Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier: CgBICjzBhRZBGf5zAdCuog+2PGTKhq1WWiev/CTBLvg=
Subject key identifier: 96:04:53:1D:77:A4:BF:FE:3E:0F:03:82:94:38:71:DF:80:5D:69:AC
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial: 019D389C3C54D1B25DB5A264BDECB803D2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number: 0763
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: NSSoS+tvQ1WUlgjNE+1v+rLzAGay4+OU9ucU+5USLzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3c:54:d1:b2:5d:b5:a2:64:bd:ec:b8:03:d2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=9604531d77a4bffe3e0f0382943871df805d69ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a6:93:cb:25:29:bd:7b:1d:32:63:94:4d:34:
51:3a:89:7d:35:15:d5:69:5f:a8:7e:bf:b0:26:32:
02:72:ad:3a:f6:ce:d3:6c:a6:1e:7c:98:c1:31:79:
8c:8f:a1:90:54:54:70:20:0b:3e:46:5e:9d:55:11:
58:48:a4:96:0c:50:4b:cf:10:6a:d3:87:38:bb:90:
65:0e:98:31:62:9e:f3:ce:5f:8b:fc:25:f8:eb:d9:
a9:d2:91:25:f7:13:a6:92:74:79:b0:19:42:ff:28:
bd:8b:ae:6a:75:30:a9:73:1c:9c:a0:17:54:d1:9e:
e9:c4:16:57:7a:44:8a:64:0f:16:f4:b5:74:26:09:
7e:fa:09:1d:f3:31:fa:e0:17:a8:f1:ed:90:68:75:
aa:2b:78:ae:72:7f:c0:9e:99:b7:95:6b:17:d5:f0:
14:28:09:40:0e:6f:5a:7e:82:35:c1:91:95:8f:13:
23:53:20:42:44:23:de:08:1d:0c:9f:0f:44:d9:16:
78:90:f3:3c:d7:fe:e9:56:87:cf:be:aa:f9:77:e5:
30:9a:52:24:ce:dd:5f:75:d8:08:76:a3:1c:b6:f3:
36:68:6d:02:3d:43:e8:5d:25:a7:b6:52:38:2d:4d:
2f:3d:15:e2:ff:a6:92:93:69:69:b0:d0:35:72:13:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:53:1D:77:A4:BF:FE:3E:0F:03:82:94:38:71:DF:80:5D:69:AC
X509v3 Authority Key Identifier:
keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:66:c3:07:c8:58:38:32:e4:1d:60:c8:4f:8a:aa:af:de:19:
ed:27:3d:12:52:46:3d:80:05:c3:0a:e4:f1:46:a0:cf:43:66:
df:2f:ca:23:1c:fd:d0:7d:1e:85:31:d5:ed:ec:c1:78:7d:99:
8e:c9:85:33:58:1c:56:bf:02:fe:4f:dd:32:d3:45:e3:c3:4d:
62:8c:b4:33:32:ef:46:3f:a8:c4:b8:41:21:5b:19:aa:a3:8a:
5e:3a:cd:13:de:18:30:5d:c8:b0:b4:e5:81:8a:02:db:82:5d:
16:84:72:82:89:11:d2:47:54:e1:b7:64:93:36:94:93:86:8b:
22:0d:86:1f:4a:29:2d:29:8d:b2:59:60:b3:fe:7f:3b:fb:47:
66:4a:b5:33:07:46:c1:a3:d3:f0:9f:7c:a3:ba:0e:c6:45:bd:
d4:75:f1:bf:34:79:c5:c4:16:e9:11:06:3f:1c:12:79:40:7c:
6b:60:36:e1:97:d0:ab:0f:fd:5b:4f:01:27:1b:5b:0f:e3:de:
e1:c0:fe:5a:4c:4a:2b:2d:dc:bd:9d:e9:3d:16:7c:22:c0:a6:
4b:57:ce:76:91:93:20:6f:48:e4:c1:39:c5:a7:83:7e:6b:07:
a1:fa:31:b2:81:58:93:3c:5f:4f:66:b4:30:de:b9:75:b4:75:
a8:28:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:45 2026 by rpki-client