Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
File: MklHwK7O_of525bltFvrEK65h6Y.mft (raw, json)
Hash identifier: sDxCrtWXbRFQfyCVhjFmDEs6UkRxRxAT9Pb5lyYGECE=
Subject key identifier: F2:20:06:BB:23:31:9B:C0:77:FB:CD:44:F5:32:B8:46:93:00:B1:4C
Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Certificate serial: 019CABA1E98AEF6C6F9FB64C9AF6CEB147F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
Manifest number: 0D5B
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: MklHwK7O_of525bltFvrEK65h6Y.crl (hash: 2uKI1cVTQ5/gZbH9McnpZMe8NfAZ5RoyGLySb/XJpXE=)
2: fYsmeN-jCqvumQk1ANzN0bj9fD0.roa (hash: HXWJlZSBJsNOWJXHSVdFO/BZWcCQBKxp4a6Uo9maQhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e9:8a:ef:6c:6f:9f:b6:4c:9a:f6:ce:b1:47:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=f22006bb23319bc077fbcd44f532b8469300b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:5c:9e:19:b0:c6:bd:ad:73:96:25:1f:7f:
2b:7c:4f:2b:d0:40:a7:4e:e9:c1:8a:1c:c4:06:eb:
94:10:8d:26:66:01:7d:42:18:ac:3c:77:9e:0b:fb:
ba:60:8e:19:28:30:dd:56:96:80:36:d8:4d:08:a6:
af:18:5e:5b:c7:39:25:75:e9:8f:9d:47:9c:13:db:
2f:01:7c:9b:f1:7b:7f:ee:bd:04:42:c6:4f:d7:5a:
c8:0d:62:fc:77:76:b6:ef:41:50:26:dc:b4:58:a2:
93:ff:03:22:86:1e:ec:59:e6:f5:bf:09:40:f8:18:
96:cd:00:17:3e:3a:a6:01:28:3d:20:09:a1:01:72:
3e:47:7a:ee:ee:fe:7a:46:03:16:93:18:9b:83:be:
92:cb:19:d3:5c:9a:60:44:80:f1:a4:2d:5d:18:02:
b4:1c:e4:5c:cc:a2:a7:a6:f3:dc:7e:4a:81:a3:0f:
dd:78:36:d7:67:30:b4:ea:21:9f:3f:4a:29:9b:22:
43:c7:b6:e3:0a:7d:02:72:4b:99:4f:15:8d:ad:12:
28:68:09:ce:a7:73:81:7b:1a:18:d2:b7:4f:22:31:
ea:dd:19:7b:9c:0d:aa:09:63:2a:66:28:14:5b:54:
6f:7f:53:13:b9:ce:42:58:38:2c:2f:88:22:70:ec:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:06:BB:23:31:9B:C0:77:FB:CD:44:F5:32:B8:46:93:00:B1:4C
X509v3 Authority Key Identifier:
keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:20:39:26:41:d5:bc:c5:b8:19:be:4f:eb:97:7a:44:ce:a5:
8f:4a:1a:14:8e:55:ff:e3:78:a9:52:1c:10:c9:23:e8:87:37:
ef:12:ae:8b:31:b3:dd:3e:96:fc:dd:53:08:37:0c:96:a6:15:
57:54:6a:f8:9d:32:70:5a:7b:1d:76:66:41:cc:42:ac:d2:87:
60:91:a2:8c:a7:9d:3b:3e:36:4a:db:9e:f0:27:bd:87:51:d5:
b3:18:07:43:bd:11:19:56:d6:b7:04:57:f1:b9:26:44:d6:0e:
61:ce:87:a0:36:2e:b2:3c:16:4f:cc:73:9d:21:82:72:4a:4c:
85:0c:a8:50:53:f2:ee:4b:40:4e:f7:4d:bb:45:86:25:4b:65:
62:0b:33:52:7b:e6:b0:8b:70:ff:2b:e0:3a:fe:6b:e8:a9:90:
66:a8:38:9c:5e:72:80:50:42:6c:3a:89:88:05:dc:fa:12:2d:
e5:a3:b9:1f:17:29:34:7d:68:0b:00:aa:d5:82:30:25:5d:18:
65:12:d6:7e:a2:f1:fd:00:fd:54:49:c8:83:d6:b7:5f:ee:94:
b2:84:dd:93:f1:bf:5b:3c:24:4d:82:c7:a8:74:14:1c:28:08:
d5:d9:69:0b:ce:98:ec:13:91:5a:31:57:5c:1a:79:12:25:13:
29:20:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:41 2026 by rpki-client