Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: dExagkxDL7DjrcMU90TATQ+p+lzMRxiSfDFpEaf2Hqo=
Subject key identifier: 4C:89:34:2A:A2:A0:AC:5A:11:0A:7D:B1:87:2E:51:38:DD:50:46:2D
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 019D27DF7995331E4B0AEA7E525916C24A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0CA9
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: 4x1TKBz_BI-V4dj9yOWPflsgBy0.roa (hash: AEyQ4d3oKadVqU+q8qpPHgCbs4RI3Y80TBihfli8Oxo=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: wUQOHI1wLHali0nVtfGejGAeQZBo8lfMIqzhU6QF2RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:79:95:33:1e:4b:0a:ea:7e:52:59:16:c2:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=4c89342aa2a0ac5a110a7db1872e5138dd50462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:b7:00:5a:e9:c3:2c:04:00:63:fb:3b:21:
e0:0e:b5:96:d0:de:bd:77:ab:aa:6a:f7:ba:e1:12:
70:42:1c:c0:68:72:f8:98:59:2f:6c:73:8e:11:ab:
e1:e4:f0:89:d6:1d:4b:93:16:5a:b1:75:87:63:ae:
b8:c5:a6:b1:24:1b:26:1f:d4:7b:1d:ec:d5:3c:12:
05:ce:ad:dd:20:8f:3d:f0:7e:94:e1:5d:2d:58:b7:
02:df:cf:d5:b7:9e:ae:1b:d8:0a:14:da:f6:39:6f:
1c:28:b1:71:b3:13:27:18:80:33:af:09:62:bb:5d:
43:b7:3f:6a:5b:74:ef:62:cf:38:57:13:95:c1:f7:
2e:83:29:05:5d:b7:1f:7a:52:d5:64:03:7a:3d:9b:
9e:17:c5:d2:1b:27:3a:5d:99:e2:2c:46:c3:f5:cc:
9d:72:0a:a8:0d:d9:25:2a:59:03:cf:fc:13:28:b0:
11:6d:a2:f8:29:e2:18:64:7a:66:06:67:a5:d2:84:
6e:22:c2:47:cf:f1:1e:d2:5e:78:e8:14:6f:78:1f:
0e:99:d1:40:a7:59:95:b7:43:24:8f:f7:cc:08:ef:
04:ed:2e:1e:11:ec:87:39:02:38:db:20:72:30:a7:
e8:c8:82:3d:2a:12:52:54:ee:57:57:15:ed:23:bb:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:34:2A:A2:A0:AC:5A:11:0A:7D:B1:87:2E:51:38:DD:50:46:2D
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:ac:60:f3:b6:e7:fa:1a:9f:35:7f:d2:f0:c9:f3:2b:92:
4e:e2:02:d4:a5:12:55:b4:40:ac:33:45:d5:79:3a:69:02:b5:
40:15:93:2c:17:84:5f:96:8f:ab:38:c1:68:cc:86:47:53:e0:
c6:3a:66:34:87:e2:fa:be:33:5b:e3:15:6a:26:49:3f:59:fe:
bd:37:12:04:e6:d8:a0:f6:4b:30:5f:6b:c4:8a:6e:82:4c:0c:
85:a2:dc:b3:95:7d:96:89:0d:a3:14:8c:9b:66:09:97:d8:3c:
a8:7b:cf:3a:25:43:1e:f0:6b:77:24:2e:72:e6:ff:cb:3f:6d:
42:97:9a:e5:f4:fa:1e:e4:35:08:61:c7:20:94:1b:6b:ac:f7:
d0:ef:12:2f:d0:69:72:ff:35:43:a1:20:04:8b:cc:ab:e6:dc:
9e:f0:08:3f:d7:04:25:5d:dd:5b:27:9b:ba:a7:64:f9:b4:3e:
ac:7c:b5:42:0d:85:f7:2c:63:10:9a:b8:14:bb:a9:c8:8f:56:
06:9b:bc:f7:00:93:30:a9:68:8b:4d:64:18:44:b7:fb:40:35:
f2:1b:a7:ac:4d:dc:ec:df:a7:ed:2c:9a:9f:f0:99:34:39:77:
2b:4b:a5:98:60:e3:f8:07:40:0b:a4:50:b2:91:bb:74:12:7d:
67:0a:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:12 2026 by rpki-client