Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier: YDx587gxsO8dA2sArJKt1c5amAxvvGHD9oqEpZqgmcs=
Subject key identifier: 2C:D2:2B:6C:EE:AE:66:43:E1:57:D9:34:7A:1B:ED:B7:C5:93:FF:C2
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer: /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial: 019D38D2C37CDF81DC435C77BCE6C788E97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: zfKU35A8aGRLVMvHS3NaE77VQYXCXS3bQbofbOLMXiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c3:7c:df:81:dc:43:5c:77:bc:e6:c7:88:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=2cd22b6ceeae6643e157d9347a1bedb7c593ffc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:54:63:f6:05:67:08:1c:2b:96:d3:a5:3a:
54:5d:7f:c4:69:eb:3c:52:08:8e:0e:c7:cd:57:ad:
71:a4:11:c7:02:12:51:18:82:f1:1a:c8:6e:28:ab:
58:66:27:41:f4:f6:de:81:0b:f5:0d:0a:6e:1e:3d:
33:b2:05:f3:bc:e6:ea:ea:bc:93:62:2a:1a:85:c9:
90:23:1e:4f:75:16:67:47:f1:c8:3d:a8:43:06:0c:
49:91:a1:b8:53:3e:42:d3:93:75:e2:9e:f6:d5:00:
58:62:7d:74:45:73:09:de:8c:fc:b3:b9:fa:5b:69:
91:1f:bc:da:c6:18:23:38:d0:80:cf:74:db:5c:5c:
be:76:ea:b5:7c:6d:26:ec:6e:8c:55:d6:69:9d:d5:
95:95:a5:50:a1:a7:18:a3:41:79:f6:ec:4e:86:70:
73:57:a9:da:5d:1c:0b:6a:94:15:47:3a:59:09:82:
c9:fb:02:53:56:dd:73:75:7e:6b:fa:ad:d0:5d:78:
e8:14:53:40:ae:b0:2e:24:3b:95:e7:8e:73:84:9d:
34:c3:ee:63:f3:22:e8:ad:54:99:90:30:a7:59:42:
0b:74:ad:ae:5c:07:08:74:1c:50:8d:6d:da:51:29:
76:f9:5f:a0:ac:98:ef:c6:6d:0e:24:31:14:97:cf:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:2B:6C:EE:AE:66:43:E1:57:D9:34:7A:1B:ED:B7:C5:93:FF:C2
X509v3 Authority Key Identifier:
keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2e:28:d1:65:ee:30:50:ef:ee:1e:d7:66:6e:a5:7c:46:80:
60:35:cc:0c:90:2d:09:4e:4e:44:85:2d:7c:b8:3f:3f:3c:3a:
26:87:81:ab:ae:2e:2b:9b:ef:e0:0f:56:ef:6d:c8:7d:ab:0e:
6b:54:3d:93:ad:7f:8a:ec:5d:56:f3:91:8a:ff:df:75:2c:9b:
6e:cc:a1:af:30:59:f8:6f:23:90:2e:ba:e5:59:39:71:64:6c:
a1:82:75:60:ca:78:61:48:01:bc:35:6c:74:d9:f2:67:8b:63:
81:b0:94:27:28:2b:8e:c5:e1:ae:c9:fa:69:3a:f3:43:cc:ea:
9d:29:aa:a3:7d:25:cd:fb:00:ec:e4:2d:16:b6:33:a5:9b:eb:
92:2c:4d:ff:af:57:49:f4:f6:21:e8:f2:68:87:f3:36:ed:d3:
74:3e:ef:d6:56:c9:bd:34:a9:83:40:8b:12:23:27:5a:4a:3a:
19:52:0c:30:09:b3:83:2c:b2:8c:ef:a1:1b:ac:f5:e4:9f:bb:
c0:fe:83:01:27:84:b6:70:33:d1:5f:f5:9b:4f:8d:2a:cb:67:
ec:d0:4f:24:6b:f8:bb:a1:aa:5f:bd:9e:c3:eb:93:5b:95:4c:
28:dc:61:4a:e5:e1:c2:c9:1d:10:74:c2:9b:81:3e:9b:18:5b:
ec:7b:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:39 2026 by rpki-client