Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: nTLIPCMLMNMmGcJ6h6gLBgFhrvd7YnORG7SUm5aW39w=
Subject key identifier: 09:62:4C:A9:BF:28:A5:12:6D:10:BD:9D:0D:F4:87:3A:AB:7F:02:18
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 019CABD99DB2F0FC5C75894A3999879C39CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0E0C
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: Nzmu0pIM9xW/rHTHyye4IgMrucTok+TaGP+fZZktGLg=)
2: nxHN94erHa9XYS8Sqo0AW7u75gg.roa (hash: bvgVC0oBjDczyWwpa0vlSgIaguhY3On+SlQmXNJvC6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9d:b2:f0:fc:5c:75:89:4a:39:99:87:9c:39:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=09624ca9bf28a5126d10bd9d0df4873aab7f0218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:42:69:dd:9a:58:84:c0:7b:0f:e8:4b:ac:
0a:1d:22:86:e6:d0:e6:3e:be:f4:a1:d4:8b:db:0d:
96:76:93:9b:b5:c5:83:95:89:5b:9a:3c:81:60:ce:
a1:f3:d2:36:31:93:7a:34:54:5c:ec:80:2a:69:cf:
8f:4f:ad:3c:04:14:f7:47:90:07:ce:3a:cf:67:32:
3c:31:61:31:2f:5d:eb:88:e3:01:da:5d:38:2f:d7:
34:56:29:c3:42:fe:71:14:98:86:59:89:ab:be:44:
30:c9:77:2c:44:09:e9:5b:8d:0a:56:d4:fc:06:9b:
46:4a:4c:eb:4a:97:ea:fe:de:96:6e:e7:ff:a1:9b:
dd:51:ea:28:9d:78:d2:c3:09:db:51:d5:e8:fe:32:
65:af:33:b6:60:1f:b4:7e:7c:20:ad:22:73:74:77:
7c:7f:69:13:87:f7:9e:26:5a:98:79:ee:7d:ea:bb:
b8:4e:8c:03:07:7d:8f:3d:66:1d:90:fd:1a:93:d5:
c9:95:64:71:27:62:4a:92:60:c8:77:0f:bd:98:f7:
d5:ea:26:c9:81:dc:8b:26:83:10:ff:34:d7:1a:0a:
9d:ea:d4:cc:6a:c9:d2:4a:de:ed:bd:4d:2a:c5:12:
a4:0c:0d:4a:d0:48:2f:bf:64:cb:f2:f6:c2:16:1b:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:62:4C:A9:BF:28:A5:12:6D:10:BD:9D:0D:F4:87:3A:AB:7F:02:18
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:dd:ea:82:5f:1e:96:40:cf:03:e8:4c:20:30:e5:0f:25:
fb:15:df:9c:70:e6:83:ea:36:88:bc:e4:48:cf:9e:5e:25:28:
c5:66:98:44:7f:d7:77:86:7e:a0:96:43:61:d0:12:b7:5a:0a:
f0:2a:c6:15:6a:b2:71:06:03:bf:a1:50:ae:71:c3:5a:4b:97:
80:39:71:41:25:07:6d:e0:fd:98:f3:8e:eb:c2:da:25:e9:da:
12:ad:9d:7f:b3:65:45:f1:a2:94:2c:f6:44:be:a1:7c:a0:a6:
7d:ae:a6:18:85:fe:16:f8:a6:94:d1:9d:bd:56:94:0e:7b:94:
a0:c3:17:52:cf:22:a3:79:85:86:73:30:f7:f5:8d:a8:5f:5c:
ae:29:cb:e5:02:6f:22:db:79:ef:7e:d1:57:14:b7:9f:4d:5e:
35:86:cc:28:a1:9c:be:d1:99:8e:9d:6a:3d:3d:a9:21:1a:ed:
55:3c:94:f7:2c:45:69:2b:81:76:3f:e7:83:06:cb:cb:e8:27:
0c:c9:43:e0:e8:34:2c:bc:1b:b6:d3:84:03:d6:bb:29:9d:6b:
ec:c1:af:2f:20:18:27:b8:67:03:fe:6c:e1:29:7a:d3:bc:7f:
50:fb:db:25:47:a0:9c:43:05:a8:8e:05:14:18:e4:7b:6a:a7:
22:4d:33:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:57 2026 by rpki-client