Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: B3ylXY6i1titG6hub/pwcvIuOTlq9r4oeWouqQXbaK4=
Subject key identifier: 4D:00:44:2F:31:14:52:2B:83:B9:97:85:8A:46:C1:40:54:E4:85:81
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 01A0D6B93D2034D3A0181BA2B353A6909A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 04:00:59 +0000
Manifest this update: Fri 25 Sep 2026 04:00:59 +0000
Manifest next update: Sat 26 Sep 2026 04:00:59 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: MXQyqDuv8XPyVSGj6cGx7495DtWTSvmoQxMufa+QD3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:3d:20:34:d3:a0:18:1b:a2:b3:53:a6:90:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Sep 25 04:00:59 2026 GMT
Not After : Sep 26 04:00:59 2026 GMT
Subject: CN=4d00442f3114522b83b997858a46c14054e48581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:61:b9:6e:33:c4:3a:31:56:24:a8:cf:34:
02:5e:b4:dc:59:57:da:7e:50:44:e6:c8:f1:48:a7:
27:06:70:74:22:64:d0:f0:53:53:68:b3:9c:ec:98:
6c:42:ca:25:90:12:68:55:e4:f9:e1:c7:2b:b0:06:
28:dd:c4:40:b2:93:dd:33:76:da:68:33:d0:8f:a7:
e0:5f:d0:49:11:d3:fe:d4:05:64:ee:b9:5d:4a:bf:
07:97:fa:ed:04:12:06:da:25:5e:27:bf:13:d2:1e:
9f:e4:c9:ea:87:4f:de:f0:29:60:7e:c5:e4:fb:5c:
99:b4:2c:fe:dc:a0:04:61:c6:8f:6e:38:d1:00:db:
f4:6a:b5:a6:f2:3c:2d:27:25:4b:ea:91:fa:25:6e:
63:ef:7f:f0:72:61:cb:33:98:f3:4b:89:46:08:71:
8a:63:46:33:36:26:81:fb:98:2e:95:32:d6:d1:7d:
67:77:62:c8:d1:b0:d5:a9:82:8d:ea:f8:f5:38:6e:
b4:f7:8c:b4:27:11:d1:c7:9c:05:bf:9d:e7:eb:51:
09:cf:ef:d2:b8:c6:ae:98:dc:a7:2b:14:43:07:f6:
93:16:6f:1d:83:4d:1a:92:11:0d:4f:75:80:8c:8d:
0c:a1:d3:2c:eb:c2:ea:0c:6e:7d:42:0b:e1:d6:4f:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:44:2F:31:14:52:2B:83:B9:97:85:8A:46:C1:40:54:E4:85:81
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:23:40:0c:50:88:b3:e9:7e:d4:48:f8:5f:86:34:5a:65:
4c:08:6d:30:f1:07:08:b3:6f:2c:7f:7c:76:d5:ea:a8:6c:72:
a2:0e:27:74:de:75:7e:9a:c9:9d:85:df:b0:a9:e2:b1:2f:7f:
f6:c8:0b:b2:54:31:18:3a:78:89:8a:1c:f6:b1:eb:cf:a0:50:
50:54:ba:f6:d2:65:a1:7c:c1:06:2e:a9:00:52:dc:7d:4a:94:
0f:9e:15:a9:3e:ad:5d:31:5e:b5:a3:8f:42:32:0d:3a:66:53:
d2:99:d9:ff:02:f4:bf:db:65:e4:72:98:49:be:14:a1:c5:1e:
05:56:0c:40:0f:77:7c:34:54:fa:72:58:00:d3:cd:12:6f:16:
67:4c:86:ec:f4:f8:21:4d:07:68:9b:1a:b5:e4:50:05:f7:d3:
77:1d:43:40:64:68:f2:8f:28:8d:9f:1a:9c:2a:cc:9b:f7:09:
fb:c9:45:69:1d:91:fa:30:f2:a8:4e:4c:25:ab:17:b3:d4:d8:
0d:00:0c:f4:2b:90:0d:e4:62:10:fa:3b:6a:0d:5d:70:4d:37:
fd:5e:63:26:86:2d:e6:02:64:59:f8:88:ab:d8:29:65:0f:63:
08:5b:99:a2:0c:d3:3b:f5:58:9b:d5:69:d7:09:e4:ec:c2:86:
19:ce:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:12:35 2026 by rpki-client