Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: osxy1q6cbgxvtFDOjjQDjQKFkQTg9QOHZICedtYc2dE=
Subject key identifier: 2C:37:83:42:0B:58:AC:4E:31:90:C6:10:98:27:2D:3D:AC:EF:FB:54
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 019D36E4B1664BAAE4752E1C1B32C39272A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0E54
Signing time: Sun 29 Mar 2026 00:00:50 +0000
Manifest this update: Sun 29 Mar 2026 00:00:50 +0000
Manifest next update: Mon 30 Mar 2026 00:00:50 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: yWxKiZH0aZOEpPTPERqERLdHguMDsEdewY9IJyRtlHw=)
2: nxHN94erHa9XYS8Sqo0AW7u75gg.roa (hash: bvgVC0oBjDczyWwpa0vlSgIaguhY3On+SlQmXNJvC6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:b1:66:4b:aa:e4:75:2e:1c:1b:32:c3:92:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Mar 29 00:00:50 2026 GMT
Not After : Mar 30 00:00:50 2026 GMT
Subject: CN=2c3783420b58ac4e3190c61098272d3daceffb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:39:79:2b:c4:0f:48:2f:c5:6a:c4:50:29:
f9:aa:74:cb:43:84:f3:b8:3a:ca:ed:20:a9:7d:0c:
fa:7a:6e:9d:59:a1:8b:59:a1:01:d4:7b:4e:b8:03:
c1:65:87:c1:83:94:39:80:c0:79:76:d0:e3:11:8b:
67:15:8d:78:b3:f2:0c:e9:61:07:ca:94:ba:e9:dc:
b0:c9:68:c6:b4:bb:c8:e6:7b:aa:2d:da:d2:d6:96:
ee:6e:cc:74:85:3d:fa:d6:ae:c6:48:62:09:c3:cc:
3a:cb:1a:81:d3:97:8b:5b:22:d6:41:77:3b:cc:3a:
7c:9b:e3:7f:ce:21:dd:a3:e5:10:0b:b8:47:16:91:
78:56:c9:e5:1f:30:6b:5f:6e:80:92:26:c0:2e:3f:
33:e1:cd:47:3f:dc:21:64:db:eb:be:5d:0b:99:1c:
aa:91:11:b1:c4:27:89:10:11:22:a2:34:25:c3:ac:
5e:66:24:ce:c1:12:9c:80:97:ff:a1:da:83:15:9b:
a8:0d:0d:7c:6f:5a:57:dc:dc:cc:d1:3d:b5:b6:44:
69:10:04:38:fd:85:d0:27:e8:47:e4:c1:4b:21:bd:
72:2a:d2:8f:c5:2b:f0:d6:58:00:d6:f9:a9:f2:1d:
e4:bd:86:b2:c5:a2:df:e5:4e:ba:5b:65:ff:8a:29:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:37:83:42:0B:58:AC:4E:31:90:C6:10:98:27:2D:3D:AC:EF:FB:54
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:50:c4:8c:22:09:b5:b9:5f:ea:72:59:ad:65:42:25:d2:48:
c0:fe:df:39:e8:c6:83:1c:97:ba:14:57:71:b2:9e:9b:c9:de:
d2:3d:84:cb:f8:f5:e8:c2:e5:cd:eb:04:c7:a3:7f:e9:1c:ca:
ff:6c:39:80:2a:83:c8:70:84:e8:47:6c:1a:95:80:c3:d2:2b:
71:c2:f1:0c:97:8b:fc:c2:70:b2:8d:1a:4a:12:be:59:b9:b5:
70:51:b8:59:5f:39:d4:a6:31:e6:5d:1d:d6:e8:8c:eb:d1:b9:
6b:c3:66:ea:41:36:0b:4e:f7:93:4b:e7:20:40:15:72:00:07:
f9:55:bd:5b:02:c3:f8:e1:0f:d8:52:ff:76:8f:61:35:a0:f7:
4a:d1:08:9f:a2:4f:56:5d:b0:63:79:62:39:12:c1:c3:a8:80:
ac:e3:ff:3d:83:cc:b5:9f:45:e3:3d:b8:16:5a:d3:78:1e:69:
c7:e5:86:1d:94:c7:c0:06:13:c6:32:ff:2e:b4:07:06:f2:96:
bb:53:50:33:b3:d6:0f:34:45:b7:3f:66:9c:cc:a1:cc:90:59:
ab:ae:3b:0d:b5:6d:f0:8b:d9:f5:79:ba:ad:fd:8a:c8:cd:67:
0c:2f:87:1d:c4:ef:24:d3:6c:ec:0e:36:f9:47:18:5f:7f:4c:
96:29:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:11 2026 by rpki-client