Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: 5/Ki6sDLaITqpgNwnqVBEbfxkWiUORzDHZFY+D1Ta4I=
Subject key identifier: FF:E8:1C:45:59:59:AA:E6:A6:B0:BB:24:2B:75:B3:E3:01:A8:50:91
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 019D28BB8EBBC0CAFE65BA629252B67A86BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 06:01:13 +0000
Manifest this update: Thu 26 Mar 2026 06:01:13 +0000
Manifest next update: Fri 27 Mar 2026 06:01:13 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: QCAZdqAvKmGbBVqGV6jgkc0BZANxpPQVxOkJkjckm0k=)
2: ALvjuEagqkX_bxCENg8XKd0AAsU.roa (hash: IQ71j6lnnVzLcsftePg8wMiGMFkrq5Obvc/qjDtIg9o=)
3: UXTtsC8Oa5GFJq-oeBczgV235bU.roa (hash: QROFgHuLFM3vpOALM0ZjBn/r8WQThhQx6Zrl/aYuc/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8e:bb:c0:ca:fe:65:ba:62:92:52:b6:7a:86:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Mar 26 06:01:13 2026 GMT
Not After : Mar 27 06:01:13 2026 GMT
Subject: CN=ffe81c455959aae6a6b0bb242b75b3e301a85091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:e6:b0:8e:47:cc:d0:e7:5b:a1:1c:4f:4f:
de:ca:58:d0:c8:65:03:a1:d4:43:62:7f:0b:8b:cd:
5b:f0:8d:29:dc:e9:b7:7b:6c:41:65:f8:83:93:39:
f4:6c:89:23:b2:e6:3f:7f:27:b3:7b:36:ac:e8:dd:
3a:9f:99:fa:e0:65:bb:18:54:f1:da:9e:02:75:bc:
25:2e:bb:ca:7d:df:b3:9c:07:68:ca:8c:80:67:d5:
8b:46:02:98:ae:d2:e5:9f:07:c3:54:8c:22:c0:5f:
d5:c9:ca:cb:87:90:e0:5b:6d:2b:b3:64:66:14:6a:
17:20:e5:ed:3d:76:f0:46:ea:47:cf:2d:6c:c5:43:
64:d5:f7:6e:25:55:32:0c:d9:5d:31:c4:38:21:90:
cc:c5:d4:c9:45:6d:84:43:ca:db:ab:c6:a4:fc:a6:
c0:53:1f:a4:32:00:5c:3e:33:dd:1b:23:80:f4:53:
98:87:7e:ae:f4:7f:d4:d6:cf:53:96:93:5b:62:cf:
ea:de:48:25:cc:ad:63:cd:ab:17:f4:ab:11:de:d9:
39:d0:2f:c6:36:82:e8:44:28:38:49:a4:4b:7b:03:
6a:0f:27:62:b0:75:a8:f9:3d:23:25:21:a2:7e:82:
f5:a3:d6:dd:c0:cb:ba:b7:64:bb:cf:cf:5e:2a:f2:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:1C:45:59:59:AA:E6:A6:B0:BB:24:2B:75:B3:E3:01:A8:50:91
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:e8:13:bd:c5:53:b0:ad:a1:50:06:9b:7e:ac:9e:0f:b7:
94:05:5e:2a:21:ab:a9:5d:1a:7e:bc:05:67:84:9d:2f:73:0a:
8d:a5:72:bb:17:5f:6f:ca:2b:a7:fb:c7:e7:1c:92:ac:53:d8:
09:ce:c8:5e:37:68:f8:7a:0b:c4:74:3d:6a:4f:3d:ef:1d:9d:
05:ae:d3:7f:3f:d1:58:02:d7:95:1d:08:30:c0:1d:36:92:68:
7e:54:eb:1e:5c:80:ec:a1:37:10:9a:75:22:41:2d:ab:f6:a5:
96:d6:3b:90:3d:cb:ad:39:12:bd:f6:b0:b4:0b:74:27:c2:8b:
5d:b7:7d:5f:10:0b:82:b8:cd:5e:e8:36:a6:13:eb:05:e6:04:
60:a3:e2:7e:f7:dc:66:da:1b:1c:f7:a6:3a:4a:f3:8f:1a:15:
99:7d:f9:28:a8:dd:35:f6:a8:43:21:b2:87:67:1a:4d:b2:1d:
1c:40:b8:69:c1:2e:95:8d:c5:bd:e6:3d:52:58:6e:dc:e9:54:
6d:35:0b:e9:26:ee:ef:7b:bb:41:b7:f1:15:4f:4e:85:6e:7f:
f9:71:50:1c:4f:52:87:74:26:64:0f:c3:59:07:24:d4:aa:ef:
50:25:ca:3d:f8:69:53:ba:ef:84:ba:76:97:3c:31:8f:ab:ae:
2f:ff:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:58 2026 by rpki-client