Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: ptd3POLNQr1xxLJuNYPkcDCqFpy4stTOlsLYhBea4ic=
Subject key identifier: 27:A1:58:A6:EC:38:E0:2D:8E:8D:C7:1F:B4:4A:D8:EE:4E:C8:51:0F
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019D265FED0AC9C31762A1FCDA8D68BBBB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:53 +0000
Manifest this update: Wed 25 Mar 2026 19:01:53 +0000
Manifest next update: Thu 26 Mar 2026 19:01:53 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: 1mrG71NnHMMASrZxBrPaEvQ9osawHE0S5OoJi4Uwnm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ed:0a:c9:c3:17:62:a1:fc:da:8d:68:bb:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Mar 25 19:01:53 2026 GMT
Not After : Mar 26 19:01:53 2026 GMT
Subject: CN=27a158a6ec38e02d8e8dc71fb44ad8ee4ec8510f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:e8:e6:00:3f:3e:7d:be:10:ef:71:8e:89:
bd:75:e2:a5:82:a6:4d:b7:56:07:c3:51:4d:cd:82:
58:97:5c:35:bb:78:ae:be:43:2d:33:99:f7:07:66:
c1:e6:95:e2:7b:3c:29:ca:63:ae:f0:22:0d:95:5b:
81:33:20:a5:d8:9d:1d:e3:1a:95:74:81:d7:99:e0:
ac:eb:25:e7:70:07:68:aa:07:9e:45:a5:3b:3e:1e:
c3:dd:cd:68:8b:90:ee:54:d7:e2:dd:2a:b7:78:2d:
59:1e:78:ea:f3:74:e1:bf:cc:fa:b1:70:1c:5a:ed:
c0:40:fd:19:66:29:d9:a8:85:34:c9:b5:d3:00:68:
e1:17:65:69:ec:c5:20:01:b6:04:d8:cf:68:e3:51:
08:13:04:ba:ad:b5:07:33:95:a6:7a:b7:0a:1a:1a:
0a:3d:fe:1f:c1:4c:7a:2b:c0:ef:a4:77:9d:e4:24:
67:c0:e5:ae:ea:27:94:77:06:9b:50:d1:56:7f:48:
bf:4b:8d:4f:c0:1f:ad:5d:aa:47:43:75:3a:82:bc:
aa:76:14:26:1e:8b:3b:75:bb:df:b7:09:44:82:26:
4b:2b:82:53:28:a0:0f:4d:10:a7:73:51:93:ea:dd:
c3:85:45:b6:01:8f:94:0e:93:48:02:4a:b7:ef:c8:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:58:A6:EC:38:E0:2D:8E:8D:C7:1F:B4:4A:D8:EE:4E:C8:51:0F
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a8:29:61:e7:df:56:d1:6d:b0:a4:0b:d0:de:2b:be:ed:32:
68:f8:0b:e5:44:eb:4c:1f:6b:e7:65:2b:8a:6d:51:84:63:4f:
20:2d:45:1e:1c:82:0e:28:08:90:70:db:ca:b6:97:2d:6e:a3:
b9:88:73:bb:e5:42:31:4c:d5:9d:d6:cb:18:46:35:df:27:ce:
bf:21:1c:ce:08:d5:28:56:56:95:89:a4:1a:28:d1:24:98:71:
f3:ba:02:9d:1f:aa:a0:04:78:ba:88:5d:be:bd:f5:ef:7f:d6:
41:ae:0a:83:5f:69:e6:7d:c2:2b:97:6e:42:ae:c5:66:6d:6e:
c4:4b:2a:60:ae:15:eb:a1:ce:ad:af:6b:01:54:a6:8a:f4:8c:
62:04:a4:44:8e:18:d1:9d:66:19:e6:34:c5:8d:96:06:bb:ac:
da:d9:ec:11:d4:9b:b3:db:9d:bb:84:92:45:eb:c3:7a:b0:08:
d0:7d:f4:4e:71:45:89:7a:d3:19:7f:a1:88:ba:2c:87:1c:c9:
a8:4f:51:e4:20:b7:bb:01:b5:57:61:31:3e:03:7e:6a:c5:aa:
45:11:24:91:bd:3d:97:4c:73:af:d0:73:93:5c:30:90:05:e2:
33:d4:e6:ed:6c:6b:6c:f9:2c:c8:a6:9d:b0:d4:08:e2:60:06:
ca:72:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:58 2026 by rpki-client