Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: 5weWOoReqSwnxFkzz4EvqyYQFYUYPXYp7yPFpKx8cZM=
Subject key identifier: 20:AA:40:79:F4:4B:A7:1F:C0:B0:03:0D:EC:8B:E6:6E:5E:4E:3B:95
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 019D996242789804CB949AC15E8E1CA87650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0FA6
Signing time: Fri 17 Apr 2026 03:00:46 +0000
Manifest this update: Fri 17 Apr 2026 03:00:46 +0000
Manifest next update: Sat 18 Apr 2026 03:00:46 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: 7sB4F/Rf8S7FjOXV8rVtm2SpItKgtbr1+u7FxIGNSng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:42:78:98:04:cb:94:9a:c1:5e:8e:1c:a8:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Apr 17 03:00:46 2026 GMT
Not After : Apr 18 03:00:46 2026 GMT
Subject: CN=20aa4079f44ba71fc0b0030dec8be66e5e4e3b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:8b:8b:ed:e7:fd:0b:2a:04:cc:68:86:f4:
a6:f7:a3:ea:60:fd:a8:0f:8a:4a:25:11:9b:63:c3:
ba:dd:cd:2c:95:ee:84:75:5f:a5:3f:b5:a5:4e:60:
0c:dc:86:cc:94:2e:c9:5d:3d:57:49:a0:4d:60:6c:
91:e2:82:77:eb:fa:62:5d:5a:81:dd:28:59:c2:45:
7e:33:64:53:b4:a7:99:42:51:43:54:1f:d9:4d:9f:
2d:9f:e5:fe:cf:1b:a5:1e:9b:5a:72:26:e2:c3:4b:
28:6a:8b:13:ce:d8:57:36:d6:d8:fc:fc:ca:d6:15:
65:3f:d0:a4:be:99:56:72:83:7c:c3:a8:aa:4b:7d:
c7:2c:00:3a:a2:2b:a1:0b:00:c6:0d:be:08:c6:1a:
58:bb:96:55:46:5f:ae:77:fa:53:04:b0:b7:aa:38:
10:2a:f5:12:b9:6f:09:b3:1a:87:a6:2c:a1:51:bd:
ef:a1:d7:3d:6a:1d:a0:87:68:e2:a3:61:b9:ec:b1:
03:8b:0a:17:e1:4c:39:11:d9:b1:87:86:e6:8e:60:
06:b6:04:d1:c5:0f:6a:42:dc:0b:8b:3b:e4:ae:24:
b6:df:12:e0:dc:0c:4e:b5:8f:60:2a:56:21:65:79:
c0:93:1c:d7:03:83:f4:7d:a7:f7:96:11:ea:8b:95:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:40:79:F4:4B:A7:1F:C0:B0:03:0D:EC:8B:E6:6E:5E:4E:3B:95
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:96:1c:e9:fe:76:e0:2c:1b:75:b5:8e:4e:ba:ef:9e:49:7c:
f9:f7:f4:9d:6a:70:ee:a7:38:17:0e:7f:7e:9c:0e:58:53:51:
e8:6c:d8:21:b3:c0:85:57:b5:af:57:0c:57:29:85:bd:e8:cb:
de:0f:82:49:be:3c:ca:f8:0c:41:e6:1c:65:cb:17:34:15:9c:
11:ba:41:7f:ab:58:9f:94:9a:0d:18:31:3b:60:b5:27:32:68:
66:6f:b7:8e:28:1e:45:ea:f1:82:82:67:bb:33:57:ba:25:4e:
98:85:18:37:9c:b5:1d:4c:c2:95:3f:90:33:9a:95:b5:36:d6:
07:c9:03:a8:20:4a:37:df:83:43:a6:e0:f3:3e:1d:54:71:22:
3e:af:2b:a3:81:ee:7a:8b:4f:d8:f6:f4:00:79:73:fd:39:fd:
0e:b8:9e:61:8f:a0:d5:00:be:9d:73:b6:30:71:64:62:91:d4:
d2:46:24:55:36:ad:ca:49:ba:b6:42:8f:3d:b8:d5:f9:09:97:
d9:19:37:6e:91:3e:b2:0a:ee:97:62:20:ba:83:6a:c3:ac:f3:
45:58:b6:56:5a:e0:aa:a2:b1:7c:80:d0:ee:e3:c7:f4:93:c8:
e0:e2:d0:45:ed:fb:ae:4b:b7:50:65:7c:03:7f:37:12:3a:cb:
ba:65:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:11 2026 by rpki-client