Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: O1Y5NDbxCK61MJe5cxDOcP2yoOHUwhVjOFqAVZG4VoE=
Subject key identifier: 01:25:19:08:7D:7C:BC:12:77:F9:FB:E4:B2:E7:36:8E:AA:DA:37:1C
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 019D3978234210DDD7BB58586C9F2E40F2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0E01
Signing time: Sun 29 Mar 2026 12:01:07 +0000
Manifest this update: Sun 29 Mar 2026 12:01:07 +0000
Manifest next update: Mon 30 Mar 2026 12:01:07 +0000
Files and hashes: 1: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: bjc8ndN/jHwbx1MPvK3b5BK1J7MEVG/SxXiu6Ao1RVc=)
2: pMXoRrm1A-T70xPjALrZ4oMq61E.roa (hash: FsTM7joUHNqdKecmC2zVhM+EhuHDUQROQu4Azrsbbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:23:42:10:dd:d7:bb:58:58:6c:9f:2e:40:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Mar 29 12:01:07 2026 GMT
Not After : Mar 30 12:01:07 2026 GMT
Subject: CN=012519087d7cbc1277f9fbe4b2e7368eaada371c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:3d:c6:11:6a:c7:6c:58:d7:00:a3:c9:f9:
db:49:b6:0a:a8:1c:13:0f:6e:db:62:b3:5d:eb:e7:
e8:29:81:f8:17:92:1f:39:7c:37:37:dc:13:cb:9c:
f1:fb:05:60:e3:37:8a:42:9d:7d:7c:e9:0f:e4:52:
90:72:6d:97:68:8e:c1:8e:29:59:8e:6e:96:d1:d2:
27:44:5e:51:25:7d:f6:3b:ad:70:d6:4f:51:55:55:
72:f1:09:ca:9a:6d:a7:3d:f8:06:02:3f:32:d5:3c:
1c:93:4e:bb:8f:e4:6f:3d:a3:e4:76:d3:8e:f5:40:
3c:53:28:b9:94:25:6f:5b:8c:2e:d8:1f:54:a4:b6:
80:f8:70:92:ea:16:bf:ab:8e:e0:0a:af:cf:cf:de:
86:f3:d6:06:fa:a8:b8:2d:2f:24:f6:40:38:85:26:
9d:c7:bf:6b:ce:d6:a5:57:af:1d:c7:2d:fd:e7:fa:
b6:dc:41:e7:8b:41:a4:b8:30:97:a6:fc:dd:4f:c7:
d4:d1:65:a2:ef:6e:b9:03:86:e3:d1:53:80:c8:da:
c1:9b:fe:35:b6:f0:68:df:92:ee:ee:27:37:b4:f9:
b9:63:35:9d:98:c2:2e:9c:36:52:d8:0f:c1:47:48:
28:36:90:37:a9:50:1c:b5:c6:04:bc:2e:cc:9d:9d:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:19:08:7D:7C:BC:12:77:F9:FB:E4:B2:E7:36:8E:AA:DA:37:1C
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:39:f5:4a:98:a9:46:74:fe:07:dd:ef:93:82:72:d9:8a:92:
84:43:9c:fe:75:75:4c:63:23:f4:d4:8a:42:7b:35:ad:5a:07:
8c:d1:e7:95:60:3c:f5:da:0b:4a:a1:03:4a:56:9e:c4:d1:00:
5d:a3:e0:bb:ad:18:a9:be:b7:f5:8f:14:9e:fc:c0:9d:82:08:
02:d8:b7:81:12:df:dc:25:c8:80:22:1c:b9:94:e6:75:f0:a1:
44:e2:f6:a1:68:2b:5d:63:e1:d2:37:b5:d9:f5:e6:b2:28:a9:
30:f9:10:4a:9d:8c:83:dc:4f:4e:55:61:04:47:df:de:c3:07:
96:a8:19:50:92:84:ac:28:89:de:9b:2a:bf:cb:ac:b0:86:2d:
4f:c0:d6:e3:a5:c8:72:ef:2c:af:ca:8a:0f:3e:b4:aa:85:d4:
9f:d6:a2:27:a1:7d:38:f6:a4:dd:d2:8e:6d:75:5a:20:04:37:
36:55:82:df:b8:19:bc:90:e7:f1:5b:34:44:32:d8:26:3a:9f:
d0:c4:f1:5a:1d:0f:bd:4d:ee:f1:10:c4:72:a2:4f:d8:e8:8a:
9e:3f:f8:a1:fa:eb:2b:be:aa:bc:15:7b:03:04:bc:8b:23:6e:
3c:18:03:92:c7:a0:0e:36:37:ff:32:a7:36:15:65:94:3c:42:
f1:df:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:57 2026 by rpki-client