Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: r2nth1w6b7vXDETXXGf/6BPp9482ZzLsbuiDoKf7U/4=
Subject key identifier: F3:12:FA:85:98:15:F6:93:A4:EF:45:25:B8:5C:26:5B:1B:D0:64:BA
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019FF8DA2F16B21DACB2F4CF92F4FC4BC917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 18EC
Signing time: Thu 13 Aug 2026 02:01:16 +0000
Manifest this update: Thu 13 Aug 2026 02:01:16 +0000
Manifest next update: Fri 14 Aug 2026 02:01:16 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: peomdpzDTA4DZchuoabnzBagvzSSU9F7U20rM6G3zjY=)
2: wKIvrjV90LVDlWzVhhPw0JsNhOA.asa (hash: mZBNeUQGb8/vtfuerr8LdE8wDmXRz4CSVip257TStr0=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:2f:16:b2:1d:ac:b2:f4:cf:92:f4:fc:4b:c9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Aug 13 02:01:16 2026 GMT
Not After : Aug 14 02:01:16 2026 GMT
Subject: CN=f312fa859815f693a4ef4525b85c265b1bd064ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:68:2b:f9:fe:ab:b6:fa:2e:5a:98:85:81:
28:86:60:70:19:45:24:43:aa:ca:28:5e:c4:62:0a:
d4:55:56:5e:6a:73:94:c4:f4:0b:8a:b1:c5:ad:2f:
33:d0:fa:41:f0:99:73:51:a3:1f:06:57:a1:49:cf:
9b:79:64:ab:82:66:52:7d:0c:f6:1e:38:a0:74:93:
94:6c:99:2a:e2:ab:80:aa:44:59:b1:18:c6:8e:dd:
34:fa:c8:78:4e:cf:2c:0f:04:04:11:50:f2:80:0c:
7f:bb:04:35:a7:f4:08:34:12:12:fb:aa:0b:19:af:
c3:e1:6c:31:5b:42:46:62:6d:0e:eb:5d:39:28:f7:
48:e2:52:b3:40:2e:55:61:6f:1d:be:d6:b9:eb:f7:
dd:c3:52:fd:b3:81:84:da:b9:8b:9e:cc:99:1c:8f:
d3:5f:56:c1:64:b6:c5:e3:95:5b:9b:03:8c:4f:dc:
76:d7:be:16:a6:e0:be:6c:cf:c2:1b:ea:c2:c4:c2:
ee:40:af:58:e9:84:2b:82:71:89:5e:44:b1:b4:79:
98:96:9e:1f:b2:e0:f2:88:a0:a2:1f:21:8c:01:fe:
8d:52:b9:f5:50:62:a8:5a:87:2e:8d:44:b6:0a:05:
33:eb:29:0b:13:ea:9e:d5:0b:2e:c1:f7:30:ef:51:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:FA:85:98:15:F6:93:A4:EF:45:25:B8:5C:26:5B:1B:D0:64:BA
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e8:e8:e4:61:75:d9:03:60:56:e3:0d:55:d9:f1:6e:a1:f1:
d2:47:a5:d8:05:45:86:4c:a8:28:b5:7c:2a:30:1d:1e:d8:cf:
30:c9:44:ad:c9:84:4c:80:14:f3:6c:d8:5e:d0:2d:99:f8:60:
90:b4:c0:8a:9f:4d:5c:45:18:11:e7:db:73:a8:ae:3c:ca:21:
ce:1c:9e:7a:f7:83:c3:f5:3a:a4:cc:b9:c4:4d:be:ab:d5:38:
f9:af:bd:05:76:d4:c4:03:4f:a6:18:0c:68:45:7b:3a:ad:c8:
61:3a:d9:d0:2e:15:1a:e3:03:75:44:d2:a4:29:47:82:7e:94:
97:38:37:c7:41:55:63:eb:0f:4d:b1:6e:21:0e:53:93:e9:40:
b8:85:7d:0c:46:5f:70:a5:0b:a0:e2:b9:4c:3c:31:1f:91:5d:
b4:2f:e6:44:81:bc:d6:c0:71:01:67:fa:a2:03:61:ed:b2:bd:
f0:92:34:0e:f6:b8:3f:20:2d:cb:45:a1:d6:b2:bf:2e:9d:91:
5a:84:b3:7f:6d:ae:12:f2:7f:b3:af:0d:3e:1c:cb:06:71:1f:
cb:a3:8e:7c:6e:47:fb:86:6e:40:c1:22:f3:a0:07:5f:22:52:
a1:4f:04:70:19:d2:7f:c9:4a:a1:d0:ea:c7:22:37:2a:84:db:
38:13:ff:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42i8Wsh2ssvTPkvT8S8kXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw
NGE1MzMwHhcNMjYwODEzMDIwMTE2WhcNMjYwODE0MDIwMTE2WjAzMTEwLwYDVQQD
EyhmMzEyZmE4NTk4MTVmNjkzYTRlZjQ1MjViODVjMjY1YjFiZDA2NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5poK/n+q7b6LlqYhYEohmBwGUUk
Q6rKKF7EYgrUVVZeanOUxPQLirHFrS8z0PpB8JlzUaMfBlehSc+beWSrgmZSfQz2
HjigdJOUbJkq4quAqkRZsRjGjt00+sh4Ts8sDwQEEVDygAx/uwQ1p/QINBIS+6oL
Ga/D4WwxW0JGYm0O6105KPdI4lKzQC5VYW8dvta56/fdw1L9s4GE2rmLnsyZHI/T
X1bBZLbF45VbmwOMT9x2174WpuC+bM/CG+rCxMLuQK9Y6YQrgnGJXkSxtHmYlp4f
suDyiKCiHyGMAf6NUrn1UGKoWocujUS2CgUz6ykLE+qe1Qsuwfcw71HwZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMS+oWYFfaTpO9FJbhcJlsb0GS6MB8GA1UdIwQY
MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt
YmI0YTg2NzJjYzBjLzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj
LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeejo5GF1
2QNgVuMNVdnxbqHx0kel2AVFhkyoKLV8KjAdHtjPMMlErcmETIAU82zYXtAtmfhg
kLTAip9NXEUYEefbc6iuPMohzhyeeveDw/U6pMy5xE2+q9U4+a+9BXbUxANPphgM
aEV7Oq3IYTrZ0C4VGuMDdUTSpClHgn6Ulzg3x0FVY+sPTbFuIQ5Tk+lAuIV9DEZf
cKULoOK5TDwxH5FdtC/mRIG81sBxAWf6ogNh7bK98JI0Dva4PyAty0Wh1rK/Lp2R
WoSzf22uEvJ/s68NPhzLBnEfy6OOfG5H+4ZuQMEi86AHXyJSoU8EcBnSf8lKodDq
xyI3KoTbOBP/ng==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:45 2026 by rpki-client