Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
File: rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft (raw, json)
Hash identifier: 00BSjoXs4KBkgCr/ba6Fa2mmw0Gyrh/7LjZngX5nWrQ=
Subject key identifier: D0:AF:FA:41:4D:B8:C2:14:67:3F:0C:2E:3F:8D:8C:6E:1B:E4:05:93
Authority key identifier: AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07
Certificate issuer: /CN=acc2c594a47c8766227fd9a512894ef8aa34b607
Certificate serial: 019D28F27F70EC3E32FCE48FEF829C87B949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
Manifest number: 017E
Signing time: Thu 26 Mar 2026 07:01:14 +0000
Manifest this update: Thu 26 Mar 2026 07:01:14 +0000
Manifest next update: Fri 27 Mar 2026 07:01:14 +0000
Files and hashes: 1: rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl (hash: IxzuwEzMbFFLk0eCo0YwlHDnClULldKkdJHDu8e4UKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:7f:70:ec:3e:32:fc:e4:8f:ef:82:9c:87:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc2c594a47c8766227fd9a512894ef8aa34b607
Validity
Not Before: Mar 26 07:01:14 2026 GMT
Not After : Mar 27 07:01:14 2026 GMT
Subject: CN=d0affa414db8c214673f0c2e3f8d8c6e1be40593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:9d:a2:6e:a6:13:be:7b:b9:e1:f0:fc:6d:
f3:dd:71:25:7f:3a:33:89:78:8a:55:d2:99:e0:dc:
f0:ee:e3:a7:00:76:04:e3:27:eb:85:9c:03:83:c3:
98:69:ae:b3:7e:07:b3:60:ce:2f:86:d6:a3:7a:9e:
23:4a:e6:1d:f0:7c:5f:86:ea:d6:d4:bb:ca:7b:e5:
42:c4:c1:ec:75:77:3b:ac:7a:51:e3:d5:2b:16:3e:
b2:97:f1:af:33:04:f6:ec:e1:1b:a1:82:c4:43:99:
72:03:61:7e:7b:c1:8c:22:96:cf:25:01:78:70:a0:
9c:6a:3b:a8:63:31:73:f2:f6:2a:c0:31:c2:b4:d4:
2e:25:a2:ab:97:5a:58:be:cb:0f:9c:48:e1:d6:a7:
ca:bb:24:13:5b:7a:14:37:eb:a8:42:bf:4f:71:d2:
6c:38:75:bd:13:9d:c8:b0:f3:ed:72:78:5c:28:af:
0c:cb:b8:43:6e:49:b6:7c:59:72:fa:23:f6:4f:57:
51:a9:d5:2f:f2:9c:61:79:91:b1:18:f9:bc:4f:09:
70:f3:54:ef:81:76:fd:11:1b:42:e6:9d:de:93:23:
a6:0c:61:53:59:5a:3f:49:97:c9:d0:0a:5b:2c:d2:
5d:93:ef:0a:27:10:17:3d:f0:5f:2b:e3:7a:43:6d:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AF:FA:41:4D:B8:C2:14:67:3F:0C:2E:3F:8D:8C:6E:1B:E4:05:93
X509v3 Authority Key Identifier:
keyid:AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:76:a9:e7:f6:bb:c2:6c:c8:80:43:e6:4e:c6:3a:6d:74:
06:cf:22:f5:73:98:c3:08:44:a5:d8:8d:96:f7:f0:36:6a:e3:
3d:4f:c0:1c:f1:d1:da:b1:ef:8b:7f:8d:ef:23:98:1d:49:52:
f4:49:fc:7c:aa:cc:26:45:99:b7:2c:a0:e8:da:f5:78:d4:96:
41:8d:79:73:17:ee:fd:71:c1:5f:e9:9d:2d:78:0a:56:4b:40:
f6:5f:28:51:3f:b5:85:d5:b8:a1:94:ec:17:3a:e8:db:ee:4b:
81:e8:d8:d6:69:39:c0:1a:44:11:37:14:cd:a8:bb:a1:c9:30:
6f:f5:32:e9:af:f3:8c:48:0b:28:ec:27:dd:a4:3b:ab:e6:ec:
3f:19:8a:f7:b7:af:c0:e1:4e:a1:35:a8:b9:79:f3:3d:47:27:
52:f8:f5:5d:14:ae:18:7c:00:85:1d:f7:5b:ef:11:66:59:b6:
86:e0:67:1e:32:38:6d:c7:c7:34:23:89:59:99:1d:27:71:88:
6f:41:03:df:96:9f:e3:e5:83:95:c0:be:0c:6b:da:df:67:6b:
25:ee:8d:b8:93:61:2b:69:17:de:3e:22:3e:02:de:a2:42:5e:
03:03:8d:84:0b:d5:34:74:a8:b4:2c:77:a1:ce:cc:46:67:b0:
5b:68:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:49 2026 by rpki-client