Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: 7BxQPBKWNMvNnK/JCyyYs//weW7G+wux8++Nb9KlNHc=
Subject key identifier: 3F:76:64:4E:D7:F8:78:CC:44:36:CC:BD:DC:59:9A:1F:F8:C1:2E:D4
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 019D28167D338592A9650EE6E247178F6207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 07AB
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: N1kuiiYi9Y3JPn99vOrPPCJx0Lc+HQ7iF8tVM5sbHAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7d:33:85:92:a9:65:0e:e6:e2:47:17:8f:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=3f76644ed7f878cc4436ccbddc599a1ff8c12ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:49:5a:3c:0f:27:cb:57:71:aa:fd:e9:0d:
16:fd:93:bf:e1:84:cf:1d:73:2d:26:f2:b0:e7:c1:
9c:19:01:67:c1:08:60:27:9f:f5:5d:ad:a2:a7:3a:
eb:73:bf:e3:bb:3c:92:5b:67:f4:65:c9:c8:b0:87:
25:95:55:94:c7:aa:2e:66:2d:ad:a9:12:44:52:07:
c9:d1:b5:47:c6:95:d4:26:67:ed:27:63:0a:b3:81:
b1:59:79:34:01:1e:06:7d:ab:4d:e1:d1:87:50:9e:
0d:d0:64:a5:65:00:97:df:ae:26:22:2b:fc:18:34:
21:05:45:87:1f:8c:8b:71:4b:25:18:a8:5c:75:f9:
99:b6:41:78:e4:49:1c:eb:3b:1f:2c:51:9c:db:26:
10:5f:86:fb:48:58:2d:2e:fb:4b:42:c7:44:4c:48:
65:6c:7d:4f:70:41:66:c9:df:30:11:dc:f8:a2:c8:
67:dd:c2:81:a5:90:30:cd:7f:5d:ce:dc:03:21:2f:
56:80:fe:ad:70:51:72:fb:28:c9:0b:2e:74:fd:65:
d8:74:d1:a5:5a:63:f3:af:e7:db:e1:dc:4c:c3:ea:
ae:c0:10:74:27:fe:8d:ba:26:39:d6:41:be:f2:0f:
61:cc:c0:51:3c:88:de:31:00:8b:f7:30:d6:4d:f1:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:64:4E:D7:F8:78:CC:44:36:CC:BD:DC:59:9A:1F:F8:C1:2E:D4
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:d1:40:c6:1f:1b:9d:2f:e8:f2:33:a0:62:68:45:31:29:
58:24:b7:0f:a4:4c:fb:07:92:5f:5f:ae:b1:88:cc:d7:94:5d:
3d:a0:08:55:51:7c:63:bf:0c:05:59:99:3f:19:48:c6:8d:52:
aa:a7:7f:94:74:b8:15:11:5c:10:18:ce:e3:be:f8:b0:d3:81:
8a:1c:64:d9:83:4e:63:67:f5:9d:c2:69:43:55:0d:df:34:5f:
71:ab:fc:13:20:40:5d:b0:0c:28:1a:dc:42:76:30:1b:a7:e0:
1a:70:4a:4c:2f:20:9e:9e:1a:ba:dd:d1:51:1d:d7:3f:d4:31:
4f:e1:a3:bb:8c:a6:30:9d:13:85:9e:f0:b4:a9:12:10:77:9e:
ff:a1:51:d8:fa:4d:f1:44:c8:d9:8f:40:f0:96:75:a2:b9:f8:
d3:83:c4:fa:19:ea:4f:3d:af:c8:50:2f:86:67:c6:ae:09:ec:
73:45:ec:30:ee:e2:89:1c:f5:22:a9:5f:1c:d1:64:09:cf:fa:
70:4b:28:2c:d4:ba:77:8d:7d:1a:7e:11:b2:a2:ef:28:24:18:
12:f4:c5:b9:65:62:82:d0:43:60:f1:41:3d:76:99:6a:e2:9d:
b5:08:5b:56:73:24:95:04:51:cb:a3:98:f4:78:3e:18:db:52:
12:83:c1:81
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0oFn0zhZKpZQ7m4kcXj2IHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmI5MDgwNDgxM2E2NTc2ODg3OThhZGRlN2JkYmQwZTZk
MGU1M2UwHhcNMjYwMzI2MDMwMDU1WhcNMjYwMzI3MDMwMDU1WjAzMTEwLwYDVQQD
EygzZjc2NjQ0ZWQ3Zjg3OGNjNDQzNmNjYmRkYzU5OWExZmY4YzEyZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPpJWjwPJ8tXcar96Q0W/ZO/4YTP
HXMtJvKw58GcGQFnwQhgJ5/1Xa2ipzrrc7/juzySW2f0ZcnIsIcllVWUx6ouZi2t
qRJEUgfJ0bVHxpXUJmftJ2MKs4GxWXk0AR4GfatN4dGHUJ4N0GSlZQCX364mIiv8
GDQhBUWHH4yLcUslGKhcdfmZtkF45Ekc6zsfLFGc2yYQX4b7SFgtLvtLQsdETEhl
bH1PcEFmyd8wEdz4oshn3cKBpZAwzX9dztwDIS9WgP6tcFFy+yjJCy50/WXYdNGl
WmPzr+fb4dxMw+quwBB0J/6NuiY51kG+8g9hzMBRPIjeMQCL9zDWTfEdWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD92ZE7X+HjMRDbMvdxZmh/4wS7UMB8GA1UdIwQY
MBaAFPprkIBIE6ZXaIeYrd5729Dm0OU+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tdVFnRWdUcGxkb2g1aXQzbnZiME9iUTVUNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTllM2RiLTIyNmQtNDFlMi1iZTA5
LThkN2Q0YWZmYjU5Zi8xLzEtbXVRZ0VnVHBsZG9oNWl0M252YjBPYlE1VDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2E5ZTNkYi0yMjZkLTQxZTItYmUwOS04ZDdkNGFmZmI1
OWYvMS8xLW11UWdFZ1RwbGRvaDVpdDNudmIwT2JRNVQ0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkDR
QMYfG50v6PIzoGJoRTEpWCS3D6RM+weSX1+usYjM15RdPaAIVVF8Y78MBVmZPxlI
xo1Sqqd/lHS4FRFcEBjO4774sNOBihxk2YNOY2f1ncJpQ1UN3zRfcav8EyBAXbAM
KBrcQnYwG6fgGnBKTC8gnp4aut3RUR3XP9QxT+Gju4ymMJ0ThZ7wtKkSEHee/6FR
2PpN8UTI2Y9A8JZ1orn404PE+hnqTz2vyFAvhmfGrgnsc0XsMO7iiRz1IqlfHNFk
Cc/6cEsoLNS6d419Gn4RsqLvKCQYEvTFuWVigtBDYPFBPXaZauKdtQhbVnMklQRR
y6OY9Hg+GNtSEoPBgQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:39 2026 by rpki-client