Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
File: muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json)
Hash identifier: kC/IcanMAFeuPCxJjEDs2qYtJQrd0n89I2lB2sXz8eA=
Subject key identifier: 92:C5:27:CB:3F:72:83:05:56:AF:86:23:B9:CB:DC:25:C4:41:EF:DC
Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
Certificate issuer: /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Certificate serial: 019D273B1972837A9E569D9F8B54717B722C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
Manifest number: 0358
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: KLROLFKjw+cne1F+91MExgIQeAaOzUMi9q+GpwNKSFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:19:72:83:7a:9e:56:9d:9f:8b:54:71:7b:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=92c527cb3f72830556af8623b9cbdc25c441efdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:07:9e:fe:c4:ab:c6:d4:45:29:0d:2b:3f:
f2:ab:6c:fb:e2:38:16:43:cc:87:71:f1:30:6e:f5:
5a:8f:98:9e:c6:47:43:fc:c4:f7:72:50:4f:29:b4:
2b:1e:67:d6:a1:99:db:d5:76:c1:ad:db:b3:eb:c5:
8f:fe:24:79:81:1d:78:bd:07:87:1e:ea:2d:9c:84:
a7:08:56:db:f2:01:51:96:fa:54:c3:27:0d:bc:83:
8d:bb:51:b1:d9:4e:9f:c3:82:95:25:9e:fb:5c:b3:
d2:c7:d1:52:39:4a:4f:96:92:5c:6b:bc:b0:c1:8a:
2c:dd:80:3d:94:b8:aa:af:b1:12:d6:fb:1e:9a:ac:
a4:2d:39:23:c0:23:90:17:0a:ad:b0:00:8f:76:1b:
d2:ed:9a:cd:79:5f:2f:6d:01:9c:0b:09:aa:c6:37:
aa:1b:5e:9d:5f:92:f6:21:88:c6:03:60:d6:51:18:
95:71:55:c7:94:40:26:ee:1b:1c:94:d2:be:aa:b2:
e3:65:e3:26:45:55:c9:0f:6f:4c:69:0e:34:24:f2:
4c:ef:55:d4:fb:61:d7:ff:84:12:35:86:72:8b:84:
7d:25:25:b4:95:7f:90:76:31:7b:bd:3d:78:b5:3c:
d0:aa:ec:29:97:94:6e:71:ba:0f:3b:09:10:46:db:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:27:CB:3F:72:83:05:56:AF:86:23:B9:CB:DC:25:C4:41:EF:DC
X509v3 Authority Key Identifier:
keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:61:e3:5a:39:a1:42:0a:05:c2:7d:10:fd:cb:93:fe:eb:de:
d4:8a:ff:49:90:9f:f2:50:17:37:6a:42:a2:0d:b7:26:94:33:
2d:09:11:aa:1f:ae:8b:8d:d9:2c:e2:65:4e:6e:da:e3:f6:d8:
ca:0b:8e:a4:d1:56:c4:cf:54:eb:17:ba:57:6f:db:24:1f:2e:
da:e4:88:66:af:6a:c5:20:19:af:7c:20:54:25:16:44:f6:22:
8b:ac:ec:b0:71:bb:4c:f4:86:bd:cb:5b:c6:55:4e:7d:59:d7:
dd:76:8b:a0:74:4f:85:7a:11:b1:d8:82:3a:81:31:af:a0:aa:
26:c5:f1:bd:de:6a:49:8f:0e:dd:e2:4a:3e:c3:63:3b:20:98:
18:8b:33:ec:63:61:55:2a:db:0e:19:53:84:4f:31:ec:18:fe:
15:46:bf:44:39:a1:91:ca:ba:8c:e1:2a:8f:36:d4:38:7c:f7:
c8:a2:f5:a6:d7:52:a6:43:31:aa:22:1e:b9:54:5a:a9:5b:a4:
e0:79:40:23:cd:50:67:4a:55:57:3c:88:75:ce:0a:ae:74:d7:
99:cb:3d:d2:71:8b:8d:89:0a:a8:be:47:32:dc:f2:b9:e9:28:
61:6e:39:29:2b:f6:01:b7:9d:1c:f1:e1:c2:8a:64:b5:64:d2:
40:66:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:59 2026 by rpki-client