Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: HQjXDF7X8LcyGhZ1w8CVF0QbwE2NU2Se7odr+UIta1g=
Subject key identifier: E2:97:B3:1D:1A:B0:6E:67:23:82:AC:EA:25:BD:E6:D3:A5:B9:ED:62
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019D9BBEDBEC025C42956DACC638920F37D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 17B2
Signing time: Fri 17 Apr 2026 14:01:09 +0000
Manifest this update: Fri 17 Apr 2026 14:01:09 +0000
Manifest next update: Sat 18 Apr 2026 14:01:09 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: dB+F3/Ivo5VeP03djZKfE31R6kaw+6BEtTEo60+9//8=)
2: nJR_NliYFB-V9T4gAy6T3mjTukw.asa (hash: lVinzgYc0skkJP4xD+sknPRiLs/Ljwi13qaQW4UVh8Y=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:db:ec:02:5c:42:95:6d:ac:c6:38:92:0f:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Apr 17 14:01:09 2026 GMT
Not After : Apr 18 14:01:09 2026 GMT
Subject: CN=e297b31d1ab06e672382acea25bde6d3a5b9ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:ad:b0:8d:8f:77:46:9b:28:8e:f3:0e:35:
5b:71:16:a1:2f:ae:d1:9a:f0:c2:3c:88:2a:3e:2d:
ba:25:e8:e1:ed:a2:0a:dc:4b:45:81:f5:46:36:5e:
8c:28:57:89:2a:5a:46:50:f5:06:19:71:dd:38:f1:
4e:8b:f6:ae:94:51:a2:fe:8e:1f:1b:51:26:c5:61:
b5:c3:9b:22:78:a3:6e:ee:0c:09:c4:e9:68:ee:b7:
b4:93:50:c2:d3:3c:b3:18:ae:25:33:bc:69:ac:ed:
36:37:fe:e6:f0:ee:31:b2:84:6a:84:35:3b:2f:b6:
31:6b:c2:fa:76:11:23:3c:e3:db:c3:41:2b:97:f5:
1f:6a:16:c3:3f:0d:4f:89:96:67:c7:66:e0:3b:7e:
7d:6a:8b:d4:a4:c9:02:14:37:00:f6:93:2e:53:cc:
98:21:b7:34:b8:de:9a:bc:17:af:f0:0d:2a:87:dc:
98:75:a3:e3:bf:bd:2d:c0:e0:ce:15:20:41:d2:84:
55:47:06:40:88:32:56:f4:cb:d7:25:fd:5d:71:f1:
17:1b:fc:fd:bf:41:bf:cb:ca:f0:f4:96:bf:56:b2:
45:ff:83:c5:95:cc:e4:da:4f:8e:d7:46:91:b2:d9:
41:3b:8a:09:45:bf:5d:e4:74:59:11:96:29:79:fc:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:B3:1D:1A:B0:6E:67:23:82:AC:EA:25:BD:E6:D3:A5:B9:ED:62
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f0:69:36:2b:53:2a:ee:b3:7c:ef:38:f2:4f:8a:cd:ba:e0:
11:94:51:26:c8:af:9e:7c:6a:61:de:4a:5d:cc:13:2a:e8:a9:
ca:8d:2c:65:14:a5:17:9f:ba:c6:0b:2e:65:e7:f8:7f:79:9a:
13:a4:b2:86:17:c8:2b:c8:9a:ff:5c:a1:75:2d:07:cd:62:88:
6c:60:9a:29:9a:3f:b2:c9:60:d9:7d:74:68:3b:53:91:79:53:
eb:c3:4d:b9:5c:a1:f1:7d:d4:24:c5:96:ad:0f:c8:ca:16:3a:
54:42:77:c8:86:15:89:a0:b8:e2:e9:35:80:20:73:e4:76:cb:
f7:f3:3b:3f:aa:4f:7b:85:95:4b:a9:bf:81:92:f2:45:c7:ab:
59:e8:cf:28:8b:fb:98:49:fb:76:8c:9b:3d:76:5a:93:03:48:
3c:87:7d:90:02:1f:c0:01:9f:34:bc:e9:df:a1:25:46:88:67:
a3:b2:72:b2:f5:2d:2e:d1:45:3e:b0:68:a8:28:a7:5e:6d:79:
23:0a:55:e9:f5:f7:cf:a2:db:42:b1:2d:3c:7c:ec:d2:b0:3d:
e4:4f:7f:fb:21:70:14:00:14:5b:60:db:c8:83:0c:1a:66:61:
93:96:cd:12:eb:59:99:27:a8:83:31:3c:68:c7:81:05:3c:4a:
cc:bb:27:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvtvsAlxClW2sxjiSDzfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw
NGE1MzMwHhcNMjYwNDE3MTQwMTA5WhcNMjYwNDE4MTQwMTA5WjAzMTEwLwYDVQQD
EyhlMjk3YjMxZDFhYjA2ZTY3MjM4MmFjZWEyNWJkZTZkM2E1YjllZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuytsI2Pd0abKI7zDjVbcRahL67R
mvDCPIgqPi26Jejh7aIK3EtFgfVGNl6MKFeJKlpGUPUGGXHdOPFOi/aulFGi/o4f
G1EmxWG1w5sieKNu7gwJxOlo7re0k1DC0zyzGK4lM7xprO02N/7m8O4xsoRqhDU7
L7Yxa8L6dhEjPOPbw0Erl/UfahbDPw1PiZZnx2bgO359aovUpMkCFDcA9pMuU8yY
Ibc0uN6avBev8A0qh9yYdaPjv70twODOFSBB0oRVRwZAiDJW9MvXJf1dcfEXG/z9
v0G/y8rw9Ja/VrJF/4PFlczk2k+O10aRstlBO4oJRb9d5HRZEZYpefw3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKXsx0asG5nI4Ks6iW95tOlue1iMB8GA1UdIwQY
MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt
YmI0YTg2NzJjYzBjLzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj
LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvBpNitT
Ku6zfO848k+KzbrgEZRRJsivnnxqYd5KXcwTKuipyo0sZRSlF5+6xgsuZef4f3ma
E6SyhhfIK8ia/1yhdS0HzWKIbGCaKZo/sslg2X10aDtTkXlT68NNuVyh8X3UJMWW
rQ/IyhY6VEJ3yIYViaC44uk1gCBz5HbL9/M7P6pPe4WVS6m/gZLyRcerWejPKIv7
mEn7doybPXZakwNIPId9kAIfwAGfNLzp36ElRohno7JysvUtLtFFPrBoqCinXm15
IwpV6fX3z6LbQrEtPHzs0rA95E9/+yFwFAAUW2DbyIMMGmZhk5bNEutZmSeogzE8
aMeBBTxKzLsnZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:54 2026 by rpki-client