Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: T2vKO0A3jxt+LkPdJm+JB7jkebbJ/2U2O+BXv5z2tko=
Subject key identifier: A8:5E:7B:AB:99:BE:25:37:97:4D:CB:4C:5B:67:F0:C8:C4:1E:EF:68
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019F9436E16C911CDA1A9E3E5A6EF31B4BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:00:52 +0000
Manifest this update: Fri 24 Jul 2026 13:00:52 +0000
Manifest next update: Sat 25 Jul 2026 13:00:52 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: 2aR9do4Rw92WW8xYAulqENOfQYo4RMmtMQx2HKA3d8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e1:6c:91:1c:da:1a:9e:3e:5a:6e:f3:1b:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jul 24 13:00:52 2026 GMT
Not After : Jul 25 13:00:52 2026 GMT
Subject: CN=a85e7bab99be2537974dcb4c5b67f0c8c41eef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:60:33:55:2c:ac:78:45:6e:49:fd:a9:3d:
97:c8:29:a0:67:0d:69:56:76:f9:38:d0:86:44:61:
22:7f:f8:e5:98:e8:23:85:37:97:e6:fe:30:bd:68:
6f:8a:a7:a4:ee:d9:13:27:0b:c0:05:31:b4:3f:ae:
95:9e:a1:2f:f9:76:57:7d:c2:a6:f2:af:d9:3a:1e:
b2:bc:93:27:53:e1:b2:77:97:be:af:47:dd:c3:ca:
48:50:e7:77:ce:78:cc:79:03:cd:7c:5c:e6:5f:e4:
bd:b0:55:af:de:4c:4b:00:50:6d:02:dc:83:bf:cc:
d9:2e:91:3c:87:72:44:16:82:e5:ed:fa:c4:ab:fb:
ac:04:bb:8f:f8:41:97:c5:9e:41:0b:af:29:ed:9c:
87:b1:ed:87:d0:d1:e2:3c:7b:cb:2c:a1:d3:dd:ae:
90:71:f4:c0:2a:1a:15:76:9a:2b:7e:2d:b5:c0:02:
a3:b8:8e:94:44:d0:1f:45:fd:91:4c:02:e2:d0:52:
5c:b8:ce:d6:45:70:77:eb:98:09:2f:3f:57:d8:18:
a0:07:04:1f:81:e0:b2:e0:f0:28:c3:52:e5:56:5e:
61:5e:b0:ba:d9:85:12:b1:1e:d3:cf:60:9f:5e:76:
b2:e0:10:8d:89:ee:c5:ed:3c:33:3a:9c:de:01:ab:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:7B:AB:99:BE:25:37:97:4D:CB:4C:5B:67:F0:C8:C4:1E:EF:68
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b8:75:4c:65:28:fa:1e:8a:49:61:16:f3:48:01:85:fb:e8:
74:4a:ff:f1:bd:6f:18:a4:e2:cc:c3:2b:08:6e:fc:ea:9f:df:
5b:e6:5e:bf:9b:44:04:b6:79:6d:e1:47:d3:25:41:27:f2:47:
06:52:3b:60:1d:ef:08:a4:82:11:9d:dd:01:44:0a:1c:41:50:
e5:d8:da:0a:07:59:45:13:08:08:87:dd:13:1a:75:14:ea:ca:
1c:fc:0d:fc:91:99:82:1c:e8:80:c5:7b:cb:b9:44:0c:aa:49:
c5:1f:f9:e6:78:82:83:e7:11:eb:48:16:09:0d:39:4e:af:19:
64:f2:8d:69:e2:bf:2a:28:f6:b8:d9:f6:73:05:67:71:65:da:
0b:a8:ea:99:08:cc:f6:81:d1:48:69:a0:27:2c:01:de:a4:84:
53:63:dc:19:e0:84:7a:87:e1:f8:f6:e6:14:c6:96:60:c6:09:
74:df:0a:3c:74:81:db:c5:23:3e:0d:5a:15:75:b5:0b:3b:71:
42:dd:a3:93:bb:52:24:38:45:98:32:fe:08:ff:91:b3:11:b7:
06:b1:e9:1a:57:9d:a9:a8:36:21:cb:2d:95:5e:2a:b3:c1:32:
cf:73:f9:08:64:0b:47:96:25:f3:3f:c1:b7:5c:43:cd:63:cb:
f0:39:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:14 2026 by rpki-client