
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File: MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier: dq0xg/bV8vMAoHxJnxuseGvaYRcD5qLJhh+X/MjlVWs=
Subject key identifier: A0:68:1A:A7:1E:F7:79:F9:76:2B:81:49:F8:16:0E:81:07:3C:FD:7D
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer: /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial: 019D386565EC70C5E0037BC40CA66D1016B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: umfBSXP1uPNNgLTv1+hwxL4OpEDsR+ILgAFJAioVIAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:65:ec:70:c5:e0:03:7b:c4:0c:a6:6d:10:16:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=a0681aa71ef779f9762b8149f8160e81073cfd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:83:d1:25:7f:ce:62:04:9d:fd:ff:38:62:
6d:0e:41:af:82:f7:5e:4b:82:ea:9e:f4:d2:cc:3b:
73:38:a0:de:76:06:59:22:3d:b3:04:0c:99:a9:0d:
fb:c8:8d:17:ab:a3:87:05:16:70:22:cd:1d:fa:e5:
46:4c:90:92:c6:b1:cb:bd:51:e8:e9:92:b9:74:dc:
5e:3a:4f:89:1f:f0:97:f6:78:94:75:3f:bf:07:3b:
5a:e8:6b:02:b5:30:b2:a3:a2:4e:3f:11:3f:ce:38:
89:f2:4e:0f:c4:01:0a:1f:87:b3:7a:49:c5:b9:7c:
f8:be:df:a4:82:2c:25:6b:08:6e:7e:d4:b6:28:21:
f8:38:be:9a:b9:b8:c8:c0:74:65:e9:f2:df:a3:9e:
19:90:d3:3c:86:bb:7d:9c:76:08:d7:f9:a3:fd:8f:
d4:4c:2f:02:40:42:25:06:33:10:b6:c5:da:e7:82:
65:1f:42:91:15:d7:46:8c:b4:a6:b7:63:43:b1:47:
d2:f5:2b:b7:40:07:da:33:ab:b5:14:5e:d3:93:85:
09:e7:4a:35:eb:08:bf:aa:b9:e6:9c:3f:8b:8b:77:
8c:82:a2:a6:38:d0:6a:9f:ec:44:3e:b5:de:f1:c7:
9e:9b:96:ff:6b:b7:af:8b:50:66:75:eb:41:fb:31:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:68:1A:A7:1E:F7:79:F9:76:2B:81:49:F8:16:0E:81:07:3C:FD:7D
X509v3 Authority Key Identifier:
keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2d:3a:c8:ee:b5:a2:4b:64:80:89:b0:50:4c:55:be:3a:8c:
dd:40:1f:c4:5c:15:33:3c:43:13:71:36:ea:1e:a2:27:e4:9f:
25:56:b4:70:5e:65:61:19:d6:43:a8:c4:53:1c:4c:3d:59:20:
e1:7b:5e:64:d9:de:66:24:ad:bd:0f:d8:83:2f:44:dd:89:79:
a0:36:72:e7:e3:47:3c:30:c3:65:fa:a8:a4:c9:af:81:d8:e5:
d7:8d:ea:28:14:03:7a:89:18:fc:7e:88:ef:10:40:e1:56:16:
d7:3b:7d:ff:a1:7c:68:d1:d6:f9:ab:e8:d0:30:17:2e:dd:a4:
e0:40:a0:fd:88:8e:12:a5:6b:49:6b:60:7e:82:a1:6e:2e:69:
e6:8b:11:04:9e:13:ce:1f:ed:6a:b9:12:c3:84:be:10:3d:b3:
07:30:6d:53:d8:c6:fb:46:56:1f:5f:bc:c2:9d:79:c5:61:65:
ef:1a:20:4d:30:33:7a:12:93:27:b3:e5:ee:b0:e1:62:a9:49:
af:78:6c:1b:fe:30:e7:5f:2c:67:19:e4:10:46:42:5d:79:e5:
08:5a:bf:89:18:75:bf:c8:08:fe:8a:95:95:6b:6d:96:a0:fb:
ab:e5:89:f0:a2:87:8f:5c:ad:11:38:0b:77:28:da:34:32:cf:
fd:89:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:46 2026 by rpki-client