Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier: K2INcLnfrpH9Pf8jDl2lckT55BnmZB0UNEdlHBqmXt8=
Subject key identifier: 76:44:70:6A:A9:B0:B2:73:25:05:3C:F1:1A:BE:C8:E6:9C:43:59:99
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019D2772B3035B6B10542D7DB845E8FDBE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number: 14C5
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: 7Jlc+aYZHkMAZzPF81qo00tS0DCetN9BlPPu+0/bdPc=)
2: di_0LtYX-zy7910p1HbVAPeQb4E.roa (hash: Q0mvASV/CVPiKor53MwAZ00Mlkbyxmt/p19B01XkHwA=)
3: pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa (hash: hUdGksl3Om+qi4NqcjWlHiivRsMFn3puC7yl77M9g+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b3:03:5b:6b:10:54:2d:7d:b8:45:e8:fd:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=7644706aa9b0b27325053cf11abec8e69c435999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:bb:45:a7:e3:44:46:20:c7:9d:b7:d2:fe:
4d:0d:5b:80:9a:7c:4c:ab:a6:ed:08:d4:51:04:e6:
83:9b:f6:ce:a8:a4:a0:48:78:00:71:a5:58:02:59:
f8:29:34:08:1b:02:ea:3d:04:b8:6b:ba:f8:32:fb:
16:60:a6:f7:2a:5a:d3:28:c1:46:cf:13:28:dc:3c:
c2:8f:e6:7b:72:8b:60:b4:80:71:c9:67:01:90:09:
92:10:ba:bc:50:a0:04:c1:63:da:2d:51:1c:2b:f0:
a2:21:3b:93:e5:85:d7:52:be:21:b9:55:b4:ae:88:
08:c3:09:bf:06:44:6e:39:01:fa:ff:61:6c:37:28:
28:4e:b3:e5:8b:50:5f:a9:9e:53:1f:20:61:86:2d:
c0:e8:c5:7b:f2:b8:c6:2d:fe:0a:a4:79:e8:d4:99:
f5:89:74:1d:5b:42:d7:9b:28:32:0c:72:e0:74:5c:
d0:2a:b5:c2:c7:a0:e1:32:13:0d:e1:21:fa:bf:e0:
4c:75:3f:58:03:b9:15:95:08:3b:ea:d9:dd:f1:0f:
f7:50:84:11:44:0b:40:1d:86:91:a1:17:ae:9f:46:
a3:22:71:0f:a9:92:a6:23:69:cb:70:bc:a1:90:e5:
48:22:a9:02:c0:65:12:3e:03:65:8c:57:b2:b2:21:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:44:70:6A:A9:B0:B2:73:25:05:3C:F1:1A:BE:C8:E6:9C:43:59:99
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:aa:50:d5:4c:19:fe:1e:bc:ee:bf:3e:e5:fe:c0:ab:16:36:
7c:c5:af:b6:0e:34:83:55:20:21:58:08:7f:60:71:3d:6f:fa:
6e:d9:f7:37:d3:d1:2d:37:1e:c2:9c:c3:e4:5b:d1:d9:49:45:
32:16:99:d3:e3:60:b8:1e:2c:7b:f9:f8:89:af:37:1a:88:3c:
1e:07:f0:47:41:bd:49:3e:04:95:ce:ca:9d:7a:d5:f1:c1:06:
a2:d1:e9:30:0a:5d:6c:23:0d:ff:be:39:d7:33:e8:2f:35:c8:
a4:55:7b:ad:7f:7e:8f:20:b6:3c:71:35:30:1c:98:c8:20:20:
d1:c0:29:41:67:30:29:25:25:2f:8d:8c:c7:a1:5c:aa:0e:e4:
fd:c5:5e:29:1b:a9:95:55:93:cc:4b:a7:51:00:ac:bc:93:9c:
be:8e:c0:4a:79:76:1d:d8:df:fb:0b:fc:7b:81:d2:4c:f8:7f:
c3:7f:c4:ba:17:e1:76:83:ef:ea:42:f8:84:2b:fa:61:c1:1a:
e1:a6:2c:0c:a7:6b:dc:06:a3:a0:9a:07:1f:8c:76:9c:4b:62:
42:16:3d:8f:57:9b:c1:af:92:32:5a:9a:84:42:5c:03:1a:29:
6b:9d:80:15:f7:23:0a:59:cc:47:2b:0c:30:db:6d:4c:ef:ef:
22:6b:9c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrMDW2sQVC19uEXo/b5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWQ2NzAwMmRjNzMwN2U4NTYzYjZlNDkzNGNjZDU3MjNh
NDRmM2UwHhcNMjYwMzI2MDAwMjAxWhcNMjYwMzI3MDAwMjAxWjAzMTEwLwYDVQQD
Eyg3NjQ0NzA2YWE5YjBiMjczMjUwNTNjZjExYWJlYzhlNjljNDM1OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZy7RafjREYgx5230v5NDVuAmnxM
q6btCNRRBOaDm/bOqKSgSHgAcaVYAln4KTQIGwLqPQS4a7r4MvsWYKb3KlrTKMFG
zxMo3DzCj+Z7cotgtIBxyWcBkAmSELq8UKAEwWPaLVEcK/CiITuT5YXXUr4huVW0
rogIwwm/BkRuOQH6/2FsNygoTrPli1BfqZ5THyBhhi3A6MV78rjGLf4KpHno1Jn1
iXQdW0LXmygyDHLgdFzQKrXCx6DhMhMN4SH6v+BMdT9YA7kVlQg76tnd8Q/3UIQR
RAtAHYaRoReun0ajInEPqZKmI2nLcLyhkOVIIqkCwGUSPgNljFeysiHX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZEcGqpsLJzJQU88Rq+yOacQ1mZMB8GA1UdIwQY
MBaAFDLtZwAtxzB+hWO25JNMzVcjpE8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMt
ZjFlOWJjNDFkOTJmLzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMtZjFlOWJjNDFkOTJm
LzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqpQ1UwZ
/h687r8+5f7AqxY2fMWvtg40g1UgIVgIf2BxPW/6btn3N9PRLTcewpzD5FvR2UlF
MhaZ0+NguB4se/n4ia83Gog8HgfwR0G9ST4Elc7KnXrV8cEGotHpMApdbCMN/745
1zPoLzXIpFV7rX9+jyC2PHE1MByYyCAg0cApQWcwKSUlL42Mx6Fcqg7k/cVeKRup
lVWTzEunUQCsvJOcvo7ASnl2Hdjf+wv8e4HSTPh/w3/EuhfhdoPv6kL4hCv6YcEa
4aYsDKdr3AajoJoHH4x2nEtiQhY9j1ebwa+SMlqahEJcAxopa52AFfcjClnMRysM
MNttTO/vImuczg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:54 2026 by rpki-client