Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File: MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier: QbnquvoSpN34uURhnSQl1FgzavLP7N3aN2nUpwHDzHI=
Subject key identifier: 15:4A:9F:78:3B:0E:BD:1D:9B:76:32:E4:0C:23:34:88:3B:A6:D5:AB
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer: /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial: 019D2AE0F49D0445965CB71FFC3561720F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number: 0BAC
Signing time: Thu 26 Mar 2026 16:01:18 +0000
Manifest this update: Thu 26 Mar 2026 16:01:18 +0000
Manifest next update: Fri 27 Mar 2026 16:01:18 +0000
Files and hashes: 1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: oe/R+dUPFu3jHpIQxlRJwN3U3UB78e8Ar/eD694W16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:f4:9d:04:45:96:5c:b7:1f:fc:35:61:72:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Validity
Not Before: Mar 26 16:01:18 2026 GMT
Not After : Mar 27 16:01:18 2026 GMT
Subject: CN=154a9f783b0ebd1d9b7632e40c2334883ba6d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:da:69:95:c6:12:c8:b0:78:94:33:86:6e:
da:bc:2a:43:b1:1d:e0:34:32:df:60:d4:2f:3f:12:
96:49:25:5c:dc:54:31:fa:10:e1:f0:27:e9:14:f8:
3e:8a:3d:c8:69:52:8c:18:ed:ef:f0:c2:2e:99:85:
97:7e:fa:9c:2d:ed:63:b8:8f:d9:66:dc:80:ce:f0:
3f:28:62:e3:50:c8:8b:1d:a5:f6:6e:08:48:c6:ed:
f0:2d:f9:68:97:9c:55:c4:69:49:67:1d:26:ae:40:
b8:12:6b:c4:5a:e6:eb:dd:f8:0f:1b:7d:78:a2:59:
f0:b4:8a:1e:ff:2c:76:e8:62:0c:9b:0a:60:c5:4b:
9f:ea:d0:f9:48:52:a7:b9:85:c7:da:d6:4e:71:3f:
e7:4d:61:10:88:5f:77:73:7e:2c:4c:63:14:17:69:
49:61:f2:83:91:e2:2e:96:25:82:2c:80:a1:e6:b8:
88:e0:a2:c2:da:16:76:02:6a:53:62:26:4d:05:1e:
6c:21:d8:a5:5c:9e:42:99:df:0e:1e:5f:2a:d5:5a:
50:2c:5f:75:37:b0:b6:e8:9c:b3:3b:17:40:6f:35:
fa:a6:1c:5e:06:dd:f6:5d:14:2f:52:ba:c8:76:2e:
e0:22:d9:64:ab:cc:22:c1:0e:19:ae:38:7a:10:2c:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:9F:78:3B:0E:BD:1D:9B:76:32:E4:0C:23:34:88:3B:A6:D5:AB
X509v3 Authority Key Identifier:
keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:55:cb:71:64:a8:40:15:ff:b9:41:19:3d:32:68:45:3e:57:
5b:5b:91:38:e2:5d:ac:05:35:81:03:6f:d4:b1:5b:8c:06:6e:
84:22:65:8b:94:47:f6:df:4f:e8:e0:8a:80:4a:d4:cc:44:f3:
7d:47:e5:40:6e:92:e0:c2:ec:f7:71:0c:5c:4d:61:b7:51:6a:
35:25:e0:65:d1:73:50:b4:05:95:64:e9:bd:3a:9f:bd:9b:9c:
d4:63:9d:33:9c:2c:b6:a8:04:19:57:df:8b:97:24:31:92:95:
3c:22:31:b8:6d:bd:11:da:7c:5a:f0:2c:bb:cb:37:cc:fa:3a:
9d:66:58:09:b3:e6:73:76:41:b4:c7:c0:59:f7:b6:94:e9:f2:
47:e4:47:83:92:c9:5a:2b:a6:40:ef:89:50:4e:ef:ab:33:da:
5f:5c:7e:8f:02:ce:74:e1:30:91:ea:ff:f9:f9:33:d4:2a:b3:
ac:03:0a:e8:bd:67:19:64:1f:3a:cb:5a:3c:a4:5a:90:c2:eb:
01:8c:4b:15:09:d1:e9:45:28:7f:fa:3a:44:14:71:49:8c:d4:
89:9d:c9:24:15:4d:12:fd:7d:f4:1f:3a:bc:98:56:34:9e:be:
7c:95:f2:7d:7d:50:b8:ac:a2:7b:09:79:ac:84:9d:de:14:0c:
f7:be:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:53 2026 by rpki-client