Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: zG9HVbSNpSxNJieq0MQJu675RcmWLjNA3TpiFp64iYI=
Subject key identifier: C2:E3:FB:83:20:C2:AD:7F:E2:68:88:FC:A5:2B:D5:AC:C4:58:F1:09
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 019D2816D19DDB7B2B122015A436558D621E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 1361
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: 485JtETwCcyy1zT5MOOx4OrZXlrbGjj58RZjDqO8irI=)
2: YTJNsByK31dKM5wguVLetwL3nfw.roa (hash: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d1:9d:db:7b:2b:12:20:15:a4:36:55:8d:62:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=c2e3fb8320c2ad7fe26888fca52bd5acc458f109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:60:11:3d:7d:96:95:da:60:89:e7:eb:73:
60:70:13:19:c3:6e:9c:62:ea:b3:db:48:53:6f:63:
0a:25:77:e3:c4:18:4f:2a:84:34:f3:ec:8e:13:a7:
1f:43:46:ff:43:a7:e8:ab:20:8f:19:b5:7a:cb:90:
3d:4f:6d:11:f4:74:a7:be:d8:89:cc:04:19:12:4d:
aa:59:fa:7d:8e:33:53:4a:79:a2:03:10:b7:8a:f2:
2f:fc:b4:2b:f5:ef:aa:33:de:4d:2b:19:a3:54:8c:
09:b9:61:ec:3e:06:f0:d1:09:d2:b9:23:8f:08:20:
ec:82:5d:8a:7b:23:02:69:62:7a:69:75:d6:08:03:
54:ea:24:f7:67:ff:ee:f4:0c:45:2d:dc:d3:68:0c:
a7:72:c0:aa:6f:a9:ec:f3:58:fb:61:0a:00:d5:9a:
6f:3d:29:c6:1d:9f:ac:44:0b:82:10:46:e1:f3:07:
b8:43:fd:18:48:24:cc:e0:50:f1:21:1b:7f:4a:17:
65:52:45:0e:00:e6:3d:61:4d:91:29:36:83:21:c9:
e4:1f:f6:f1:80:0d:f0:44:e8:1c:02:76:00:04:4e:
1f:e2:54:67:aa:cf:40:8b:76:64:6a:1f:c7:42:4f:
17:c2:1e:45:76:b9:16:d7:8a:5c:1a:06:09:87:64:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:FB:83:20:C2:AD:7F:E2:68:88:FC:A5:2B:D5:AC:C4:58:F1:09
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:d4:aa:24:53:ec:ed:5a:b8:b7:49:71:2e:dc:b3:a5:9a:
36:68:83:ad:5e:31:31:2f:07:1d:92:bc:87:a2:79:96:4c:6d:
1c:e2:22:3b:83:d1:37:aa:65:a7:51:22:16:f8:9d:26:f2:46:
25:d6:a4:c5:a3:9d:3c:27:33:a7:44:51:31:35:65:6f:56:55:
f6:ac:07:5a:85:6c:bc:95:db:9d:a8:90:47:4a:77:02:1d:95:
ef:96:ae:89:57:eb:32:2c:0c:0c:15:69:36:f1:f3:27:ea:e8:
2f:b0:86:05:23:c9:33:0b:30:40:93:f5:ae:d6:65:90:6b:5e:
99:8f:1e:c3:21:9f:90:e0:26:91:98:c7:9e:79:ae:8d:0f:7e:
85:5c:1a:3c:69:bc:5d:81:f8:ea:94:49:ef:87:14:1c:4d:8b:
67:34:20:90:7a:8a:48:3e:75:77:39:08:20:a4:69:1e:f8:4d:
a1:da:63:d2:f6:da:f0:e1:5f:7c:5e:fb:f6:18:2f:c2:4d:d4:
65:30:b6:f8:98:44:36:e3:2c:4b:91:ee:82:df:f5:98:8c:6a:
7c:0b:c3:94:7d:ac:f8:16:fe:eb:11:66:cc:19:bc:4d:42:42:
ee:af:2f:8d:44:7c:3a:c8:25:0b:4e:f6:b1:44:91:82:7f:65:
36:0f:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:19 2026 by rpki-client