Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: M9sdyzHFn6mXcyUoqcHB7P2HUGlRvpr4xLVEtT3saSc=
Subject key identifier: CD:3B:C7:AD:B0:53:EF:54:5F:7D:9D:00:D4:8C:CB:73:74:2C:62:36
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 019D38D38EFAB1B3D5CB05403D7BFD6CBA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:21 +0000
Manifest this update: Sun 29 Mar 2026 09:01:21 +0000
Manifest next update: Mon 30 Mar 2026 09:01:21 +0000
Files and hashes: 1: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: 0jAgfUdC69pKLgVQyzc2P4+sKQeu1DRSuXbomPU/b2k=)
2: s3PhyUwOeXidBN-bO1cXle0zxkc.roa (hash: m1yCoIslCCFawVsviGgtGHxVd9skui2ny3tBhKLzDTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8e:fa:b1:b3:d5:cb:05:40:3d:7b:fd:6c:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Mar 29 09:01:21 2026 GMT
Not After : Mar 30 09:01:21 2026 GMT
Subject: CN=cd3bc7adb053ef545f7d9d00d48ccb73742c6236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:74:3c:cd:65:d3:39:11:7b:88:6f:68:a5:
81:d8:1b:57:e1:a9:30:79:be:31:8d:01:ef:87:20:
8d:be:6b:a8:99:a9:65:70:2d:7e:ee:5e:02:a8:f1:
16:58:21:14:77:b9:5c:89:b3:20:30:1e:10:27:82:
31:70:01:76:0d:81:74:3a:ce:09:e4:94:f7:d0:a5:
41:f0:1f:88:eb:86:03:61:ce:77:e0:4b:18:8a:ee:
ed:f3:51:86:64:5c:f3:14:cf:7a:80:5e:a1:b9:2d:
ad:7b:46:a0:9c:2f:47:e6:41:b1:75:97:3a:b1:13:
9a:f6:ee:4c:18:97:dc:66:82:8d:ba:2d:eb:a3:e3:
b6:5b:94:6b:ef:2d:75:bb:8f:8b:05:1b:f6:35:2c:
c7:c6:0f:2c:77:70:b4:f3:98:d6:5f:94:eb:4f:13:
7d:78:81:4a:33:16:16:10:df:b6:9c:51:1f:28:34:
60:a7:c9:ee:29:e0:25:ea:2c:11:d0:c0:58:4c:0f:
4f:d0:14:8d:88:f7:cc:08:eb:6e:94:96:5c:67:2a:
ff:06:4d:71:05:b4:d6:a4:c9:2f:91:62:f5:16:20:
ec:1e:b8:e8:0e:69:34:6b:d8:2b:45:df:c0:74:62:
12:e9:63:bc:fe:05:a4:cc:56:c8:dc:c0:11:0a:f6:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:C7:AD:B0:53:EF:54:5F:7D:9D:00:D4:8C:CB:73:74:2C:62:36
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:24:d8:23:ea:2b:14:02:ca:2c:96:1c:ff:6c:35:d1:b2:10:
30:9d:e8:c2:78:77:45:86:c0:f3:84:b8:19:77:f4:c2:aa:79:
38:6f:e9:75:88:35:55:69:81:f6:9f:3a:18:d6:a6:9c:4c:8a:
6c:3c:fb:3f:eb:c2:a4:6d:58:9e:fb:1a:df:1a:96:e9:45:f2:
07:91:bb:9f:25:7a:c2:30:d4:b2:a6:63:de:a0:4d:a4:65:c8:
b1:c6:20:de:ac:76:2c:51:98:07:54:64:e8:b3:2e:71:24:41:
61:69:94:1d:b0:2d:37:27:d3:43:ba:42:92:24:18:4d:c8:b3:
2c:5e:1f:b2:92:f0:56:a6:ec:8b:54:3b:a5:29:2e:c3:49:0d:
11:e4:e8:b7:61:06:80:67:d4:52:93:a1:d4:d2:b9:3f:57:d0:
db:c1:02:51:63:c8:07:ce:85:1e:70:56:b7:fb:df:7f:22:e9:
bf:d7:43:f9:fc:95:ba:6d:0f:b5:3f:f5:ca:2f:ba:da:38:a0:
0a:ef:c4:19:9f:cb:98:f5:72:f3:a7:e2:93:1b:5b:68:77:45:
e7:df:75:56:b8:ec:85:ce:ce:b3:32:bb:61:78:0b:80:1b:b3:
c4:85:bf:78:91:53:53:73:85:28:e1:2b:a9:ba:4d:3c:31:80:
c4:10:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:54 2026 by rpki-client