Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: MiTqww3QgPuu3DibMTicvacu5GXuu39bzH+0FJzVG3w=
Subject key identifier: AF:A7:C5:01:B3:0D:09:ED:71:76:21:07:EC:CF:F6:7E:51:35:31:BE
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019F8EA2EA9BAC1881D5D9D839F78C735CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 18B5
Signing time: Thu 23 Jul 2026 11:01:09 +0000
Manifest this update: Thu 23 Jul 2026 11:01:09 +0000
Manifest next update: Fri 24 Jul 2026 11:01:09 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: STB0t2qrmoBZ8tOmVSN2k1JJvIpWgE9fkz0idVrbaYk=)
2: wKIvrjV90LVDlWzVhhPw0JsNhOA.asa (hash: mZBNeUQGb8/vtfuerr8LdE8wDmXRz4CSVip257TStr0=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ea:9b:ac:18:81:d5:d9:d8:39:f7:8c:73:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Jul 23 11:01:09 2026 GMT
Not After : Jul 24 11:01:09 2026 GMT
Subject: CN=afa7c501b30d09ed71762107eccff67e513531be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:8d:68:7f:a5:e0:75:3b:b0:ad:06:31:63:
8b:fb:e8:4e:b9:c5:76:d8:74:c7:96:2f:fe:9a:c4:
9d:cc:40:c7:19:4c:03:1e:b6:07:12:3c:5e:73:07:
30:97:d8:ca:92:f9:20:76:fb:3b:2a:91:69:8b:fa:
a5:3e:88:32:47:4d:ef:ef:90:ff:e5:e3:1b:6b:c9:
01:9c:3c:d6:3e:2e:ae:c0:3d:e3:e2:14:9d:7d:82:
45:49:e7:56:c7:59:56:2a:ef:9e:25:1d:6a:3f:6a:
28:49:ea:72:f1:a0:5c:e7:27:57:7f:a8:a4:e5:1f:
44:df:34:c5:98:cd:fd:54:fb:5f:17:66:88:d1:47:
7b:48:2c:32:27:8a:d8:90:ac:6b:20:1b:71:d0:4d:
83:7a:12:e8:ee:3b:dc:e8:84:31:2b:b9:fc:64:d3:
62:e6:d2:11:55:73:2b:29:29:df:83:6a:a3:d2:a6:
24:5f:3e:92:47:6f:31:cd:e7:00:e7:24:05:9a:e3:
05:04:c0:61:59:c7:53:2d:df:4b:b2:79:8c:7a:07:
8e:ef:ab:98:c7:1a:03:68:d2:5b:f9:0c:c4:80:6f:
a2:4d:9f:e4:29:75:cc:4f:c7:a5:ab:45:ba:13:c8:
0c:ed:f3:1a:09:f0:d8:d7:e4:a6:d2:48:a4:ca:f6:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:C5:01:B3:0D:09:ED:71:76:21:07:EC:CF:F6:7E:51:35:31:BE
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e7:66:b2:98:7c:22:e1:2d:ca:7f:ce:cc:37:e2:8a:b7:46:
1b:8a:4d:e3:c1:1e:31:24:30:90:52:b0:86:21:41:ea:ce:56:
d8:6f:5c:5a:18:57:d4:33:67:a8:57:4d:4e:4a:52:b8:1d:7a:
b8:bf:8c:2e:f3:bc:54:72:03:9a:ce:e1:5e:9c:ba:32:53:6e:
26:83:be:e2:3d:a5:9a:17:fc:e5:4e:09:4d:6b:f8:b7:38:0e:
24:12:76:53:c2:66:17:01:db:3e:ed:4c:86:ec:4d:9d:50:8b:
15:c0:81:0d:d5:29:45:bc:76:b3:e8:89:6f:04:8c:ec:53:db:
5e:51:c3:a7:2c:66:77:75:ab:1e:5d:53:d1:1a:10:39:18:19:
d7:c0:bd:ca:06:1f:bb:a6:40:86:bf:e8:f5:5a:1c:35:ee:4d:
9f:01:f3:da:9a:3d:92:88:e2:c2:21:90:83:39:82:a7:0f:d8:
06:43:d2:f7:d2:22:51:f1:8d:fc:82:87:d8:65:29:24:07:92:
a0:e9:62:df:1c:2f:ff:52:0e:43:7d:35:b1:62:d4:f9:69:28:
c5:89:e4:e6:37:24:be:9e:58:e3:b7:eb:c2:b2:95:47:04:4b:
4e:3a:32:4b:d3:29:dd:d5:be:b8:a2:82:09:3f:23:5c:08:e9:
8a:0f:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:06 2026 by rpki-client