Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: 5U6JkN9nTByXIet9olM4tqDyqGHHVJUoGJ7UNF6kEHA=
Subject key identifier: BE:2F:12:B5:39:EB:81:93:7A:CD:83:27:2E:01:4B:C7:EF:D6:41:68
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019CAB6BAB359F7B967FEDA8B714E8EEB230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: Ez_pZH7L8lMe256HqBWIeLgG1hs.roa (hash: JvfD5mizMy+PavivGm6Zb/1ENtcMHSO0OABQppwDyDM=)
2: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: XK3nK27r0bBxb3G+iCLP7rFAodXbFmA5HfkEqcH43dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ab:35:9f:7b:96:7f:ed:a8:b7:14:e8:ee:b2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=be2f12b539eb81937acd83272e014bc7efd64168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:77:bd:d6:52:0f:bf:fd:78:53:3a:90:32:
d1:90:b5:94:4e:0c:b0:0e:29:8f:07:96:db:4f:74:
04:6a:56:91:c2:ac:da:7a:62:35:55:00:0f:12:ac:
55:90:df:b6:47:b0:16:ed:31:19:6c:24:d3:7a:a8:
55:92:c8:12:63:2c:cb:42:2d:4f:27:d0:c9:8d:17:
04:38:c9:fb:b3:a7:2b:90:86:16:04:4b:53:cb:e5:
ca:9e:e0:94:59:42:e1:9f:29:a9:05:a2:ad:50:02:
b3:e0:03:e4:59:21:be:f7:79:d3:3e:08:d4:15:b7:
79:d2:f7:46:9f:5a:fb:2c:eb:2a:98:f9:31:6b:35:
27:69:9c:4b:ea:78:8d:64:be:cf:13:f0:52:15:90:
af:be:82:ef:b6:6f:0b:07:62:fd:0d:15:3d:09:0f:
52:4b:6a:ad:70:eb:c4:b9:45:eb:f7:aa:98:ba:91:
70:80:45:46:15:71:55:f1:6f:da:6f:89:e0:26:ee:
91:e8:0d:b6:a3:ee:5d:4e:a5:af:e9:5c:80:c4:73:
1e:88:9c:8e:34:fc:73:bf:5e:16:64:2c:28:ec:d1:
80:2b:9e:1a:dd:28:1f:49:58:68:c1:85:b2:48:da:
88:af:89:74:d1:6a:57:0b:bb:18:64:24:a3:af:d9:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:12:B5:39:EB:81:93:7A:CD:83:27:2E:01:4B:C7:EF:D6:41:68
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0e:2c:35:7a:84:bf:cd:c4:24:68:ea:6e:d2:8b:75:33:49:
43:65:55:4e:ec:a9:9f:fa:1c:4b:0e:fe:13:db:2d:ab:34:ec:
a9:11:07:5b:43:d9:ec:b2:8e:0d:24:c7:21:62:51:12:4d:09:
76:ee:f5:8b:0a:5e:cf:bf:c4:9a:bb:6b:60:90:fd:e9:ef:8b:
e9:c5:dd:56:89:61:e3:0f:a1:a2:5c:43:16:07:52:b6:91:ae:
5c:45:94:f0:b9:84:ef:75:95:c7:1e:b7:72:98:c0:a9:fa:57:
78:06:56:da:b4:62:97:41:31:64:ee:d6:c2:f5:3b:25:8b:a7:
00:51:f5:fe:b5:f7:b5:78:cf:76:4a:2a:02:7a:d1:ce:91:2e:
b1:b3:82:c3:21:cc:22:41:5e:4f:92:f9:16:4a:57:8d:d8:da:
82:79:d1:fd:72:0c:e6:29:49:59:c4:3d:00:f8:fa:41:21:6a:
38:bc:54:ae:4a:cd:75:3d:39:0c:c9:3b:63:0b:67:14:34:48:
8a:6a:fe:7c:91:9d:40:12:2f:62:96:0d:0d:be:03:7c:d1:e0:
a0:95:ca:c5:a3:f7:ae:e8:f7:0f:60:3e:f0:44:2a:0f:ec:b3:
a8:23:b4:ea:b4:28:4a:20:9d:a9:ff:a1:bb:fb:c9:1f:ea:d5:
5e:aa:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:03 2026 by rpki-client