Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
File: MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json)
Hash identifier: dwnQkapWfZYBQzK9o+z4NtA6BIA9NQEchIjvgkFvTnU=
Subject key identifier: 20:F1:47:53:45:C6:8C:A2:3E:22:0E:6E:EE:65:38:39:71:29:F3:B6
Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
Certificate issuer: /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Certificate serial: 019D2704CDD7FD42F4F07E5BC31051CB9B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
Manifest number: 0A19
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: IIbezEb1uw1GdksNUAlZ158uAellvFP87iKvYi5P2Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cd:d7:fd:42:f4:f0:7e:5b:c3:10:51:cb:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=20f1475345c68ca23e220e6eee6538397129f3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:80:a7:12:37:50:e5:b4:35:2b:67:f9:93:
0c:b3:03:a7:b9:62:40:9b:0a:77:b3:97:09:12:97:
79:aa:73:b5:b0:b8:b8:c1:3c:71:d6:c2:2a:a9:92:
07:6d:9b:c1:5c:0c:bb:7d:4a:56:b8:68:b6:7c:35:
4c:b4:8f:29:95:91:5a:57:00:5d:eb:10:b6:0f:cc:
3c:ce:aa:c5:cc:93:18:51:b2:02:05:5f:8c:c4:ce:
25:0d:0d:96:4b:d0:e7:59:a7:06:ee:b6:c7:83:d8:
5d:32:db:04:9e:20:a7:ce:bb:01:c6:99:54:30:d2:
d8:11:0a:5a:af:e2:29:55:a9:82:ff:09:ba:07:91:
6d:b8:d7:c8:69:54:4e:50:54:34:54:29:1e:1e:2c:
0e:af:7d:63:46:cc:35:63:9f:55:86:52:35:ea:47:
55:5e:17:63:68:2b:99:1b:2d:6d:04:36:7f:9c:e3:
eb:55:fd:a7:09:42:ae:b1:a9:a4:25:be:c8:93:92:
98:2e:f8:87:be:81:53:ae:26:c0:f9:0f:79:d5:85:
b4:60:b3:40:c0:ab:30:88:19:c5:1e:61:f0:65:2f:
56:39:ba:53:62:b1:88:d3:0a:39:a9:73:1c:a4:76:
af:4a:0f:9a:08:42:ec:2a:79:a8:04:68:79:24:53:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:47:53:45:C6:8C:A2:3E:22:0E:6E:EE:65:38:39:71:29:F3:B6
X509v3 Authority Key Identifier:
keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1f:a0:c3:0a:9b:26:40:11:e1:51:64:94:cc:7b:4b:6a:25:
00:b4:47:75:c2:b8:61:d3:43:51:68:4c:33:8b:cb:8e:07:92:
7e:eb:78:77:3e:70:b2:1d:31:e2:9e:d8:a1:fc:b4:6c:de:b7:
64:96:ed:69:ef:c2:7f:4f:70:35:ff:e9:2f:66:93:6c:e5:b6:
f1:75:d9:81:43:0a:06:ad:7f:28:c3:09:d2:95:88:fb:8e:7c:
e4:77:a4:fb:9c:9d:45:37:f7:dd:02:cd:1c:b7:9e:f5:89:14:
08:89:c7:12:6b:94:1d:33:2e:c6:68:6e:95:ac:ed:42:d4:6d:
ce:22:fd:c9:b1:3d:cc:3d:5e:ea:a5:d2:06:07:64:d3:45:3e:
42:ec:1e:8e:12:a8:5b:ae:7e:35:35:79:ae:b8:a7:44:52:92:
29:7c:73:10:6c:a8:34:f5:23:0d:80:3e:62:c1:6e:11:6a:d5:
95:db:25:db:eb:9b:52:f9:38:95:b4:ba:ce:17:b3:f6:34:a8:
8a:2b:2e:01:12:53:b4:61:64:98:12:6e:54:02:69:6a:fa:52:
26:70:a9:60:1f:44:19:8a:d6:7d:9e:36:17:d4:af:05:24:60:
c3:1b:d9:eb:f9:23:59:8b:e6:f2:e5:35:92:02:35:29:af:cd:
46:2b:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:19 2026 by rpki-client