Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: OLNtkQ46Il9pl74im8dyw2yalIuHS8h8YpK324Shve0=
Subject key identifier: 30:AF:BC:E0:94:05:25:8B:9F:99:A8:F3:CB:9E:DE:74:B0:F9:CF:0C
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 019D2583B8B2BF923ADDF90EA5B92F1C1BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0F6A
Signing time: Wed 25 Mar 2026 15:01:22 +0000
Manifest this update: Wed 25 Mar 2026 15:01:22 +0000
Manifest next update: Thu 26 Mar 2026 15:01:22 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: fKSUKXDREzgFUKJYOXMuaFG888WKu75lWoy87h+zK4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b8:b2:bf:92:3a:dd:f9:0e:a5:b9:2f:1c:1b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Mar 25 15:01:22 2026 GMT
Not After : Mar 26 15:01:22 2026 GMT
Subject: CN=30afbce09405258b9f99a8f3cb9ede74b0f9cf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cd:6e:d0:a8:31:15:8c:f5:a6:63:e3:03:3d:
aa:90:2d:c2:d5:dd:86:7e:67:e7:66:23:e8:76:a2:
c1:33:32:e0:35:72:c5:a0:62:b1:1d:db:3e:27:9f:
48:68:81:23:df:8a:ec:aa:43:fc:7d:ae:79:50:56:
11:2e:c9:cf:6c:c0:1e:ac:ea:60:d8:58:b5:1f:2e:
b5:7a:bc:de:6f:85:38:d8:cd:82:f8:16:1d:ba:8f:
c7:b6:85:15:8c:28:68:65:92:f4:7f:a2:15:a9:f3:
c9:b9:e3:3d:96:0c:8b:ba:e9:c4:64:aa:0b:d0:ce:
3c:d1:a3:29:a0:3d:a2:1a:cb:1a:a0:c2:4a:6e:8a:
27:2c:7e:72:e3:32:a1:b7:df:4c:62:ed:1e:6a:a1:
f6:61:e5:24:bf:ee:8f:84:d9:35:ad:10:c3:e3:b8:
b3:46:b3:aa:50:2a:da:99:cd:53:22:a5:2e:ce:76:
3d:55:77:2a:1f:14:c7:42:42:ad:66:36:ce:d9:6f:
14:03:64:6c:99:d3:f3:db:67:93:3d:e5:2e:d5:1f:
98:5d:13:8f:3c:0d:9a:8a:78:ac:e8:a9:eb:57:ec:
75:1e:fa:a5:cc:64:99:7a:35:a0:ae:6a:43:01:44:
c0:c7:51:fc:42:36:fe:d6:67:ac:f4:65:b8:5b:d4:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:BC:E0:94:05:25:8B:9F:99:A8:F3:CB:9E:DE:74:B0:F9:CF:0C
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ce:36:29:27:79:00:ea:55:8f:d1:e5:5b:dc:f1:ca:48:a1:
f4:85:f2:f5:33:1d:e7:72:7e:23:bc:39:bf:a2:81:e4:ba:3e:
ef:f0:27:31:74:56:e1:b9:53:7c:04:21:f3:56:ca:72:7d:58:
71:08:77:3f:d0:4a:80:17:6e:ad:7b:e4:2f:82:bf:ed:a1:2a:
c9:58:99:93:d8:bc:7c:81:14:e5:0b:a9:e9:06:c6:16:95:1d:
dd:09:45:40:db:6a:e4:5b:bb:54:e1:55:15:4f:f6:63:de:46:
48:a5:5d:b1:b2:fc:4a:46:ad:0c:e4:c1:d4:98:a8:9a:25:ec:
f0:93:da:73:d9:d6:9c:b0:9c:d5:7e:a1:0e:1a:26:1d:e5:98:
c3:1c:dc:ae:7f:fa:81:3e:74:ab:f3:6c:9b:97:88:98:43:43:
93:ba:55:45:bd:43:78:8c:ba:b8:1b:e1:05:47:0b:db:6f:91:
1d:c8:88:6a:98:91:1b:da:bd:99:32:ff:41:5c:ac:b3:9b:15:
60:eb:92:87:89:18:b4:5c:1c:4d:b8:79:9d:1f:64:d8:2e:ca:
16:b3:1d:1c:a1:a0:cb:42:02:56:87:a7:b0:e2:ca:1f:e5:0e:
db:ed:75:a7:43:d1:9e:f9:7a:0e:b8:22:7c:06:67:68:b9:85:
b5:50:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:44 2026 by rpki-client