Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: 08eOHPo3uTqXG2kJOgisQhLtqcqRc4PRtYKfS2bHmtI=
Subject key identifier: 8A:BE:A5:89:3C:3A:8E:8E:65:C4:D5:04:C7:3D:C2:7E:6F:33:C3:1B
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019D25F1D80B43375D29D1265BDD3910944A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1775
Signing time: Wed 25 Mar 2026 17:01:39 +0000
Manifest this update: Wed 25 Mar 2026 17:01:39 +0000
Manifest next update: Thu 26 Mar 2026 17:01:39 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: gNdB6wEsKc/wcsEFXviZIi0v8Tq4h5RVH+BbJLHrQ04=)
2: nJR_NliYFB-V9T4gAy6T3mjTukw.asa (hash: lVinzgYc0skkJP4xD+sknPRiLs/Ljwi13qaQW4UVh8Y=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d8:0b:43:37:5d:29:d1:26:5b:dd:39:10:94:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Mar 25 17:01:39 2026 GMT
Not After : Mar 26 17:01:39 2026 GMT
Subject: CN=8abea5893c3a8e8e65c4d504c73dc27e6f33c31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:19:16:29:d5:4b:89:a4:fa:60:7b:9f:46:
11:6a:f2:46:b7:d8:7f:a1:d3:1c:f5:76:8f:7e:55:
a5:52:c6:e1:e5:6f:79:6a:81:a2:06:0c:ed:e7:a7:
26:0a:49:a7:e5:30:11:a5:70:1d:ab:74:4a:58:a6:
62:d7:9e:29:0c:f3:0c:c1:6f:62:0e:45:75:ce:8b:
4e:66:2c:e9:ce:e1:96:dd:01:ae:fd:03:6c:09:d1:
e5:dd:ba:e9:ba:91:59:46:db:1e:f3:9c:2b:18:1d:
39:94:b6:ee:d2:83:30:29:4b:16:af:71:fb:25:c8:
78:1c:55:e6:ee:e0:29:1f:8d:33:72:c5:51:8d:f9:
ca:58:a9:c1:87:f0:b1:ca:1a:b0:b9:91:3e:c8:f5:
0f:93:9d:27:45:e0:5c:64:f5:0b:5c:56:e1:65:47:
f7:2c:29:1e:81:2a:07:b6:0b:a4:83:9d:1e:9c:2f:
fc:dd:1c:18:a7:47:21:b4:d5:ab:cd:4a:c7:a0:20:
95:f1:29:b9:89:28:8b:24:76:4a:b4:ed:80:ec:81:
3e:e9:ba:34:fc:85:bc:69:84:fa:40:36:51:03:ab:
a6:51:97:65:f0:79:cb:8b:53:59:73:a7:88:0e:39:
1a:a3:61:aa:06:ad:40:a3:a9:78:fd:f5:64:ca:f8:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BE:A5:89:3C:3A:8E:8E:65:C4:D5:04:C7:3D:C2:7E:6F:33:C3:1B
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8c:e0:8d:50:a0:62:f7:b1:79:bb:50:86:42:ed:66:e9:e1:
82:45:df:88:0d:c7:83:58:05:9f:ea:ae:01:63:c4:5e:0d:9a:
e4:92:5e:bb:41:f9:3e:94:2a:72:0d:8c:95:d6:9a:ed:44:b0:
f1:14:69:a5:5b:93:e0:66:0e:bb:90:73:37:c8:4d:ad:69:10:
ed:b3:84:ec:10:3f:ff:d8:08:93:d1:dd:00:f1:de:14:37:78:
e6:fd:26:ba:dc:df:d5:2d:28:ed:b2:ac:ae:41:f9:c2:09:42:
2b:91:5f:ea:da:d9:81:c8:19:45:71:82:97:95:d6:61:5d:b4:
45:4c:91:7b:35:bb:92:88:97:15:b9:6f:7c:67:0a:55:71:21:
8f:bf:4d:02:03:75:f3:fd:dc:68:20:b6:c9:ea:cd:fd:60:20:
b5:cb:48:d7:6d:1c:ff:fa:82:6f:3b:36:33:c0:43:4f:ed:35:
26:e4:e8:eb:2c:70:b3:54:61:7a:bd:8d:b5:cb:63:54:ce:a1:
ab:93:67:95:89:e3:3c:fd:8b:ca:d4:4e:8f:14:03:f5:50:34:
6c:c4:a6:77:0c:1e:1d:65:95:ca:b2:a5:80:58:3e:26:7f:02:
01:64:64:ce:9b:90:1a:b9:83:40:54:19:a0:16:cb:ce:08:f4:
41:81:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:05 2026 by rpki-client