Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier: dW7XTvnhy6N+/urc5tlJFnFQ2BhFoMstEBz8y1QLqHY=
Subject key identifier: 4E:BB:44:36:FB:25:DC:30:D6:1B:28:EA:C4:C7:7D:94:96:4C:42:A1
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial: 019D29617CE3E5B62AD260A309F6755A313B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number: 11A9
Signing time: Thu 26 Mar 2026 09:02:27 +0000
Manifest this update: Thu 26 Mar 2026 09:02:27 +0000
Manifest next update: Fri 27 Mar 2026 09:02:27 +0000
Files and hashes: 1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: tkLOMDgHd1dhNDqVLRT0dvwe5vfX3WE9jy+KScQaln8=)
2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:7c:e3:e5:b6:2a:d2:60:a3:09:f6:75:5a:31:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Validity
Not Before: Mar 26 09:02:27 2026 GMT
Not After : Mar 27 09:02:27 2026 GMT
Subject: CN=4ebb4436fb25dc30d61b28eac4c77d94964c42a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:12:84:e3:ec:88:19:03:d7:e7:62:06:9d:
91:2c:0b:b9:8f:ca:e5:cc:c2:6a:c8:22:8f:4d:64:
10:31:e9:f5:30:c7:d2:4b:8b:3b:cc:64:e8:67:cb:
cb:6e:84:3b:11:e1:f8:40:e1:28:23:43:47:87:d4:
70:ee:f4:79:26:28:9d:c3:20:fd:d3:8d:69:97:7e:
65:b9:73:dd:97:02:2c:97:08:97:69:b4:4b:eb:86:
86:11:80:17:94:ab:db:5f:9c:3d:8c:1a:86:a4:d5:
9f:2d:ee:a8:d0:ef:82:ff:5f:86:e7:73:95:4b:6b:
8c:43:32:4e:ef:4e:c8:63:37:3e:68:d0:d9:c4:e3:
f9:62:6e:13:4b:c5:e5:a9:ba:4c:b9:e4:0b:72:4e:
af:e0:d7:ec:59:b2:9e:4f:13:cf:f5:0c:79:27:a6:
f8:93:e4:c1:f3:f7:f7:9b:83:a6:fe:4d:74:44:75:
56:7d:16:2b:84:7d:45:01:3e:c8:ba:ab:4c:fe:7c:
58:14:28:36:5f:de:49:93:f3:a5:c8:b0:aa:9e:b1:
78:8f:66:a5:4d:df:11:da:3e:12:43:77:73:ba:33:
00:04:1e:9d:05:ce:03:56:71:08:0c:2c:16:0b:bf:
cb:6a:60:2f:0f:b9:7c:ed:8f:3d:b4:43:53:f2:c1:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:44:36:FB:25:DC:30:D6:1B:28:EA:C4:C7:7D:94:96:4C:42:A1
X509v3 Authority Key Identifier:
keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:58:86:29:90:24:ac:49:42:1e:79:c4:63:12:f7:c9:94:
b4:cb:d2:1f:52:50:20:e7:6d:40:41:77:9c:1a:e9:0a:fa:76:
d7:a6:5f:59:d3:10:73:b8:5c:b6:7a:4b:e1:5a:f8:da:de:7f:
a2:5a:32:62:77:cc:51:d1:bc:83:16:2d:fb:60:09:96:a2:3d:
bd:31:8f:6c:32:b9:cd:ca:a9:35:d5:ad:3f:5d:71:8c:65:47:
93:e0:37:92:05:1f:ac:9e:39:94:b9:df:3c:d1:f0:00:3a:57:
f0:63:e4:68:d7:a8:7e:dd:03:72:c3:3c:e1:68:16:e3:47:13:
2d:4e:e1:ad:99:6c:2f:4f:20:92:78:f9:2a:42:d8:e4:9a:30:
05:2b:c8:b2:e7:43:ab:61:e6:91:ef:ef:20:0d:ed:7c:ef:3b:
58:24:1e:d7:ac:da:2b:56:09:00:0b:78:cb:66:2a:dc:89:c3:
66:90:b2:bf:a3:65:60:1f:45:bc:e4:f5:ad:c0:b9:fb:dc:87:
8a:cf:7d:eb:7e:85:ad:81:30:88:7d:33:5c:b4:a6:8c:a3:a1:
63:e2:9c:42:4c:d6:4a:cf:f7:0c:0b:39:03:ae:7d:af:03:f6:
9d:7f:09:97:96:ba:e6:43:43:31:88:1a:83:46:b5:ff:0e:84:
d9:a2:12:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:01 2026 by rpki-client