Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: XAs+91SwtgeqD2zxgWyg53PBvhgm2XpXT78n6S22Exo=
Subject key identifier: 79:A7:61:73:5E:19:D4:A2:8C:AD:D2:DB:BC:8B:D7:33:C3:EE:9F:2B
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 01A1035B595586587FE4698EEE8ABA04C351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1976
Signing time: Sat 03 Oct 2026 20:01:20 +0000
Manifest this update: Sat 03 Oct 2026 20:01:20 +0000
Manifest next update: Sun 04 Oct 2026 20:01:20 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: iGE7gQVw7lQvB4oQqz2mh9MkdkSg9r5z4h+hmqU377g=)
2: wKIvrjV90LVDlWzVhhPw0JsNhOA.asa (hash: mZBNeUQGb8/vtfuerr8LdE8wDmXRz4CSVip257TStr0=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:59:55:86:58:7f:e4:69:8e:ee:8a:ba:04:c3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Oct 3 20:01:20 2026 GMT
Not After : Oct 4 20:01:20 2026 GMT
Subject: CN=79a761735e19d4a28cadd2dbbc8bd733c3ee9f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:75:39:68:dc:bd:60:85:ce:4e:6a:28:d8:
a2:0a:b8:d1:3d:ad:ac:93:80:c1:bf:7d:d8:64:b1:
d2:e4:75:b4:8f:23:3e:74:7f:c7:06:df:f9:0b:d6:
92:62:b5:65:f6:6a:ef:db:a7:b2:f0:b6:b3:93:48:
64:62:c1:2a:4e:c9:cf:27:44:85:d5:39:f0:e0:2e:
6e:71:9b:d6:6e:c5:43:e4:a1:26:10:be:bf:fd:51:
ee:42:fe:9b:de:13:16:4f:9b:ea:74:31:6a:48:75:
9c:d4:f2:f7:76:b7:20:24:7d:9b:f0:aa:d8:63:93:
61:8f:b7:ea:24:2f:bd:09:e5:b0:2d:f9:db:a2:f3:
59:2a:04:a5:1a:ce:aa:4c:e6:ff:ad:ab:48:39:45:
70:46:42:16:66:ef:41:4f:a1:a4:47:2b:19:e3:da:
6f:6e:a1:05:bc:6a:e5:4e:d5:4a:23:11:ef:f2:97:
d2:15:b0:ae:4a:04:27:8c:2e:ca:cf:55:d8:03:7e:
d7:ff:f5:86:e4:f7:dc:37:4f:fb:12:55:a3:db:19:
c0:d2:c5:92:6b:a2:5c:cd:fc:27:90:32:ed:a8:46:
43:bc:8c:6e:78:e0:93:ed:45:ac:44:2d:c8:ce:65:
4e:4f:47:72:47:b1:a0:8a:d7:fb:ed:12:4a:cd:ab:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:61:73:5E:19:D4:A2:8C:AD:D2:DB:BC:8B:D7:33:C3:EE:9F:2B
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:90:5c:ff:d6:86:db:84:61:75:eb:be:41:1d:f1:7c:71:56:
cf:bb:cb:82:72:c9:88:f9:d3:b6:22:d7:c5:0a:eb:d1:c0:43:
9a:8f:31:fb:54:35:7f:7e:b2:c7:e1:79:24:b3:8a:6b:ad:48:
be:35:ba:12:a9:b9:00:5d:99:ef:34:9d:47:c9:23:7c:bb:73:
73:21:df:26:e0:52:49:4b:ec:e0:a3:7c:de:64:34:06:05:d1:
52:77:8d:38:f8:27:74:59:e0:c8:22:29:42:64:b2:f0:5a:8f:
5a:41:da:17:be:18:4f:35:ee:07:04:9b:de:24:93:2e:fb:3a:
e1:6e:4f:3f:86:04:dc:97:43:65:3f:8a:42:e9:32:e3:51:af:
ec:08:13:b3:8f:76:0d:dd:5d:fd:e1:ea:f1:2b:d3:0c:60:fb:
4e:f7:ba:5d:a4:db:6f:21:18:e2:05:53:cf:a0:25:4e:f0:db:
61:1b:d3:34:9a:69:9a:c9:3d:b1:d0:64:53:fa:6b:2c:da:0b:
ac:d6:fc:ab:3f:35:0e:1b:77:75:2c:f0:ab:6d:0a:3f:f0:fa:
06:d9:dc:4d:e8:ce:00:9f:c0:43:73:5e:2d:c9:5e:68:73:a9:
7c:5e:d6:5d:2b:09:33:a3:c9:a9:3c:92:2f:4f:1a:4c:54:29:
f8:cb:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:31 2026 by rpki-client