=a902d438e8a988cd0110e92d4476378d16b26760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:9b:c5:50:e4:70:b4:46:82:18:9c:da:3c:
32:85:0a:4a:16:16:bc:cf:68:8d:4c:62:12:d9:c8:
e2:7a:c5:5e:3e:5d:a2:a2:83:ae:e1:12:66:04:0e:
9e:48:e8:61:de:09:85:ac:fe:a3:21:00:10:ce:ba:
78:bd:d8:b8:8a:06:36:a6:9e:a9:e9:7a:d5:cc:1a:
ab:7f:69:a2:69:7d:94:11:8e:8e:93:c8:cb:7f:00:
4b:8f:5a:20:96:b9:29:92:5c:58:9f:2a:f6:e3:1c:
3a:94:e3:b5:0a:e2:9a:2b:24:b5:9d:80:0c:8a:71:
3b:a1:b0:af:de:5f:a4:e0:23:26:48:91:69:28:45:
a7:86:b6:3b:d3:65:14:6a:82:e5:ea:8d:2f:f5:2d:
4d:a8:45:33:4e:62:94:c6:04:42:42:15:48:b1:40:
cc:a4:cb:34:88:b7:e4:20:12:d0:80:35:5f:e4:1d:
e0:d0:8e:76:69:6d:9b:e5:3b:99:79:bb:39:8b:26:
13:c5:f6:34:ef:e5:f8:93:cf:13:be:7e:97:29:21:
19:01:2a:f6:63:e8:d8:d0:53:ab:b8:9e:3e:0a:a4:
a1:55:41:2f:cd:52:1e:66:29:ac:a7:d1:fa:aa:da:
1f:ca:9a:3a:e3:1f:ff:e0:09:86:98:07:51:98:a0:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:D4:38:E8:A9:88:CD:01:10:E9:2D:44:76:37:8D:16:B2:67:60
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:66:58:2d:2f:60:b9:ec:f9:93:dc:c7:fe:c9:8b:ce:09:cd:
5d:1f:ec:73:3b:b7:02:64:4a:88:6f:d5:fb:a9:7c:29:c5:46:
69:e3:14:15:6f:85:10:71:42:6e:3f:eb:08:1a:b6:61:62:67:
70:6a:02:c6:20:de:73:eb:41:13:12:c1:df:d2:84:19:98:ae:
74:f4:36:e4:ed:fc:39:03:f1:d5:f9:ec:3c:d4:a4:33:25:bd:
c0:d7:dd:95:fb:c0:89:97:ca:92:8c:78:33:4d:68:1a:57:fb:
b5:b1:ed:3a:10:66:59:be:57:ad:60:23:f5:e0:d6:f8:90:81:
97:02:67:a6:0e:71:23:7f:57:96:4e:79:56:f8:33:ac:44:5a:
5e:f7:47:91:a8:4b:c2:05:e4:66:39:f9:1e:92:62:5c:f6:c0:
36:5a:18:84:46:c7:9f:c9:1e:76:fe:dc:53:f8:35:57:37:9e:
9c:b3:86:7a:b7:11:6f:5f:42:f2:87:81:7b:2d:ff:a4:ed:97:
a8:12:e4:49:32:2d:c1:52:e9:98:b0:3f:f0:e4:a5:16:a2:a3:
f4:b1:2a:bd:47:8a:4a:88:3a:30:7b:19:6d:64:4f:fc:0e:52:
c6:1f:b2:7a:c1:25:f1:e8:73:39:33:85:0e:d9:92:c1:06:b5:
a1:4c:97:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAFucLDme0lNOb0kF6VxBPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTA4NTNhMjRhOGM3NjIyMzRlODkxM2E0YTViMjk4NWMz
MzFkYWQwHhcNMjYwODE1MTQwMDU1WhcNMjYwODE2MTQwMDU1WjAzMTEwLwYDVQQD
EyhhOTAyZDQzOGU4YTk4OGNkMDExMGU5MmQ0NDc2Mzc4ZDE2YjI2NzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzabxVDkcLRGghic2jwyhQpKFha8
z2iNTGIS2cjiesVePl2iooOu4RJmBA6eSOhh3gmFrP6jIQAQzrp4vdi4igY2pp6p
6XrVzBqrf2miaX2UEY6Ok8jLfwBLj1oglrkpklxYnyr24xw6lOO1CuKaKyS1nYAM
inE7obCv3l+k4CMmSJFpKEWnhrY702UUaoLl6o0v9S1NqEUzTmKUxgRCQhVIsUDM
pMs0iLfkIBLQgDVf5B3g0I52aW2b5TuZebs5iyYTxfY07+X4k88Tvn6XKSEZASr2
Y+jY0FOruJ4+CqShVUEvzVIeZimsp9H6qtofypo64x//4AmGmAdRmKDMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkC1DjoqYjNARDpLUR2N40WsmdgMB8GA1UdIwQY
MBaAFJpQhTokqMdiI06JE6SlsphcMx2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgt
ODhiNThkMDJiMmExLzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgtODhiNThkMDJiMmEx
LzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGZYLS9g
uez5k9zH/smLzgnNXR/sczu3AmRKiG/V+6l8KcVGaeMUFW+FEHFCbj/rCBq2YWJn
cGoCxiDec+tBExLB39KEGZiudPQ25O38OQPx1fnsPNSkMyW9wNfdlfvAiZfKkox4
M01oGlf7tbHtOhBmWb5XrWAj9eDW+JCBlwJnpg5xI39Xlk55VvgzrERaXvdHkahL
wgXkZjn5HpJiXPbANloYhEbHn8kedv7cU/g1VzeenLOGercRb19C8oeBey3/pO2X
qBLkSTItwVLpmLA/8OSlFqKj9LEqvUeKSog6MHsZbWRP/A5Sxh+yesEl8ehzOTOF
DtmSwQa1oUyXDA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 22:26:54 2026 by rpki-client