Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: wvlD/QAvj1GN0E0H4YjsNthsf5jeb/E4QAadq9BYYqk=
Subject key identifier: E6:18:75:0A:12:A1:34:B2:37:95:0E:6C:48:7C:E7:85:16:35:A4:4B
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 019D28164BC02739FCCCF1C07CCEBB78A91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0DF8
Signing time: Thu 26 Mar 2026 03:00:42 +0000
Manifest this update: Thu 26 Mar 2026 03:00:42 +0000
Manifest next update: Fri 27 Mar 2026 03:00:42 +0000
Files and hashes: 1: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: 9OPj7Yu/zkLUAAsWOl4EtEz2qjUIth3SY/JBApZeWbs=)
2: pMXoRrm1A-T70xPjALrZ4oMq61E.roa (hash: FsTM7joUHNqdKecmC2zVhM+EhuHDUQROQu4Azrsbbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4b:c0:27:39:fc:cc:f1:c0:7c:ce:bb:78:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Mar 26 03:00:42 2026 GMT
Not After : Mar 27 03:00:42 2026 GMT
Subject: CN=e618750a12a134b237950e6c487ce7851635a44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:70:28:c8:80:ee:2d:33:9e:a6:5e:d9:81:
9d:99:a3:d1:61:c2:e8:09:67:db:d0:0f:6c:51:90:
0b:f9:7f:3f:19:30:d5:0b:42:a3:ac:c9:b0:e7:b5:
b0:57:62:ce:47:17:fa:2a:26:0f:a4:ac:30:a3:5e:
f6:d6:93:0e:1e:0c:7b:bf:9e:c8:a1:8c:f8:70:b4:
a3:15:14:4b:be:97:57:c0:90:57:87:a1:ae:41:c7:
f8:06:2e:22:f1:d1:7c:e0:80:9e:22:9c:85:e9:37:
d0:4f:bb:4d:0e:ca:7b:1e:c4:00:3f:f4:0b:99:94:
d7:dd:05:d2:da:d6:18:6b:fd:72:0e:27:b4:69:e4:
26:ad:a3:f2:d6:1e:2f:8b:15:ac:77:47:e1:6e:0b:
8a:51:2a:5c:2b:28:90:4d:19:08:10:2d:34:7a:d6:
d4:54:9f:d3:bb:69:2f:52:63:a1:3c:16:cf:b5:62:
c8:45:be:91:bc:ce:32:ba:a9:32:b6:98:f2:b4:a6:
38:c6:64:31:f2:dd:97:70:c0:27:33:ef:6c:e2:1d:
0f:37:3d:25:a6:51:04:1a:38:92:b5:5a:41:b4:98:
dc:15:2a:70:b4:4b:d7:c1:37:04:4b:22:fa:55:31:
c7:31:ea:66:58:b7:b5:1b:3c:bf:44:3d:c8:8f:10:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:75:0A:12:A1:34:B2:37:95:0E:6C:48:7C:E7:85:16:35:A4:4B
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:f2:87:0f:8a:11:7f:fb:cd:d2:b8:0e:e6:7a:2d:48:65:
ae:c7:67:91:99:d2:de:93:43:8e:24:a4:85:45:b1:9c:5c:3c:
4a:b3:86:d5:55:34:86:c8:46:99:71:57:9a:a0:34:16:bb:8e:
fd:83:64:fb:14:b5:58:70:ba:85:79:bc:02:fa:60:54:80:15:
89:ed:af:41:3e:af:e0:ba:05:1a:64:fc:31:48:8e:4b:61:63:
84:1c:22:f1:fc:0e:a8:bf:93:e5:0f:3c:ee:bf:5a:dd:0d:47:
64:e5:01:7f:72:43:a1:c8:72:42:7d:b8:48:6c:00:2d:b6:de:
a5:a6:29:39:ae:6d:1a:13:b7:97:44:14:bc:80:49:8e:e6:9e:
b2:cb:2b:3e:1d:f0:b8:95:87:72:6a:e7:b0:d6:79:cf:0a:15:
54:fb:83:ab:0a:fa:55:1a:9e:f5:89:94:47:7d:66:56:bb:99:
86:8e:6e:e5:fe:fc:1b:86:fa:f3:5b:6c:af:a7:bb:e8:20:8f:
96:89:3d:64:2a:bd:e4:5d:71:5e:36:04:95:11:0c:51:36:37:
fa:e2:19:61:55:ff:d3:61:c3:c4:e6:ec:9c:cd:93:e9:53:04:
5c:c7:17:cc:dd:d3:11:54:98:6b:d5:00:6f:10:ef:1a:3d:13:
99:21:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:43 2026 by rpki-client