Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: q2TDuqxlYZbM60hcIaTP6NPOAZPA2iVXloZCYRWbIhc=
Subject key identifier: 41:29:FA:D3:7D:F9:CD:F0:E7:85:7A:C1:B2:BB:A9:3D:63:09:37:C7
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 019D322C56609B46C484846743C3BCE682E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0F9E
Signing time: Sat 28 Mar 2026 02:00:59 +0000
Manifest this update: Sat 28 Mar 2026 02:00:59 +0000
Manifest next update: Sun 29 Mar 2026 02:00:59 +0000
Files and hashes: 1: ENxwjXTdbKTvs3cxszl-xyNLpXc.roa (hash: 47BjcSHsUkq+j3LunSdpEHT6VVnEgYALqU6b9V3eCd4=)
2: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: 1pAG+PGXrqEkLYZqVH55CjUeYkxo4+5haosBxFRlbxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:56:60:9b:46:c4:84:84:67:43:c3:bc:e6:82:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Mar 28 02:00:59 2026 GMT
Not After : Mar 29 02:00:59 2026 GMT
Subject: CN=4129fad37df9cdf0e7857ac1b2bba93d630937c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:b4:9c:27:db:fc:24:b0:99:a9:24:46:32:
da:eb:56:b9:6e:30:cf:7c:e4:e7:ad:07:20:0c:25:
21:06:fd:7f:bf:aa:1a:06:bc:4b:7f:8b:ba:30:0b:
55:89:61:24:f9:ec:f0:4f:f6:03:40:c3:71:e6:5b:
ce:da:3c:6f:42:76:46:89:d6:97:e1:fb:88:be:c9:
8e:8f:8f:08:75:db:8c:19:ec:94:c0:2e:ad:4f:52:
ed:e9:6a:f6:bf:99:f7:ac:22:c9:d5:6c:7a:25:72:
b1:2e:0f:6d:1b:c0:aa:d5:5b:6f:98:5a:8f:8b:10:
71:c0:c2:2e:e8:8b:ad:7b:cf:6d:31:ae:fc:e0:a7:
fc:76:9f:54:88:1d:23:d7:ae:e9:78:49:66:ab:3e:
be:78:34:06:df:c7:5d:fe:c1:95:9d:04:43:96:64:
75:3b:b7:d5:6c:ab:5f:b8:ea:69:5b:26:35:20:a7:
e1:8e:fb:d8:0b:f4:fc:46:2d:01:20:92:1e:e6:44:
44:aa:51:7e:c1:d1:18:b7:75:99:ef:12:2f:b1:22:
dd:e5:a1:96:01:e0:9e:03:69:cb:89:f8:28:d8:77:
dd:c8:68:8d:bd:f4:3c:ee:f0:80:f8:44:e8:c7:6b:
5c:c9:a6:39:cb:05:52:38:00:1d:28:49:bd:65:2f:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:FA:D3:7D:F9:CD:F0:E7:85:7A:C1:B2:BB:A9:3D:63:09:37:C7
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0c:0b:85:31:8f:dd:10:02:01:0e:57:c2:ca:14:92:86:70:
f4:21:bc:d6:94:d8:09:fe:c4:46:3b:1e:1e:bc:61:9f:1e:86:
b3:c5:35:e9:fd:1a:10:9f:c6:2b:0f:ce:41:06:2c:e9:3a:f9:
c9:19:88:35:37:da:f5:1e:e0:30:5a:1a:d9:fd:18:c5:21:fe:
68:55:0e:5c:5b:4c:aa:68:c3:63:b7:a7:05:20:d9:c4:f6:e1:
f0:cb:48:bc:5b:3f:5e:89:b9:76:8f:53:10:f9:2f:a7:d9:cf:
9e:12:80:d7:e5:49:a0:c6:00:a4:46:cc:26:52:f8:be:82:e1:
64:18:a6:eb:d6:52:6f:00:fa:84:12:ab:40:27:5a:19:2f:7c:
14:64:ac:18:72:41:16:17:db:97:5b:96:05:23:f0:95:a1:20:
e3:73:80:ee:84:00:76:0c:f6:45:f3:ce:75:34:31:73:91:43:
5e:eb:f7:e6:bb:79:b3:84:9f:ec:d8:bc:47:29:7f:7b:7b:03:
50:b6:ea:cb:22:74:9f:83:3a:ff:45:74:52:88:03:27:31:d7:
53:d0:1d:bb:df:f0:bb:49:50:9d:62:c1:db:12:e0:a5:6b:54:
47:01:ae:f9:5f:24:d6:45:e8:03:c2:38:7f:1f:a6:c4:46:e4:
ec:f6:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:42 2026 by rpki-client