Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: zg5C6shgvV7LPYDDR0T0k5zrcxGstGweVizhCR8WCnk=
Subject key identifier: 80:8C:C3:0B:65:03:4A:46:03:8E:94:44:8B:6A:FA:E9:A8:BD:A5:DA
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 019D37F6EBE21A0159FC5099C20BA82888D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: i3LjlTv0cqfO8U47iFQcI5yeNfw.roa (hash: NUcR9PJxIM36308L6r/104nGPX7janujjExA79MiVJY=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: hV/f7XIeDLTxPeAVewoShKbrHQmGR4VvyWg0BNjv1o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:eb:e2:1a:01:59:fc:50:99:c2:0b:a8:28:88:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=808cc30b65034a46038e94448b6afae9a8bda5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:17:2c:19:b3:f2:e1:8e:15:4f:68:55:d9:
d6:9e:2f:8e:1e:44:01:cb:3b:c0:05:64:34:4c:fd:
6a:25:ec:76:70:fd:6d:52:d9:62:94:9f:e9:ea:03:
14:f8:43:96:2c:c0:d5:08:5c:90:e5:b0:80:e5:43:
1f:c7:94:01:a0:8a:7d:be:34:3d:d6:c5:81:06:03:
6d:b8:b8:3e:28:57:b0:40:93:f5:b0:dc:a2:b3:04:
4b:fe:f0:10:ae:e8:6a:6b:47:e1:6a:34:db:e7:47:
c7:82:55:ab:f3:62:30:e6:bd:58:93:8a:b9:54:d0:
15:9d:00:f8:34:0d:f6:3f:ff:e1:8b:4e:96:b3:c1:
99:e8:ec:cd:ac:50:2b:cb:f9:83:6a:38:8f:9b:a8:
16:45:8b:97:95:bf:9d:88:5c:53:11:18:1a:2d:e5:
be:42:02:05:3b:bf:83:35:3b:5a:eb:54:50:62:64:
e9:35:d7:2e:47:32:f6:73:5d:43:48:4e:da:d8:e3:
e6:41:2b:f1:ee:35:fd:95:c8:b9:f4:ee:e8:6b:68:
68:52:18:b0:99:d5:75:5c:4a:7a:c7:e9:f1:e8:ae:
0c:83:68:b6:11:54:4e:70:25:4a:80:4d:cb:4c:2f:
70:20:8d:b4:26:4f:ea:b6:f3:a1:0d:71:e5:26:70:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:C3:0B:65:03:4A:46:03:8E:94:44:8B:6A:FA:E9:A8:BD:A5:DA
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:1f:19:d9:b0:68:ae:02:86:10:99:78:bb:5b:5d:57:a1:
b1:ed:56:07:a4:fa:11:c3:cf:99:e5:40:e3:b5:e0:f4:32:08:
22:f1:50:32:e6:e9:54:dc:b6:86:e0:1f:97:d8:03:e8:be:e0:
2f:97:b1:30:59:dd:95:83:0a:d8:08:1d:64:70:73:98:79:14:
25:ef:19:eb:6c:25:42:bf:8e:e7:97:9d:9b:e6:df:eb:2c:40:
ef:74:52:75:a7:39:b0:57:87:99:62:b8:9a:d9:46:f4:4b:ce:
06:27:59:c3:b0:41:38:d9:ce:42:a3:48:56:9d:3f:ac:62:79:
a9:26:5b:cd:4e:28:8d:80:96:12:70:6b:66:68:94:19:c4:e5:
68:98:70:d2:ba:05:c7:7e:7e:a9:67:f8:80:c2:56:86:b8:2d:
49:22:84:a5:60:77:24:44:80:34:70:a7:83:2c:dc:78:ae:34:
df:f0:98:17:82:eb:03:85:7a:f4:22:28:f0:50:be:57:c1:e0:
cf:de:44:8b:99:bb:fd:e2:01:53:68:7a:9b:a2:a6:d3:e3:10:
b2:b3:d1:df:ce:dc:7b:9c:3d:b6:0d:7c:29:2d:09:5d:2b:68:
ed:a6:9f:7a:0c:37:48:62:c2:10:25:ad:67:08:9c:4c:42:30:
c5:0f:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:45 2026 by rpki-client