
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier: AUfUTYYbXQR6swo5NkrW11VItR8NxpIM0vib7uqmubs=
Subject key identifier: D2:F9:14:C3:8A:88:D6:77:99:0C:C7:00:CD:2A:AC:2A:3F:3F:D8:37
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial: 019CA9B3D96125E3174110145AC2053DB31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number: 0719
Signing time: Sun 01 Mar 2026 14:01:01 +0000
Manifest this update: Sun 01 Mar 2026 14:01:01 +0000
Manifest next update: Mon 02 Mar 2026 14:01:01 +0000
Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: y+S8qoBqxNEJ40rSZSK31CpGKgyOpNtFc/3lubjuEGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:d9:61:25:e3:17:41:10:14:5a:c2:05:3d:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Validity
Not Before: Mar 1 14:01:01 2026 GMT
Not After : Mar 2 14:01:01 2026 GMT
Subject: CN=d2f914c38a88d677990cc700cd2aac2a3f3fd837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:30:e5:8e:81:aa:ce:56:83:16:2a:61:af:
8e:c5:af:74:ac:38:d0:31:31:c6:f9:94:54:8a:51:
ca:df:e1:9a:d1:47:ec:d1:b5:83:f4:a6:c4:1d:4f:
51:47:1d:38:63:94:99:8e:f6:36:cd:19:ce:65:07:
1c:6c:7b:ed:e1:dc:17:09:3f:47:c9:af:d7:0e:e1:
cc:1a:69:e5:a6:19:9d:69:5d:bc:44:30:4f:54:a0:
f4:8f:37:dc:49:63:7e:19:01:45:71:4c:23:10:43:
fc:da:20:6e:9d:5f:c8:21:6b:e2:75:ee:f3:27:59:
a6:b2:72:b5:71:3a:4c:b9:2f:40:7c:37:45:3f:a0:
98:9f:47:ea:72:36:e0:44:0e:0c:fe:82:1e:a4:fd:
b8:d6:81:96:87:89:e5:74:a8:ba:e7:44:9d:cc:c4:
df:e3:ff:a1:d7:1b:e6:54:ba:ce:0e:b0:4b:6d:3d:
34:d4:7c:96:4e:10:7b:73:7f:31:ff:4e:99:01:dd:
46:2e:76:1d:34:66:9e:48:2a:04:b2:51:b2:0b:ef:
52:b2:ad:5c:36:f2:50:9c:51:fc:f8:43:a3:88:cf:
3e:e7:87:18:71:27:63:c5:64:9a:32:14:27:98:f4:
73:fc:48:cc:92:fa:06:3c:ff:59:b9:0d:9c:2a:cb:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:14:C3:8A:88:D6:77:99:0C:C7:00:CD:2A:AC:2A:3F:3F:D8:37
X509v3 Authority Key Identifier:
keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:af:8f:46:66:68:dd:e4:db:de:8f:de:9d:34:86:60:ff:7b:
a4:cf:f0:cb:72:56:02:f1:ed:fa:4f:e7:40:f8:86:94:ed:03:
a0:38:ae:ab:b6:27:95:76:c8:18:0e:2b:1c:8b:bf:7e:bd:be:
67:6c:d4:30:84:dd:92:13:72:28:db:0e:8b:f3:15:02:76:04:
9c:70:92:a2:fd:d5:71:a8:c0:2c:55:eb:fb:f7:25:ba:57:51:
ad:eb:96:d6:29:a2:c0:34:ac:d7:67:53:29:ea:49:1a:f3:8f:
d7:42:e9:e3:7b:ac:8a:21:de:95:f3:e9:12:97:e0:7b:20:da:
64:33:d0:a2:fe:7d:a4:6d:f6:1c:3b:f3:a3:12:14:53:8d:a7:
32:39:42:be:e9:ae:95:30:dc:44:47:8f:d6:04:46:e0:b6:c3:
28:1d:fb:a3:b7:a7:03:09:b1:80:a3:66:8a:80:1e:1c:cf:48:
e6:f3:40:7a:3d:97:bd:c3:f0:ef:db:e7:86:5b:80:24:4c:02:
60:86:d5:ad:a1:d9:35:27:cd:70:b0:4f:0f:dc:3f:00:ab:e1:
30:e3:35:97:d6:53:d4:bb:29:07:59:d2:4f:d7:13:b9:b6:b9:
d3:bf:ec:91:4a:32:f8:1a:bf:8d:66:2e:c8:fe:44:45:6f:7e:
e9:2b:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:17 2026 by rpki-client