Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: qcvHvIRB74f5qNeg57+EVZIJFaKPagsKjr0K6Np0DWs=
Subject key identifier: 3A:62:80:9E:2B:16:B3:3B:2A:06:43:49:E9:A1:1F:88:78:3D:CA:33
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 019D382E298E5414378268573DCB09B620D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: bAAPAiE+ZqqaFxoAy9Ou4BzS2rYggWMarCdEr/gKpdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:29:8e:54:14:37:82:68:57:3d:cb:09:b6:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=3a62809e2b16b33b2a064349e9a11f88783dca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:9b:e4:ea:94:d1:96:8f:4e:ac:1e:13:ee:
f8:16:44:0d:e4:27:a8:46:06:6d:0e:08:39:f9:69:
8c:71:89:5e:27:e2:fd:c5:6b:1b:b1:9a:4a:33:7d:
d9:b8:56:49:47:06:9b:01:ad:9b:73:dc:39:79:70:
05:ed:75:c3:1e:b7:db:0e:29:1c:22:53:4d:ac:23:
ff:80:39:c7:e5:d1:34:3d:04:0a:25:c3:f1:b7:52:
15:d1:4e:85:1a:43:50:f6:f3:8e:20:99:f1:96:e1:
d5:da:6e:3b:5a:8d:45:45:1d:7c:e6:87:dd:c0:9a:
32:9f:94:91:1c:41:fa:8e:8e:56:a8:0a:06:2c:c2:
72:21:ca:f7:66:59:4b:0d:9a:c0:d3:6a:50:90:10:
5b:dd:c6:d4:41:17:63:07:9b:cd:cb:f9:84:71:ae:
09:23:39:4a:06:07:c6:48:c0:2f:c0:f9:bc:13:75:
84:ce:6f:47:96:34:6a:41:71:14:d1:3d:7c:78:46:
12:6f:25:f1:30:25:cb:40:0a:22:35:19:32:b5:9d:
42:99:7b:dc:ab:2c:f0:51:ed:b9:30:17:62:03:97:
27:cf:98:7e:e4:3e:61:29:fa:07:96:ec:9f:5e:7f:
7d:f9:c5:0e:a2:0c:b2:42:d8:80:81:5f:64:e1:66:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:80:9E:2B:16:B3:3B:2A:06:43:49:E9:A1:1F:88:78:3D:CA:33
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:aa:8e:36:24:c1:ce:bf:04:ff:c2:cf:17:8e:80:94:3d:5e:
55:77:81:b2:f7:43:89:c0:a8:da:6e:3d:f3:c9:23:2d:30:6e:
c0:68:ef:60:46:7b:9a:fb:43:1a:e7:40:86:3b:b3:88:3c:0f:
05:de:2b:12:6a:12:79:d6:74:ae:45:65:79:79:cf:f7:7f:fe:
fe:d5:c8:d7:03:b0:d4:b4:44:3a:dd:09:6c:f9:f9:42:63:28:
63:8e:3d:2c:18:e2:ff:8a:cd:68:ce:f0:d0:52:cf:03:47:87:
36:6c:02:08:34:7c:ce:55:1b:40:99:36:e7:e6:d3:4a:13:de:
70:1e:46:d7:33:29:aa:05:65:f8:8f:c7:62:3d:59:18:23:bc:
b7:ee:f5:51:37:f0:16:7e:91:d1:93:e8:0d:a3:f5:6b:86:d0:
3b:40:20:8e:0c:e8:58:1e:33:2e:03:85:02:e4:e3:0a:4c:43:
49:3f:cd:5e:5e:7c:79:e6:d2:0a:82:5f:dc:0c:50:07:13:28:
e4:d5:13:fc:b6:48:9c:7a:11:0c:23:55:9f:93:20:86:91:87:
ec:6c:95:c1:0f:9e:c9:ec:2e:38:5e:21:7f:c9:f4:49:74:a7:
27:a5:2e:47:5f:12:4a:db:02:2a:55:a4:95:ca:b2:0a:25:25:
64:26:6d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LimOVBQ3gmhXPcsJtiDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTAwODE1ZDJiZDA0MWRjYzBlY2UwNjc2NTZiZTVlNmVi
MTJiNjIwHhcNMjYwMzI5MDYwMDQyWhcNMjYwMzMwMDYwMDQyWjAzMTEwLwYDVQQD
EygzYTYyODA5ZTJiMTZiMzNiMmEwNjQzNDllOWExMWY4ODc4M2RjYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JWb5OqU0ZaPTqweE+74FkQN5Ceo
RgZtDgg5+WmMcYleJ+L9xWsbsZpKM33ZuFZJRwabAa2bc9w5eXAF7XXDHrfbDikc
IlNNrCP/gDnH5dE0PQQKJcPxt1IV0U6FGkNQ9vOOIJnxluHV2m47Wo1FRR185ofd
wJoyn5SRHEH6jo5WqAoGLMJyIcr3ZllLDZrA02pQkBBb3cbUQRdjB5vNy/mEca4J
IzlKBgfGSMAvwPm8E3WEzm9HljRqQXEU0T18eEYSbyXxMCXLQAoiNRkytZ1CmXvc
qyzwUe25MBdiA5cnz5h+5D5hKfoHluyfXn99+cUOogyyQtiAgV9k4WaecQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpigJ4rFrM7KgZDSemhH4h4PcozMB8GA1UdIwQY
MBaAFJrgCBXSvQQdzA7OBnZWvl5usStiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTIt
ZjQ4NTFkYTg3NjNkLzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTItZjQ4NTFkYTg3NjNk
LzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqqONiTB
zr8E/8LPF46AlD1eVXeBsvdDicCo2m4988kjLTBuwGjvYEZ7mvtDGudAhjuziDwP
Bd4rEmoSedZ0rkVleXnP93/+/tXI1wOw1LREOt0JbPn5QmMoY449LBji/4rNaM7w
0FLPA0eHNmwCCDR8zlUbQJk25+bTShPecB5G1zMpqgVl+I/HYj1ZGCO8t+71UTfw
Fn6R0ZPoDaP1a4bQO0AgjgzoWB4zLgOFAuTjCkxDST/NXl58eebSCoJf3AxQBxMo
5NUT/LZInHoRDCNVn5MghpGH7GyVwQ+eyewuOF4hf8n0SXSnJ6UuR18SStsCKlWk
lcqyCiUlZCZtdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:22 2026 by rpki-client