Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: 5Y29li4+U3N5UDxbVosth4i3/i9JPGSIY+Lq3EVhYzA=
Subject key identifier: 3C:B2:56:AA:9C:28:A8:C1:86:D0:7B:2A:CE:84:37:9D:36:DD:7E:0A
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 019CDE7D0FD38BFC8F880EE80FB7F34D1422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1750
Signing time: Wed 11 Mar 2026 20:01:03 +0000
Manifest this update: Wed 11 Mar 2026 20:01:03 +0000
Manifest next update: Thu 12 Mar 2026 20:01:03 +0000
Files and hashes: 1: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: nKTKsaHBPXPrPBPE6vCoKWDbITvpjJsgv/oU/SCqEes=)
2: nJR_NliYFB-V9T4gAy6T3mjTukw.asa (hash: lVinzgYc0skkJP4xD+sknPRiLs/Ljwi13qaQW4UVh8Y=)
3: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (hash: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:7d:0f:d3:8b:fc:8f:88:0e:e8:0f:b7:f3:4d:14:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Mar 11 20:01:03 2026 GMT
Not After : Mar 12 20:01:03 2026 GMT
Subject: CN=3cb256aa9c28a8c186d07b2ace84379d36dd7e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:a0:ce:c2:d8:8e:41:6f:03:fc:0c:25:e4:
17:d6:37:b6:75:ef:e2:8b:d2:d3:69:d9:7b:08:23:
8a:1a:f4:4e:cd:83:38:61:0d:43:df:cc:f2:5e:46:
b7:62:a1:9d:d3:1c:d6:ca:5e:bd:95:8a:f7:ce:ab:
fb:6e:e5:13:41:3c:15:77:39:61:c2:cc:c9:73:c4:
5a:c0:ec:ae:18:df:8c:74:f7:49:0f:60:94:6b:ce:
ca:91:e1:7c:f8:81:c1:80:d1:61:42:9c:eb:11:74:
b5:e8:71:92:42:7a:7f:66:42:42:c6:3c:ea:ad:c3:
ae:60:a9:1d:e8:bf:48:2b:c3:d2:c5:d7:12:2d:3f:
e3:28:e6:e9:92:41:b9:6b:79:48:cc:2b:38:68:8e:
6d:fe:29:68:d5:62:3b:4a:a1:91:42:85:48:9e:b0:
17:63:08:a2:6b:f2:4d:af:95:39:bc:44:74:36:2a:
48:ca:fb:24:de:02:7d:e4:59:90:7c:45:d7:f2:d0:
b3:65:91:d0:b0:70:cb:ae:9d:93:b7:ab:d7:36:4d:
d6:95:00:80:23:33:13:56:91:c5:e0:1c:a1:f3:8c:
d5:68:8b:d9:3e:18:14:26:dc:3d:10:61:5a:ee:d2:
82:22:ac:c2:4f:1b:24:87:d3:de:04:78:bf:95:25:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B2:56:AA:9C:28:A8:C1:86:D0:7B:2A:CE:84:37:9D:36:DD:7E:0A
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:cc:31:53:b0:a2:85:10:88:96:65:60:2b:35:2d:a4:43:
af:3b:df:55:b5:23:4d:6b:c6:74:3a:4f:38:30:f7:ae:70:50:
70:c0:64:bd:04:61:dc:30:4d:cc:b3:35:4b:6d:2f:3d:00:3c:
bb:f5:c0:f8:22:79:a6:8c:af:a4:c2:80:8d:ac:c2:0d:5d:0e:
0f:22:67:59:0b:ec:79:36:02:8a:8b:08:58:e4:ef:67:29:9d:
f3:08:83:35:db:5f:59:1d:15:56:2b:29:fc:9e:2e:5e:a6:2e:
3d:41:ba:43:d0:5d:d9:61:8b:8e:2d:c0:27:e5:18:21:dc:b4:
74:b7:92:bb:1f:22:d3:a8:17:aa:45:50:ec:20:f7:dc:4d:c0:
70:ab:e3:60:ae:19:d9:5a:5f:cf:2c:ba:03:18:1d:fc:9e:90:
cc:a2:f5:e5:c5:12:c5:6b:25:07:99:3c:af:d7:32:d1:1f:12:
ff:32:52:8f:0b:8f:93:11:04:29:c3:a9:ad:1f:07:a5:66:19:
4d:98:0f:fc:5b:d1:f2:5c:52:99:aa:e8:5f:da:c2:41:d9:81:
12:d9:c2:a7:5e:fd:3e:8d:ed:5a:58:4b:a4:38:3c:6f:92:63:
2b:5d:70:5f:74:13:97:d0:a9:8e:ba:50:1f:fc:81:3d:3d:c1:
bf:d3:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 04:07:01 2026 by rpki-client