Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: gCpjI2gAuqPkbbRPQsz4k4Nr0st0j1NH/HE7Z2FTpxA=
Subject key identifier: 84:EB:53:EC:67:B6:77:2C:2F:E9:2D:4A:2A:64:C2:FB:FF:16:76:24
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019E1D2330D83104CF5FDC176D5FF82C9862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 17F5
Signing time: Tue 12 May 2026 17:01:45 +0000
Manifest this update: Tue 12 May 2026 17:01:45 +0000
Manifest next update: Wed 13 May 2026 17:01:45 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: fRFK6dj1Y2VjwzpXS/M11+gYXZFcsvW4Rqudx5wduyI=)
2: nJR_NliYFB-V9T4gAy6T3mjTukw.asa (hash: lVinzgYc0skkJP4xD+sknPRiLs/Ljwi13qaQW4UVh8Y=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:30:d8:31:04:cf:5f:dc:17:6d:5f:f8:2c:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: May 12 17:01:45 2026 GMT
Not After : May 13 17:01:45 2026 GMT
Subject: CN=84eb53ec67b6772c2fe92d4a2a64c2fbff167624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:fa:9c:23:bb:39:13:16:cd:7d:10:94:da:
55:66:d0:13:63:ee:15:0b:7e:00:f2:7f:e2:bf:7a:
09:03:b2:84:1e:3f:c5:2c:9f:ae:49:e4:a8:a6:f7:
b2:fc:a1:5a:15:3d:9a:13:24:fe:9d:dd:b2:5e:35:
6f:09:1c:32:ec:64:7c:06:2e:ab:ac:7f:f1:01:9b:
7f:83:05:7f:b9:99:ce:28:6a:6e:50:70:29:57:a0:
6f:89:8a:0c:97:8d:77:c0:a2:20:85:dc:aa:8f:ce:
6a:59:c3:54:2a:c7:69:10:4f:f5:b3:28:a3:1e:48:
71:74:37:82:cd:65:12:15:f6:e4:de:0f:ec:2d:94:
93:04:a5:06:77:4e:0d:56:5f:a1:24:f0:e9:5e:9a:
b2:bd:e8:af:75:a0:7b:e2:37:d8:29:3e:cb:53:fb:
6a:bc:ab:c1:db:f9:1a:c5:d2:0d:0f:53:6a:44:29:
54:56:01:92:a7:6c:1a:ee:4e:54:2e:65:cf:f3:d7:
de:cb:18:38:24:5a:cc:ae:1f:14:3c:4e:12:33:58:
3f:5b:06:9e:59:96:02:bb:b1:78:8f:04:45:4e:9c:
e6:b8:60:39:ba:e4:51:66:c8:16:8f:50:43:1a:9a:
33:05:03:0e:dc:1c:79:0b:40:11:f6:70:b3:72:cc:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:53:EC:67:B6:77:2C:2F:E9:2D:4A:2A:64:C2:FB:FF:16:76:24
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:15:6b:d7:97:12:67:8c:a8:6d:12:e9:e7:88:f9:c9:d8:
7e:9e:aa:a5:0f:39:a4:94:f2:be:91:cd:cb:8c:c3:5a:f1:38:
f3:eb:b0:17:90:2a:f8:fd:a8:a2:c4:bc:fd:49:41:3f:6c:cf:
1b:dc:3f:b3:a5:60:31:f8:ed:0a:3e:45:3d:8f:b2:42:a3:22:
f0:53:8d:8e:f1:84:3b:06:3e:dd:28:93:bc:9d:60:2b:e1:d5:
79:c3:d0:26:91:36:18:46:c8:ab:f6:f8:b0:1f:4e:59:65:4f:
0f:d2:c1:d2:fb:38:f3:78:46:f5:7a:8b:cd:b8:75:ff:a3:1f:
7b:fd:c8:cf:a6:23:b8:23:97:f6:2e:b0:10:55:6f:ff:5e:1a:
fe:36:e5:16:f4:21:6b:65:b1:51:f8:7b:34:b3:9c:95:7b:e5:
45:86:2c:3d:ca:7b:c7:f2:d9:12:b8:bd:43:6a:86:b0:f9:de:
99:77:f5:23:bf:2b:70:9a:90:49:85:91:b8:b8:da:62:29:3c:
8a:f3:c1:3f:66:c6:17:e7:ad:4c:43:95:3d:7b:e2:2a:84:da:
04:07:32:25:16:13:3c:38:77:df:55:87:92:50:59:a4:a6:32:
d1:07:16:70:b1:21:a6:9b:d3:3c:a1:0e:ba:0c:00:3c:fd:d5:
07:f2:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:34 2026 by rpki-client