Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: dfTf9alBDiITClUwc88ySLnnC9jJA7vUR53Wh7U7kjA=
Subject key identifier: 86:2B:57:2B:90:E6:AA:2D:8D:01:68:77:E0:B5:34:C0:5B:D3:8D:37
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 019D37F6ECAD1B6F190C535662EC0C4CB85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: m4WLKOlbz8lVKm5BvTsky8FjAURFxtgTE1Fbns469eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ec:ad:1b:6f:19:0c:53:56:62:ec:0c:4c:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=862b572b90e6aa2d8d016877e0b534c05bd38d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:c7:2b:44:5a:8f:94:39:0e:f5:f3:d8:df:
ab:08:bb:42:e6:6d:f1:84:16:f8:8d:b1:93:2b:28:
61:69:a3:15:52:bd:b9:b9:03:5c:37:b8:85:40:17:
1e:01:5d:d7:64:58:58:87:5e:0d:33:64:a0:93:4a:
86:70:f8:bf:e6:c3:10:8d:d0:20:d6:6e:59:a8:1c:
7f:7b:ee:e9:d0:b2:f6:0c:b8:e2:89:0e:c1:6a:d2:
2c:01:f2:74:c2:8a:10:e5:02:20:f9:3d:d8:08:2a:
46:73:0f:f3:f6:39:65:1d:94:25:6a:cd:18:e5:5e:
95:f7:93:09:cd:33:29:de:f3:ef:b0:e1:3e:ac:5c:
cc:4a:f2:35:9d:3d:6f:76:1c:32:9c:79:03:86:8f:
c8:c6:3d:e2:8a:cf:e6:39:fa:6e:63:bf:2d:5f:f8:
ef:46:c2:5b:f4:a5:a5:68:50:e3:2e:1b:e9:d6:8f:
50:d4:71:f9:2f:e8:8b:4f:7c:3f:9e:5a:c5:ed:00:
5a:e8:3f:5d:96:6a:16:56:89:96:2e:b9:82:59:94:
a4:ee:06:28:ec:f1:2b:47:36:5d:91:bb:52:e5:46:
71:36:8f:31:8d:3c:f9:76:0f:fa:17:99:cb:92:0a:
7b:6b:6d:e7:f9:db:56:61:13:b1:ea:0d:e4:da:fd:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:57:2B:90:E6:AA:2D:8D:01:68:77:E0:B5:34:C0:5B:D3:8D:37
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:ee:98:5d:81:f9:2e:c4:84:01:ed:8f:57:c4:33:a5:59:
9e:a6:e9:16:d5:e1:1a:36:32:ee:ff:09:25:74:14:58:e8:86:
c3:1d:21:a6:f0:7b:73:31:80:c7:0d:ac:9d:bb:6f:63:d4:bd:
1d:3c:16:f6:eb:6a:42:63:11:7d:58:6b:cd:0d:61:a2:02:2f:
cd:89:7e:5e:21:61:70:84:6f:5d:45:b6:a6:20:09:77:83:62:
d3:f5:2c:09:23:8d:c0:5f:9e:4e:f9:c3:df:d9:c3:d7:01:c8:
2d:0c:ba:f4:ba:94:f2:df:64:bd:e1:3b:92:58:06:7a:32:d5:
1d:3a:8e:8d:e4:d6:7e:8b:4e:b0:a4:ec:14:5e:f5:f9:8a:47:
0c:63:4d:c2:30:a6:d6:38:00:36:31:5a:b0:9e:47:85:0d:f6:
9e:6a:4f:ee:4d:a2:59:5d:d8:13:6f:62:58:4d:8d:7e:71:2d:
ea:e6:54:ad:a2:12:9c:7a:8a:ed:5a:44:0e:3d:2e:9d:07:6d:
11:ff:6b:82:52:ac:f1:dd:67:da:94:68:ce:53:29:a9:51:34:
05:b3:c5:e6:c5:7d:49:06:2a:62:47:3c:76:fa:18:f4:bf:31:
45:d4:8c:5c:dc:a6:af:96:fe:41:d2:de:24:58:21:9f:e9:2d:
e3:fa:ca:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039uytG28ZDFNWYuwMTLhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy
MGI4MzkwHhcNMjYwMzI5MDUwMDIyWhcNMjYwMzMwMDUwMDIyWjAzMTEwLwYDVQQD
Eyg4NjJiNTcyYjkwZTZhYTJkOGQwMTY4NzdlMGI1MzRjMDViZDM4ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVfHK0Raj5Q5DvXz2N+rCLtC5m3x
hBb4jbGTKyhhaaMVUr25uQNcN7iFQBceAV3XZFhYh14NM2Sgk0qGcPi/5sMQjdAg
1m5ZqBx/e+7p0LL2DLjiiQ7BatIsAfJ0wooQ5QIg+T3YCCpGcw/z9jllHZQlas0Y
5V6V95MJzTMp3vPvsOE+rFzMSvI1nT1vdhwynHkDho/Ixj3iis/mOfpuY78tX/jv
RsJb9KWlaFDjLhvp1o9Q1HH5L+iLT3w/nlrF7QBa6D9dlmoWVomWLrmCWZSk7gYo
7PErRzZdkbtS5UZxNo8xjTz5dg/6F5nLkgp7a23n+dtWYROx6g3k2v2UUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYrVyuQ5qotjQFod+C1NMBb0403MB8GA1UdIwQY
MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt
Mzg5ZjkyMTk1YmViLzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi
LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4XumF2B
+S7EhAHtj1fEM6VZnqbpFtXhGjYy7v8JJXQUWOiGwx0hpvB7czGAxw2snbtvY9S9
HTwW9utqQmMRfVhrzQ1hogIvzYl+XiFhcIRvXUW2piAJd4Ni0/UsCSONwF+eTvnD
39nD1wHILQy69LqU8t9kveE7klgGejLVHTqOjeTWfotOsKTsFF71+YpHDGNNwjCm
1jgANjFasJ5HhQ32nmpP7k2iWV3YE29iWE2NfnEt6uZUraISnHqK7VpEDj0unQdt
Ef9rglKs8d1n2pRozlMpqVE0BbPF5sV9SQYqYkc8dvoY9L8xRdSMXNymr5b+QdLe
JFghn+kt4/rK5A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:19 2026 by rpki-client