Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: eJkQPeDeMLJx11Ow7+JqgwuH63Fn2CS6+odKpIf077Q=
Subject key identifier: E2:D2:01:22:0E:07:5E:D5:D5:8F:3A:07:B0:70:F5:CD:A5:1B:24:B3
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 019D28F2944CA8B31D3AA6DDD70CB7EADBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:19 +0000
Manifest this update: Thu 26 Mar 2026 07:01:19 +0000
Manifest next update: Fri 27 Mar 2026 07:01:19 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: 4y/LpwSZfh24LextrQ9ub3SCvbzvzRJVkxIUN5ZmfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:94:4c:a8:b3:1d:3a:a6:dd:d7:0c:b7:ea:db:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Mar 26 07:01:19 2026 GMT
Not After : Mar 27 07:01:19 2026 GMT
Subject: CN=e2d201220e075ed5d58f3a07b070f5cda51b24b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:b4:c4:93:ac:79:ad:e1:44:29:ad:b0:0b:
17:49:66:4e:af:86:4b:73:35:fa:73:1c:21:68:ca:
b0:f5:49:07:25:cb:97:4c:ea:3a:c7:3e:8b:c7:83:
93:fd:75:9d:9d:90:6b:7f:8f:f9:83:de:fb:07:95:
10:d0:c6:e4:b5:82:2b:77:4c:0e:1d:5d:da:a8:d9:
e5:f4:8c:c3:cc:51:8f:96:47:8f:45:c4:87:9e:f3:
f3:54:7d:85:8c:87:e4:6f:4e:d4:b4:3e:7c:68:a8:
58:f9:6d:35:90:53:8c:01:a7:c7:32:95:43:bc:4f:
e4:88:5b:61:8c:de:2b:40:72:fc:6f:4f:75:f8:f0:
e6:35:55:93:26:c6:57:d0:a5:ce:81:80:cc:a5:74:
c2:fb:64:30:e8:c5:13:28:b0:b3:c0:95:2a:9a:82:
7f:89:9e:37:23:a4:48:e6:00:a5:01:42:24:0a:fe:
63:b3:7a:3d:45:0b:33:23:5d:e2:9e:40:c9:50:ba:
49:39:78:26:73:62:1d:a2:7b:e6:de:ae:f8:e6:26:
98:63:f7:19:6a:bb:cb:21:e9:e9:ee:6a:33:84:90:
12:7b:6e:fc:9b:54:68:aa:43:fe:d4:0c:73:f4:40:
38:a3:d0:74:89:6e:94:0b:c6:6d:98:56:14:1c:74:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:01:22:0E:07:5E:D5:D5:8F:3A:07:B0:70:F5:CD:A5:1B:24:B3
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:50:d7:40:f9:76:4e:b6:c3:7e:eb:2d:03:3e:0d:6b:fc:
59:a8:23:86:c3:c7:65:61:f2:fc:b2:ad:bc:69:9d:61:ed:9e:
72:8f:15:eb:ae:16:fe:71:48:d2:fd:bc:7b:90:fd:3a:a5:c5:
15:c7:e7:37:eb:50:96:58:6f:39:b6:12:2b:81:ae:93:4f:58:
ec:74:af:a3:82:da:30:fe:02:bb:90:90:f2:69:40:f4:fb:fc:
87:3b:62:72:84:7b:37:e6:54:77:65:40:9d:4f:eb:59:41:b9:
09:ad:88:be:1c:6d:0d:62:01:54:ba:bd:cd:82:8e:83:44:62:
3f:4f:7d:25:60:bf:ae:b0:bd:9c:39:9c:c6:94:b3:72:36:06:
dc:f5:d7:47:24:ab:1f:4a:56:ce:23:b2:4e:1d:c7:57:1a:5a:
f4:83:3e:96:78:87:2e:e9:7e:13:1c:22:0f:c3:14:f2:69:b0:
05:99:70:65:98:0e:df:16:4b:d2:c3:7b:56:2a:bb:cd:11:89:
2d:0a:9f:8a:c8:b3:9f:c7:4f:d9:6f:e9:6b:cb:da:5b:86:9a:
8a:ee:e9:d8:72:f9:3b:9d:b3:f5:12:8c:d7:d3:80:49:3f:11:
35:00:a7:a8:1d:b3:ed:9b:16:58:a8:9c:ef:17:bb:8c:ab:d7:
ae:d4:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:36 2026 by rpki-client