Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: JfxkBQUCu2a2au3jbib+4V6hNHtBgFdtDPM5fn0QQbY=
Subject key identifier: 91:C7:F5:01:DD:B9:E9:F5:59:E0:F4:2B:0C:10:DD:F2:71:2E:35:D4
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 019D2A04552B3DB96088C696D7ABFC3003FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 1362
Signing time: Thu 26 Mar 2026 12:00:20 +0000
Manifest this update: Thu 26 Mar 2026 12:00:20 +0000
Manifest next update: Fri 27 Mar 2026 12:00:20 +0000
Files and hashes: 1: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: Go5CyoKHIj6PSXCmuVjPKazC9E9VesMQ8Qtd4zc6RLA=)
2: YTJNsByK31dKM5wguVLetwL3nfw.roa (hash: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:55:2b:3d:b9:60:88:c6:96:d7:ab:fc:30:03:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Mar 26 12:00:20 2026 GMT
Not After : Mar 27 12:00:20 2026 GMT
Subject: CN=91c7f501ddb9e9f559e0f42b0c10ddf2712e35d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:76:2d:e3:8b:6b:bc:bd:99:ec:69:44:2d:
b0:12:97:0e:98:67:60:6c:8c:6d:fd:e6:8b:a7:c1:
83:7f:55:f5:47:51:6d:7b:87:70:66:09:8e:b0:0f:
4d:c4:d5:b8:8f:90:c5:15:a8:13:f2:ff:c9:d9:0b:
a0:8c:d9:40:ba:8c:48:0a:0f:73:13:94:e7:c1:12:
19:cc:b5:94:1d:44:de:29:d5:b0:0f:f1:eb:51:ab:
04:d1:17:bf:e3:1a:75:6f:3e:9c:06:d9:51:b6:0f:
a1:17:39:76:06:94:07:d2:46:fb:f2:c2:5b:e3:3d:
4a:87:d0:07:99:e5:16:c3:ba:51:ad:ed:6f:13:b5:
67:b6:78:65:dd:30:63:a5:53:9d:e8:95:d0:a6:74:
cb:cb:3b:7a:b8:a8:c9:14:0f:4f:82:35:25:2c:32:
dc:55:3e:da:43:0a:c1:11:04:f1:8d:a7:3b:9a:fc:
bb:45:04:54:d7:1d:72:15:08:ed:07:b8:d4:18:6d:
5e:3c:a8:7e:f0:e5:24:f9:ed:be:54:61:5a:75:8c:
49:f2:8a:54:f8:9a:17:9d:54:6a:cc:0e:c1:f3:20:
db:e2:4d:3f:3a:89:ed:f2:b9:34:4b:6b:4f:51:01:
dc:e8:17:2c:a4:c0:0d:64:b7:e8:6d:19:60:4b:26:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:F5:01:DD:B9:E9:F5:59:E0:F4:2B:0C:10:DD:F2:71:2E:35:D4
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:82:c0:d2:a0:2a:83:df:b4:39:70:14:d8:a1:9a:43:e5:
58:31:39:dc:b2:37:8f:5f:5e:b0:1a:ed:e8:45:8c:f5:ff:0b:
ad:0f:d1:3e:fc:bb:cf:a8:72:c2:ac:99:fe:7c:08:e3:99:9c:
fd:70:9f:77:fa:dd:d5:57:cb:1e:ee:df:6a:f7:a5:30:62:60:
b7:b0:4b:02:51:bc:a3:5d:f9:e6:ee:27:3e:02:0b:e0:64:90:
42:d8:53:10:7e:d7:63:56:39:de:a8:39:46:90:bb:63:ba:1e:
91:86:8b:ce:4e:b6:c8:7a:7d:6a:69:73:30:f8:c7:37:26:f1:
9b:cb:86:7d:cc:46:9b:07:61:58:57:fc:ae:73:06:b4:f0:94:
c7:16:7a:e8:1b:eb:c0:8c:59:6e:49:a4:f2:6e:b6:6d:0a:a6:
c2:35:f0:1d:26:31:0a:f1:c6:d9:72:d7:34:ca:b2:23:5c:83:
6b:71:87:00:fb:cb:db:b6:4b:9a:55:1a:e4:07:85:a5:41:07:
7c:35:9f:a7:96:1a:8d:01:d9:26:7d:52:2f:ac:1b:5f:6d:9f:
f3:9c:fd:ec:c8:62:c2:5d:0b:4f:1a:50:8c:ab:81:00:78:06:
1c:59:00:02:62:9e:f4:41:8d:d4:90:3c:7a:0f:3a:72:8a:95:
ea:9a:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:55 2026 by rpki-client