Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: wl7i/IZ8HIyV/oWjFUKRo7k2PifHffeAhGEWQGUv5D0=
Subject key identifier: 88:CE:C4:27:7A:40:E1:E1:97:EF:46:C8:73:17:DE:BA:5D:EC:42:6C
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 019D26CD1D5C1D7DABD1701DD404CF1729BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 21:01:09 +0000
Manifest this update: Wed 25 Mar 2026 21:01:09 +0000
Manifest next update: Thu 26 Mar 2026 21:01:09 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: nAB9M7rlGVwG3GqOrhHbJLgF6XYgm+kWYTjzlVrzXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:1d:5c:1d:7d:ab:d1:70:1d:d4:04:cf:17:29:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Mar 25 21:01:09 2026 GMT
Not After : Mar 26 21:01:09 2026 GMT
Subject: CN=88cec4277a40e1e197ef46c87317deba5dec426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:b6:5f:14:a3:57:cf:72:31:a6:61:66:dc:
e4:d8:30:b9:f0:f6:57:82:63:ea:54:5d:22:06:c4:
27:f8:d1:79:a9:ec:5d:7d:7e:82:9f:75:c7:04:97:
7b:3f:0b:f5:3e:4e:c3:42:e8:9f:03:84:2f:41:cb:
25:b7:2e:d8:35:77:9f:fd:0b:29:df:1d:4c:0f:4c:
1e:96:43:a3:e9:c6:ff:fe:23:db:d8:33:6b:33:be:
39:97:28:c1:1b:9f:5b:ff:ad:49:9f:fb:e3:99:4e:
ac:b4:91:61:c5:22:4e:af:06:80:bb:ab:58:4a:c6:
de:98:64:6a:f6:d2:31:71:71:cc:b5:71:a8:fa:e8:
74:a3:4f:db:58:d0:cb:04:04:52:28:72:e0:2f:fb:
67:2f:ac:fd:b8:96:e0:3a:13:05:2a:da:8b:19:f1:
4b:af:50:71:93:a8:7a:e6:13:af:78:8d:33:a8:cf:
5a:60:ea:c7:cf:d2:cc:55:af:25:84:76:d0:40:5c:
c7:06:33:ba:e9:10:06:c8:1c:39:8d:6d:61:34:7a:
a1:69:b7:03:51:7a:3d:45:8f:86:80:05:01:e8:0e:
ea:58:2b:19:d4:1b:08:c5:99:dc:f9:91:94:19:75:
00:e0:45:23:15:72:4f:31:6f:54:b0:ce:e9:92:eb:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:C4:27:7A:40:E1:E1:97:EF:46:C8:73:17:DE:BA:5D:EC:42:6C
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:17:5e:4c:58:58:5c:c1:02:df:d2:a7:0d:76:e2:a3:cd:
7a:db:80:bc:6a:73:c4:05:55:97:8e:b3:0b:d7:14:3a:a5:18:
9e:20:dc:70:06:d4:15:a2:72:f0:55:bd:1d:3f:85:19:a0:92:
da:25:7a:0b:73:93:01:f6:48:14:39:c5:b4:ff:04:33:09:b2:
a7:d9:d6:a4:f7:7e:86:4e:2f:f7:64:d7:ab:00:0b:88:4f:c3:
20:42:b6:98:77:3a:33:02:74:07:38:6e:b2:3e:f6:f0:94:12:
95:2f:d8:10:21:2e:04:c8:37:fe:36:1e:84:d5:25:8e:97:b5:
88:4e:f2:e5:90:27:82:ef:15:45:73:a2:47:c3:1b:76:c2:b7:
cc:ac:4e:af:c1:fd:fa:e1:ce:b1:45:59:a5:d0:bf:87:80:08:
a7:0f:e1:57:92:ac:15:d6:ad:e3:f4:01:be:39:ff:e8:46:d5:
c2:33:fd:0c:16:b4:32:8f:dd:8d:dd:f9:68:f8:1b:50:5c:b5:
48:23:3b:0d:39:79:63:5f:bb:54:0d:47:19:a1:8a:e4:d9:8f:
90:11:7c:93:f2:ee:f5:30:06:e4:e5:4c:e1:9b:96:2c:bb:be:
89:4c:9d:cb:23:d7:90:b1:36:be:f0:cb:0b:86:ef:89:c8:f3:
b9:81:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:52 2026 by rpki-client