Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: vRjaCRI3IJmWiC1nWbgeVO5BgmJzMaW8q/JwzRkPcuQ=
Subject key identifier: 8F:2A:E9:7A:92:8E:BF:43:C6:6E:BB:3C:E6:02:A0:D9:01:4C:6D:FE
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019D27DFC775B15F7A905B9E2F5752D7E757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0A78
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: 2c5yzTuM6Mb72kmSBdT9aSNqVfaDyccJUIsxYSCLCq4=)
2: zh3jJi7VlgsCf1B8mSSIRkmxTfM.roa (hash: UL+DW0mVWjoP5JojLcH0dVPVuqkEZ0cepJzgkv7Gs7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c7:75:b1:5f:7a:90:5b:9e:2f:57:52:d7:e7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=8f2ae97a928ebf43c66ebb3ce602a0d9014c6dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:0d:02:10:12:c7:b3:a5:66:5f:32:f1:fa:
0d:7f:0f:68:0a:94:82:bc:be:db:47:32:c6:da:a5:
b3:48:3a:7a:d0:11:2d:5f:67:81:b3:12:da:29:cc:
d3:e8:70:e7:8e:a8:40:69:3c:57:a8:c5:8f:c0:33:
96:18:ad:e1:d9:83:b6:34:36:1c:9b:7e:b3:17:4b:
6f:69:17:d5:2b:62:22:5e:9f:81:01:e1:f8:81:8b:
b6:64:1e:cc:c9:b4:0c:fb:e6:6d:81:ec:9c:f6:47:
6e:51:8a:4f:ad:ac:cd:d0:56:eb:3b:74:e9:a4:eb:
e9:5e:98:b1:66:7b:69:82:08:54:70:78:f9:89:fd:
99:73:e7:e4:50:45:2f:d2:49:92:5e:69:bb:6d:04:
47:c2:60:d5:96:6e:cc:a0:ed:dc:35:f8:8f:e4:b3:
a4:8b:bc:71:59:98:83:54:3e:25:b6:02:74:5a:a9:
c1:4d:e0:a9:95:e3:5e:aa:05:a8:8e:33:95:41:74:
7c:f3:1f:6a:2d:8f:30:0c:d2:91:78:d5:94:93:b4:
ec:d1:a6:79:6d:9c:42:44:46:ef:e8:ac:32:a3:1d:
5c:70:3c:a6:14:ab:4a:7f:e1:80:a1:b7:99:c9:88:
d9:f3:49:53:3b:57:d1:bb:69:a8:a5:25:88:c8:b4:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2A:E9:7A:92:8E:BF:43:C6:6E:BB:3C:E6:02:A0:D9:01:4C:6D:FE
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:2e:6b:0d:f1:1c:f5:b7:0f:b3:eb:66:f9:9e:95:59:8d:
8e:68:cb:30:85:07:a9:2d:e3:33:80:54:3f:4e:43:c1:0f:17:
16:9e:71:58:19:93:71:77:00:f0:84:58:66:f6:0e:52:52:8b:
68:f0:4c:46:ac:a2:99:11:93:52:9a:2c:e5:bb:c0:c3:86:d0:
51:be:a2:c9:b5:d5:b9:6b:af:ee:ce:d1:d8:61:19:17:9d:70:
6f:52:61:d2:44:5d:01:1e:e8:7d:5c:4c:c3:20:f7:e8:02:81:
62:50:e1:8c:c5:3c:ef:36:19:10:bc:95:f3:20:41:81:63:eb:
a8:b8:69:7b:ea:05:30:b1:3f:da:96:66:71:30:71:8a:18:70:
f9:34:54:f4:a1:75:69:20:9d:08:d4:06:d6:ea:04:98:44:e8:
27:f2:0f:d8:00:9f:2d:46:62:b5:23:ee:97:7d:6a:f4:6d:de:
d6:c2:74:1c:f3:fd:b8:fa:54:93:d2:ea:84:db:98:8a:5a:4c:
b9:29:ff:e1:02:14:98:a7:12:72:7e:ae:a6:db:40:9f:a7:40:
fd:7d:eb:a2:24:29:fe:b9:06:58:6e:62:94:14:4f:bd:57:d6:
7d:53:48:83:22:ac:55:b2:1c:e8:39:12:c1:7d:de:55:b1:ad:
24:ca:c8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n38d1sV96kFueL1dS1+dXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWQwMTQ1NzdhYzczZmY4N2VmMjBjYTZmNzU3OTVlNGM5
MzdmY2UwHhcNMjYwMzI2MDIwMTEwWhcNMjYwMzI3MDIwMTEwWjAzMTEwLwYDVQQD
Eyg4ZjJhZTk3YTkyOGViZjQzYzY2ZWJiM2NlNjAyYTBkOTAxNGM2ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJkNAhASx7OlZl8y8foNfw9oCpSC
vL7bRzLG2qWzSDp60BEtX2eBsxLaKczT6HDnjqhAaTxXqMWPwDOWGK3h2YO2NDYc
m36zF0tvaRfVK2IiXp+BAeH4gYu2ZB7MybQM++Ztgeyc9kduUYpPrazN0FbrO3Tp
pOvpXpixZntpgghUcHj5if2Zc+fkUEUv0kmSXmm7bQRHwmDVlm7MoO3cNfiP5LOk
i7xxWZiDVD4ltgJ0WqnBTeCpleNeqgWojjOVQXR88x9qLY8wDNKReNWUk7Ts0aZ5
bZxCREbv6Kwyox1ccDymFKtKf+GAobeZyYjZ80lTO1fRu2mopSWIyLQnUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8q6XqSjr9Dxm67POYCoNkBTG3+MB8GA1UdIwQY
MBaAFDLtAUV3rHP/h+8gym91eV5Mk3/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGIt
OGZjMmI3MWQwMzBmLzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGItOGZjMmI3MWQwMzBm
LzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpouaw3x
HPW3D7PrZvmelVmNjmjLMIUHqS3jM4BUP05DwQ8XFp5xWBmTcXcA8IRYZvYOUlKL
aPBMRqyimRGTUpos5bvAw4bQUb6iybXVuWuv7s7R2GEZF51wb1Jh0kRdAR7ofVxM
wyD36AKBYlDhjMU87zYZELyV8yBBgWPrqLhpe+oFMLE/2pZmcTBxihhw+TRU9KF1
aSCdCNQG1uoEmEToJ/IP2ACfLUZitSPul31q9G3e1sJ0HPP9uPpUk9LqhNuYilpM
uSn/4QIUmKcScn6upttAn6dA/X3roiQp/rkGWG5ilBRPvVfWfVNIgyKsVbIc6DkS
wX3eVbGtJMrIYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:55 2026 by rpki-client