Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier: E6y2K1hRXOCr2OL9YUtNqLMB6VY05HDB55HQQ7TMnAE=
Subject key identifier: 9F:DF:88:CD:D8:69:FF:1C:6D:FD:A0:69:9B:47:82:1C:1B:8F:D1:C6
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer: /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial: 019D284E295CEBBA4A10D15CE83C79E657AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:01:44 +0000
Manifest this update: Thu 26 Mar 2026 04:01:44 +0000
Manifest next update: Fri 27 Mar 2026 04:01:44 +0000
Files and hashes: 1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: UX+YJTvcrit0xMndcmyf2U6v/T7aR/9CzLrAexJF/54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:29:5c:eb:ba:4a:10:d1:5c:e8:3c:79:e6:57:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Validity
Not Before: Mar 26 04:01:44 2026 GMT
Not After : Mar 27 04:01:44 2026 GMT
Subject: CN=9fdf88cdd869ff1c6dfda0699b47821c1b8fd1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:af:ff:c5:7c:36:7a:53:47:16:4a:70:dc:
9f:d6:a2:4d:a2:4e:0e:dd:5f:47:5a:49:4b:ae:65:
29:2a:64:aa:b3:71:99:e0:ec:9c:e7:b2:68:34:f7:
56:58:7f:9c:4b:91:9f:e4:8f:60:7a:51:eb:a2:3e:
ca:80:72:d5:40:53:3a:8c:13:47:09:cc:dd:55:51:
98:e4:6e:bf:6e:0b:97:7d:e0:e5:12:d6:24:9e:36:
37:80:ee:f4:1e:89:16:b5:de:0c:f8:e3:6b:f8:b6:
46:0b:70:68:e2:92:f8:61:8b:2c:bf:e0:9b:f3:e4:
ac:d1:c2:bc:f6:92:c9:17:d0:9a:51:cb:fd:41:87:
75:fb:a0:57:21:2f:1b:41:fd:cf:16:01:af:b5:29:
90:d9:05:d3:87:1e:92:29:69:4c:38:cf:e4:41:2e:
9f:c2:a5:dc:f3:e3:db:ea:0e:9a:da:3b:60:2e:27:
8c:5b:f0:d2:93:2f:9f:7c:7b:7f:eb:f8:de:54:f9:
d5:3c:c5:d4:ff:c0:16:e2:57:f6:97:9c:46:dc:de:
0c:0b:24:cc:44:60:33:bc:7a:c4:e3:f5:8f:d9:ff:
ae:06:c9:35:75:99:85:e6:99:59:f8:2a:21:4d:88:
a3:1d:5c:9c:80:a4:e4:2a:f3:ae:40:17:cd:b3:3a:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DF:88:CD:D8:69:FF:1C:6D:FD:A0:69:9B:47:82:1C:1B:8F:D1:C6
X509v3 Authority Key Identifier:
keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5d:a8:99:c8:28:aa:b0:b4:1d:44:cb:e9:ff:a6:f6:26:8a:
52:9f:64:98:77:51:51:86:e0:8b:b4:3b:00:70:f8:25:ee:3a:
7f:a5:94:82:8c:44:be:51:85:2e:86:80:62:ea:9f:1f:e1:8a:
74:6b:a9:f6:ea:81:e1:3a:78:b8:de:04:60:8f:65:5a:e9:83:
36:1a:07:cd:83:c1:f8:6e:ed:5f:6c:83:66:12:71:ed:8c:d1:
b5:56:8b:01:86:de:ce:f5:e2:38:2c:b8:53:30:0b:25:c3:9b:
56:26:a8:ea:d2:6b:c2:ea:15:85:4a:57:59:d5:3b:92:99:95:
83:70:80:42:58:71:89:43:37:3f:13:e0:3f:4b:65:d5:62:80:
ee:30:6a:d6:2d:96:96:c4:8b:6c:52:4a:6c:c1:9c:07:d5:77:
00:67:3e:4f:ad:76:14:2d:dd:14:7d:75:67:13:74:d7:26:0d:
7c:49:ae:18:6e:e9:81:17:72:b6:2e:60:ee:f4:a3:9d:dc:f6:
c2:e9:8e:7b:c5:a5:a0:7b:2e:77:4b:04:16:bc:24:57:b6:68:
4c:3f:5d:3e:28:82:09:a8:b7:4f:77:79:7a:f6:ee:66:5c:39:
4d:df:7e:b4:49:80:08:5e:03:61:ad:87:05:69:c7:eb:fe:3a:
04:58:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:06 2026 by rpki-client