Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: FrUMQYhbI1JIV/dTn8gGDGit1U06dAKwpGYQfzd+iUQ=
Subject key identifier: B3:FC:EB:2E:95:06:99:46:D7:4A:E7:7C:96:10:C3:EB:BA:15:B4:F1
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019CA86AC4E5BC9596B2E1C3C952EDB0B8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1734
Signing time: Sun 01 Mar 2026 08:01:35 +0000
Manifest this update: Sun 01 Mar 2026 08:01:35 +0000
Manifest next update: Mon 02 Mar 2026 08:01:35 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: fFeir6Mv7iy/6HstOGZV9csTQnaZUWXkttoRVDk4jnw=)
2: nJR_NliYFB-V9T4gAy6T3mjTukw.asa (hash: lVinzgYc0skkJP4xD+sknPRiLs/Ljwi13qaQW4UVh8Y=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:c4:e5:bc:95:96:b2:e1:c3:c9:52:ed:b0:b8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Mar 1 08:01:35 2026 GMT
Not After : Mar 2 08:01:35 2026 GMT
Subject: CN=b3fceb2e95069946d74ae77c9610c3ebba15b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:71:75:9d:f4:02:ac:b2:b9:b4:48:d8:69:
fd:06:ef:7c:ce:de:1c:c7:84:14:77:d9:13:1c:0e:
a8:dc:48:8a:b3:41:e0:30:9b:98:9b:69:e1:66:cf:
05:af:cb:82:99:3b:5f:24:f6:7d:9e:99:75:dd:b3:
34:59:e9:c1:44:05:e7:6a:bd:20:9b:b1:66:0d:98:
b5:8c:97:5b:26:ab:90:c0:b7:77:c0:9e:02:47:f8:
3d:b3:c0:b3:8f:4b:84:22:ab:03:c0:3e:2e:24:8f:
8e:6d:71:49:09:81:21:a7:78:c9:64:8d:86:a1:60:
09:3b:75:c7:de:cb:10:2c:d1:0a:af:3f:64:43:49:
dc:53:0f:57:7d:2a:1b:0b:36:5c:e2:16:6b:f7:59:
ce:33:b4:b9:a8:06:5f:96:20:bf:b6:fd:bf:ac:bc:
e0:e2:82:4c:ed:54:d5:df:65:50:ce:d1:7c:32:9b:
4c:9d:45:e4:66:ad:d2:6d:e5:78:f4:dc:28:96:13:
9e:7a:97:17:c3:28:71:4b:2c:cb:f6:6c:26:f4:8f:
1c:73:c4:c2:a3:e4:e0:58:11:7e:8c:83:3d:31:76:
f6:70:37:82:01:1a:27:2f:91:1e:4a:09:38:f5:6b:
e6:c0:df:e6:1e:d0:73:09:09:aa:20:ee:f7:62:bf:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:EB:2E:95:06:99:46:D7:4A:E7:7C:96:10:C3:EB:BA:15:B4:F1
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:90:da:78:ab:4b:8a:9e:65:46:5f:1f:46:e1:da:8d:a3:95:
cd:79:de:cf:ec:f6:c1:df:4b:ae:45:b6:a8:7b:57:65:cd:02:
2a:3c:82:5a:2c:c1:6d:78:18:fb:4b:0b:eb:51:f8:7f:8a:bc:
fd:0a:67:ca:aa:82:63:92:08:92:54:0c:c2:56:a9:7e:c9:ab:
3e:31:c9:b0:77:97:d9:71:5b:6b:65:ad:25:e2:6c:e3:2c:ad:
98:dc:6c:84:b2:12:ba:34:b6:a3:ec:e1:36:cb:61:ab:32:0f:
15:97:8b:12:e2:0f:95:ca:b9:0f:0b:4c:ed:cd:2f:71:7b:20:
8c:95:f1:34:43:bd:26:04:c5:ad:43:2e:f7:db:fa:12:26:9b:
7f:04:2b:f9:47:ea:62:47:75:cf:ad:3c:f6:42:19:75:4a:5e:
a8:54:a5:bd:01:52:1b:b8:72:9c:79:71:2c:20:d6:e6:e5:1d:
bf:c4:6b:98:a9:3f:1b:94:31:13:9f:07:d1:d1:34:9a:b8:89:
ff:35:34:11:0b:de:6a:33:7a:2d:c9:17:f6:2e:b7:21:1b:56:
23:5e:6d:56:97:ef:6d:d9:aa:4d:83:ac:ec:d8:f5:c4:4f:f3:
11:d5:85:d4:c7:d1:cc:65:27:a6:5e:c8:7b:1a:a8:a5:64:af:
00:bb:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:39:24 2026 by rpki-client