Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier: 5PmgKyscFf83+O24w0A8QtIJMNLjIEiicpud2uToY4Q=
Subject key identifier: A1:7D:14:25:EF:C9:20:38:1D:84:F7:EF:B2:20:F5:DF:93:E7:CB:C0
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial: 019D386587BDDE1D9AB3D558907ECEE24A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number: 1873
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: alIVB3DRNeac3-KBgtiTOAlVqYg.roa (hash: 5rWQXWfQK4PnnDUyWE3w/iefHP9zcHf0QTSdTcrqmsE=)
2: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: yfa24qP4/4N9iyTU2uQEKLTpLHHnLt7Eu1mF+BOVDbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:87:bd:de:1d:9a:b3:d5:58:90:7e:ce:e2:4a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=a17d1425efc920381d84f7efb220f5df93e7cbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:33:fe:60:a9:5c:0c:c7:63:ad:5a:8a:1b:
85:86:a5:73:7b:cd:a9:1d:d3:ac:ee:f8:97:12:32:
cc:e0:3d:73:4c:3a:1b:25:c9:16:98:38:00:75:1b:
5f:77:0f:40:89:26:da:c5:b8:eb:84:7d:ea:72:c4:
5a:0e:ab:89:10:c9:b7:7c:14:ce:fe:bb:ff:76:76:
be:a0:c6:c1:93:5e:2d:80:76:11:ab:db:99:b4:06:
fe:bd:a6:c5:61:64:ce:0d:f4:05:01:d2:0c:6c:43:
13:99:af:3f:ff:2e:b2:50:b3:81:05:3f:1f:a7:c7:
66:c4:4a:c8:a7:c9:67:4c:71:fd:cc:41:1b:aa:91:
95:45:18:3b:be:62:c3:b2:cc:c4:35:f0:48:87:7b:
15:0d:bd:26:79:5a:3b:8b:ad:56:8c:44:84:cb:d8:
a4:15:9f:1f:e2:a6:86:af:5d:8c:37:6b:08:0c:df:
35:60:83:1a:3b:64:ee:1a:26:55:92:53:a3:83:db:
20:e0:e5:ca:63:9b:f3:c2:7c:4d:21:8e:ab:dd:ce:
f2:0f:e7:46:bb:dd:06:6e:58:0d:1c:d5:64:79:8a:
21:e7:e6:6e:31:da:22:30:6c:5d:4f:02:79:5f:32:
db:fe:cd:6c:2a:34:32:6a:cc:a3:8b:c5:ea:b0:6c:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:14:25:EF:C9:20:38:1D:84:F7:EF:B2:20:F5:DF:93:E7:CB:C0
X509v3 Authority Key Identifier:
keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:9b:57:da:12:d1:e7:45:13:84:a9:2e:a8:1d:db:b4:76:
22:1f:c2:5a:30:a6:6f:15:15:07:e9:77:81:d5:88:97:1b:6a:
a6:23:7f:c9:73:1b:a5:fc:68:af:93:42:39:c8:4e:b5:38:64:
53:ab:43:3c:0b:22:9d:b6:34:e4:6d:8a:62:26:49:75:7e:ab:
5f:f7:61:37:47:28:37:ba:e7:87:2f:fd:a3:94:64:66:46:72:
ac:14:2e:1d:07:e5:61:ad:4b:77:f7:13:c5:81:b7:ff:00:2f:
ae:bf:00:83:35:e3:94:e8:29:7f:25:d6:90:62:7a:3f:e2:c9:
2b:c8:3c:5b:17:24:48:f2:d6:79:74:c5:52:3c:f0:50:69:96:
97:4b:f4:43:4e:80:13:ac:13:66:57:53:6f:71:56:c7:81:e2:
f7:42:5c:7c:00:56:9e:4f:a1:ed:5b:42:bc:37:18:d1:c6:a5:
19:72:48:53:d6:16:bd:60:8a:ac:b6:09:8f:52:63:c6:30:e5:
e8:27:16:65:b9:84:20:c1:61:14:0f:07:b1:5f:4c:f2:12:48:
ee:27:03:af:a1:98:5d:6e:25:bb:66:18:8b:67:3a:c1:98:78:
3f:76:d8:d3:9d:e1:43:e0:6a:52:32:03:d8:bb:34:1f:dd:c3:
7a:56:b8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYe93h2as9VYkH7O4korMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NGFhZGVmNzA5YmUzN2I5Y2NkNDJjYzJiOGM3MzJjMzk3
MTUwZmEwHhcNMjYwMzI5MDcwMTExWhcNMjYwMzMwMDcwMTExWjAzMTEwLwYDVQQD
EyhhMTdkMTQyNWVmYzkyMDM4MWQ4NGY3ZWZiMjIwZjVkZjkzZTdjYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5kz/mCpXAzHY61aihuFhqVze82p
HdOs7viXEjLM4D1zTDobJckWmDgAdRtfdw9AiSbaxbjrhH3qcsRaDquJEMm3fBTO
/rv/dna+oMbBk14tgHYRq9uZtAb+vabFYWTODfQFAdIMbEMTma8//y6yULOBBT8f
p8dmxErIp8lnTHH9zEEbqpGVRRg7vmLDsszENfBIh3sVDb0meVo7i61WjESEy9ik
FZ8f4qaGr12MN2sIDN81YIMaO2TuGiZVklOjg9sg4OXKY5vzwnxNIY6r3c7yD+dG
u90GblgNHNVkeYoh5+ZuMdoiMGxdTwJ5XzLb/s1sKjQyasyji8XqsGw9wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF9FCXvySA4HYT377Ig9d+T58vAMB8GA1UdIwQY
MBaAFJlKre9wm+N7nM1CzCuMcyw5cVD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQt
YWYzZTdkNDI5NjhkLzEvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQtYWYzZTdkNDI5Njhk
LzEvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieabV9oS
0edFE4SpLqgd27R2Ih/CWjCmbxUVB+l3gdWIlxtqpiN/yXMbpfxor5NCOchOtThk
U6tDPAsinbY05G2KYiZJdX6rX/dhN0coN7rnhy/9o5RkZkZyrBQuHQflYa1Ld/cT
xYG3/wAvrr8AgzXjlOgpfyXWkGJ6P+LJK8g8WxckSPLWeXTFUjzwUGmWl0v0Q06A
E6wTZldTb3FWx4Hi90JcfABWnk+h7VtCvDcY0calGXJIU9YWvWCKrLYJj1JjxjDl
6CcWZbmEIMFhFA8HsV9M8hJI7icDr6GYXW4lu2YYi2c6wZh4P3bY053hQ+BqUjID
2Ls0H93Dela41w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:45 2026 by rpki-client