Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File: MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier: zO0U9Y5OJ6zOYMjigJwFs97mhbXEFFRt6hL5//g4Pj8=
Subject key identifier: F3:35:55:65:85:FA:96:91:87:9B:B4:A5:24:2D:22:80:78:6B:CA:AF
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer: /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial: 019D3866359A4B36D2F506C6EE7D21877457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number: 0BB3
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: 6M7o9bNdxSSyXuvGtGQ994tBmvfBsanNe8H21K/ZRwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:35:9a:4b:36:d2:f5:06:c6:ee:7d:21:87:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=f335556585fa9691879bb4a5242d2280786bcaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:92:a5:2e:b6:9d:81:6b:bc:aa:18:e2:6b:
3b:50:68:b0:92:7a:17:ef:37:f4:dc:6d:18:48:03:
c7:70:ce:06:7c:98:4d:db:25:21:50:fc:bb:cf:15:
38:4c:cf:00:38:48:4b:10:18:9f:7a:d7:b9:20:27:
5b:91:73:93:b6:99:7d:ea:56:a2:59:dd:62:7e:c4:
74:84:82:1d:74:37:ea:af:5d:54:a1:53:cd:ee:1a:
72:59:5c:0b:a2:f7:1a:86:42:29:0b:05:59:2c:02:
38:cf:31:28:07:a1:20:08:8b:5f:9b:f6:8c:4b:c2:
59:19:79:0e:47:3f:eb:b5:64:15:ea:d3:da:60:1c:
f9:f0:87:21:39:03:17:b2:18:56:2b:21:ba:6f:92:
0b:19:91:b5:ef:3c:44:e7:04:fa:9a:23:e4:e5:ec:
19:40:67:2c:36:ad:a8:7a:f3:0a:17:2a:f5:c6:3b:
41:11:4d:38:d4:98:45:2d:57:fc:60:65:8b:fa:c0:
f5:98:d5:ba:c6:45:3a:79:3e:e3:53:d1:9c:20:da:
64:eb:fe:3f:e5:db:93:f3:ca:2f:57:94:27:c0:6b:
22:21:74:73:24:8f:c8:44:4d:83:7f:d4:b5:72:ea:
80:18:fe:92:e0:62:fb:56:8f:c4:c0:78:e0:ff:3f:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:55:65:85:FA:96:91:87:9B:B4:A5:24:2D:22:80:78:6B:CA:AF
X509v3 Authority Key Identifier:
keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:17:4c:05:1e:7e:0b:a8:b0:04:ab:bf:a5:ad:00:5a:6b:15:
c7:f2:f0:c2:3a:0c:19:ca:1c:6f:96:9e:0e:75:07:eb:07:f7:
9b:a5:80:c1:02:f8:68:75:2a:03:1a:2a:4a:0f:bc:a6:d3:6d:
1a:0c:3f:8c:1d:ff:dd:95:f7:09:4a:a4:2b:b0:3b:ea:db:fb:
bd:7d:3c:fc:58:a0:88:29:04:e4:e5:d6:47:aa:af:cd:c1:af:
22:8a:98:e1:2a:46:48:e4:09:4a:bd:a9:5b:25:7a:31:8b:dd:
85:5e:cb:d1:c0:b2:ef:ea:06:08:cd:19:14:7d:ce:1c:c6:66:
cc:1d:4e:d5:2b:e7:26:e7:10:d2:67:09:56:df:bd:5c:81:e5:
c2:cc:74:aa:94:ca:ef:d7:9f:cb:2f:e6:79:31:09:1b:be:8a:
47:c5:5b:2a:fd:8a:8f:dd:20:cc:90:bf:9e:45:42:9f:2f:04:
af:81:2a:4f:b8:28:5d:f5:17:9b:3d:c2:e2:c5:88:00:d6:fc:
87:ff:21:56:33:5e:ba:29:39:6c:ea:93:af:74:9d:43:ac:ba:
34:95:3b:47:bf:e9:2a:35:41:cb:67:26:4e:4a:9d:0a:43:e4:
16:58:06:0b:16:41:4a:0d:b4:54:be:2b:18:3b:d4:6a:b5:ac:
f4:76:c1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:25 2026 by rpki-client