Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier: SnFvfidw6hYDYJsNDsqduI42yPa8VcZeltRwS6qrlns=
Subject key identifier: A5:28:F9:BA:C6:CC:37:36:A0:55:5F:F4:8D:1F:81:70:BD:3F:F1:3F
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 01A0D3F01A57B1CE5C1FF608058A954BE3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number: 16AC
Signing time: Thu 24 Sep 2026 15:02:02 +0000
Manifest this update: Thu 24 Sep 2026 15:02:02 +0000
Manifest next update: Fri 25 Sep 2026 15:02:02 +0000
Files and hashes: 1: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: vS6+7oyFLz9NXGWy9wLKV+mGNgqJIXkYQ2p9kvFMuLk=)
2: di_0LtYX-zy7910p1HbVAPeQb4E.roa (hash: Q0mvASV/CVPiKor53MwAZ00Mlkbyxmt/p19B01XkHwA=)
3: pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa (hash: hUdGksl3Om+qi4NqcjWlHiivRsMFn3puC7yl77M9g+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:1a:57:b1:ce:5c:1f:f6:08:05:8a:95:4b:e3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Sep 24 15:02:02 2026 GMT
Not After : Sep 25 15:02:02 2026 GMT
Subject: CN=a528f9bac6cc3736a0555ff48d1f8170bd3ff13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:cf:d3:00:ee:25:91:df:ae:af:a2:f0:68:
3e:0f:2b:28:ad:67:e1:3b:10:32:e1:21:e4:da:ac:
8a:5f:59:d4:72:f1:a2:aa:69:c4:0a:44:c3:10:0b:
32:8c:48:a2:89:b3:07:1a:37:6e:2d:96:24:80:5e:
a9:4c:e6:e2:19:9a:e3:3a:e4:d0:43:c0:64:42:3a:
b2:94:43:b4:67:f7:c6:cb:c0:98:11:06:4b:00:87:
bb:f7:1a:2b:02:f7:86:ff:a6:12:53:39:2b:8a:1f:
d6:a2:e1:3b:a4:66:aa:8d:ab:20:47:f1:28:3a:4d:
0f:91:5a:6d:ba:ff:eb:da:3d:1d:46:5f:9f:63:ae:
fb:72:38:27:25:ac:96:cd:05:2d:ea:5b:a2:e1:91:
76:a9:12:2e:62:9d:ac:71:75:44:34:6d:a3:cb:68:
b8:74:00:87:76:a5:bb:30:67:e5:c8:fa:57:0b:c4:
f3:51:d8:d5:cf:c9:80:d3:ec:5a:55:35:b3:d1:1f:
be:15:c9:45:9a:9d:75:0c:2f:bd:53:3f:25:a8:d8:
51:a4:b8:e8:c4:92:21:31:3a:3c:cb:5f:12:56:19:
e4:38:32:38:0c:0a:5f:1c:0a:32:5c:e4:3f:54:5e:
da:6f:2a:cf:e3:bb:de:b0:41:97:64:09:3b:da:81:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:28:F9:BA:C6:CC:37:36:A0:55:5F:F4:8D:1F:81:70:BD:3F:F1:3F
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:14:e9:4e:54:79:b8:7e:2f:72:93:b0:27:f2:9b:50:b2:
90:d4:fb:8a:64:bf:3b:6b:3c:a8:c9:1e:9b:eb:d4:1a:af:e4:
fb:04:ef:3c:8e:b0:4e:ef:94:1c:d5:e3:fb:0a:c4:0c:cf:cb:
f8:52:ca:1b:5b:d0:6d:ed:e4:25:24:3c:b3:a1:5d:44:a0:19:
de:1e:9a:d3:e0:d9:d8:c4:8c:60:21:e0:3e:71:85:c0:66:d9:
da:5f:a4:3f:12:82:df:48:0d:aa:db:53:9b:4a:25:10:90:e4:
48:e5:88:72:9c:c2:1e:5f:45:83:00:f2:2c:0d:20:7b:f3:3b:
8d:0e:ab:e4:8e:85:fe:d0:dd:e6:cb:4a:a3:18:55:38:e6:c6:
c8:1f:fc:bf:07:f7:53:95:24:e6:96:3c:6f:ed:39:5a:67:fa:
3f:e0:06:ea:3f:6d:de:62:45:2f:ea:75:b6:a0:c2:87:49:52:
6f:70:57:6e:9c:7a:32:42:09:11:d4:26:a2:07:5e:79:b1:4b:
73:29:98:dc:41:6b:b5:fd:14:ad:68:23:23:b8:4f:a5:d3:7b:
46:f3:56:46:4c:e6:64:30:c8:08:21:c0:6b:e5:ce:e6:2b:d7:
34:cf:9a:1a:8a:bc:4e:85:56:a5:e2:42:2e:36:16:1f:a2:3a:
91:80:67:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8BpXsc5cH/YIBYqVS+P9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWQ2NzAwMmRjNzMwN2U4NTYzYjZlNDkzNGNjZDU3MjNh
NDRmM2UwHhcNMjYwOTI0MTUwMjAyWhcNMjYwOTI1MTUwMjAyWjAzMTEwLwYDVQQD
EyhhNTI4ZjliYWM2Y2MzNzM2YTA1NTVmZjQ4ZDFmODE3MGJkM2ZmMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKDP0wDuJZHfrq+i8Gg+DysorWfh
OxAy4SHk2qyKX1nUcvGiqmnECkTDEAsyjEiiibMHGjduLZYkgF6pTObiGZrjOuTQ
Q8BkQjqylEO0Z/fGy8CYEQZLAIe79xorAveG/6YSUzkrih/WouE7pGaqjasgR/Eo
Ok0PkVptuv/r2j0dRl+fY677cjgnJayWzQUt6lui4ZF2qRIuYp2scXVENG2jy2i4
dACHdqW7MGflyPpXC8TzUdjVz8mA0+xaVTWz0R++FclFmp11DC+9Uz8lqNhRpLjo
xJIhMTo8y18SVhnkODI4DApfHAoyXOQ/VF7abyrP47vesEGXZAk72oHNjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUo+brGzDc2oFVf9I0fgXC9P/E/MB8GA1UdIwQY
MBaAFDLtZwAtxzB+hWO25JNMzVcjpE8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMt
ZjFlOWJjNDFkOTJmLzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMtZjFlOWJjNDFkOTJm
LzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLQU6U5U
ebh+L3KTsCfym1CykNT7imS/O2s8qMkem+vUGq/k+wTvPI6wTu+UHNXj+wrEDM/L
+FLKG1vQbe3kJSQ8s6FdRKAZ3h6a0+DZ2MSMYCHgPnGFwGbZ2l+kPxKC30gNqttT
m0olEJDkSOWIcpzCHl9FgwDyLA0ge/M7jQ6r5I6F/tDd5stKoxhVOObGyB/8vwf3
U5Uk5pY8b+05Wmf6P+AG6j9t3mJFL+p1tqDCh0lSb3BXbpx6MkIJEdQmogdeebFL
cymY3EFrtf0UrWgjI7hPpdN7RvNWRkzmZDDICCHAa+XO5ivXNM+aGoq8ToVWpeJC
LjYWH6I6kYBnyw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:21:39 2026 by rpki-client