Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: TAJd+abH63zFQj+OOg0/tVPcSeQSrXrp9m5/sI+C2E4=
Subject key identifier: 32:6D:4E:C2:45:AD:F3:45:2B:9F:8F:D6:A1:42:28:42:CC:8F:8D:E1
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 019D2884AD5CE6BE7924ACAD22B9DEF09133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: i3LjlTv0cqfO8U47iFQcI5yeNfw.roa (hash: NUcR9PJxIM36308L6r/104nGPX7janujjExA79MiVJY=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: ZOCKRJvr8jwVyWtQdtVC5COn0k8F+0jaWghBBl1Ugko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ad:5c:e6:be:79:24:ac:ad:22:b9:de:f0:91:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=326d4ec245adf3452b9f8fd6a1422842cc8f8de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:65:8f:a3:07:fa:69:40:a1:37:ad:a2:f2:
b3:ed:45:11:be:53:69:c7:77:5f:e5:08:87:2e:6c:
6d:a8:7f:d4:e4:96:0a:54:41:1c:41:4f:d4:4c:26:
04:01:20:ac:80:a3:c2:41:26:98:79:c6:79:8f:0e:
ad:ae:40:e5:32:5a:43:e3:0e:55:aa:3a:ef:6b:89:
ae:e8:4e:c0:2c:81:20:14:43:19:30:b5:ee:ed:23:
b1:74:02:84:6a:8a:f5:9e:bd:ea:e9:d4:b3:09:b6:
f4:31:f1:86:18:6e:11:a3:84:2c:91:8b:0a:fd:d4:
31:41:39:64:14:32:c4:20:56:1d:65:a1:13:13:21:
bd:11:c9:12:55:c1:5c:08:a9:6d:ff:35:2b:16:55:
de:14:14:65:ef:bd:10:e2:92:2e:d1:f3:c1:1b:5a:
1e:25:ae:7c:6d:03:ff:c2:14:33:5c:df:68:6b:be:
66:6a:1a:5b:64:dc:6e:df:60:8b:61:ff:c3:d6:dd:
b2:78:73:cd:22:77:df:38:64:be:60:3a:da:bf:a8:
d4:b3:74:d8:5e:e9:fb:e5:ef:1d:c2:d2:af:f8:7b:
d1:53:9b:f2:ea:93:0e:9c:55:a4:4b:a6:51:81:80:
f8:46:33:b8:3b:51:3a:16:74:f3:02:8d:da:ea:66:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:4E:C2:45:AD:F3:45:2B:9F:8F:D6:A1:42:28:42:CC:8F:8D:E1
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8a:e8:8d:9e:42:dd:8c:aa:73:8c:0d:22:4d:86:57:05:ab:
f9:2f:c9:3e:6f:79:0e:02:d1:2e:65:4f:e5:55:89:da:ee:13:
8a:42:39:b7:08:7b:80:c0:3e:1c:b4:61:64:59:74:e3:2b:51:
7c:98:09:57:13:cd:7b:07:32:66:cd:59:4b:56:bc:dd:f1:22:
32:53:ac:92:29:a2:c4:b0:39:34:9d:27:14:f5:5d:3f:14:4c:
c2:81:f3:7e:b9:59:1c:c2:db:23:4b:87:20:7e:c9:65:86:40:
c2:14:bf:7a:d9:59:19:83:3e:2e:64:37:f7:04:15:82:45:a4:
21:39:6f:12:d2:ca:9e:cf:e7:e0:5b:77:9e:91:13:00:40:74:
4d:6a:b5:d0:a5:7b:f9:3b:0c:80:72:08:81:8f:c3:1e:6c:7b:
f1:63:fd:ca:b7:b6:34:8f:e2:db:63:03:54:40:09:4b:73:1a:
5b:05:a4:7d:f2:b9:ca:e1:3c:bc:4a:77:a0:a6:b1:e1:da:f9:
1d:44:14:ce:2e:25:d2:fc:b6:f2:af:a3:3d:fe:97:07:3d:c1:
04:a8:3b:c3:b4:20:c0:e7:cd:df:30:7b:bf:47:94:ed:16:07:
b5:f4:48:14:30:3e:06:fd:39:e2:2c:13:49:9c:3e:63:f3:6a:
31:ad:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:14 2026 by rpki-client