Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: AVf/hrtVtdocn2FgQRXPM1MS4z1u4WeJseArGOXf7RU=
Subject key identifier: E2:0E:1F:65:52:A5:F2:5E:83:52:39:8A:60:64:C5:54:28:72:FA:FA
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 019EB8B4664F42DA5AA8AB5332FA2B18722D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 1952
Signing time: Thu 11 Jun 2026 22:01:30 +0000
Manifest this update: Thu 11 Jun 2026 22:01:30 +0000
Manifest next update: Fri 12 Jun 2026 22:01:30 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: ar9l0qaU0vdm21PLU3WCgvIwXGoxweJc03LFrOtUxlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:66:4f:42:da:5a:a8:ab:53:32:fa:2b:18:72:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Jun 11 22:01:30 2026 GMT
Not After : Jun 12 22:01:30 2026 GMT
Subject: CN=e20e1f6552a5f25e8352398a6064c5542872fafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:50:6d:d7:a4:3a:17:10:5f:d0:7e:6a:6b:
83:22:df:b2:82:2e:b6:e0:25:7d:95:83:3a:85:7c:
92:1e:01:4d:bf:e2:6b:f9:6f:56:73:d2:4a:e6:27:
0e:bb:81:ec:04:70:57:4d:b8:7a:4d:c6:fe:f5:33:
3c:83:54:99:7e:5e:f5:cf:ce:d6:2a:2f:8e:02:e7:
dc:2b:6e:d6:34:d8:21:dd:1a:d9:9c:30:cd:db:2c:
77:57:41:8f:d2:1a:c1:78:38:41:56:ba:05:31:a1:
83:68:82:e7:51:7e:42:b2:e5:e9:f8:ad:84:af:cc:
db:2e:2d:3f:ee:44:fe:14:08:62:9e:f4:fc:b3:5d:
13:56:56:ee:45:85:32:ec:c0:3c:18:6b:6f:73:26:
a7:99:c4:21:3c:b6:91:c7:af:2d:66:30:e4:dc:9f:
c1:4f:08:f6:5f:6d:dc:5a:df:c4:7a:e0:2c:c4:57:
39:3c:ff:ea:01:c3:aa:11:8c:4e:22:95:a2:da:1e:
c2:ed:18:f9:35:1b:75:44:35:08:ac:8e:58:72:c0:
b1:c4:b6:8a:9c:37:75:f3:a3:ce:af:94:82:b7:d2:
ec:a2:a5:5b:d2:40:99:f3:19:ef:91:3b:0c:9e:d0:
f2:2d:f8:4d:d8:13:e1:7f:17:9f:ab:f4:4a:e8:4f:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0E:1F:65:52:A5:F2:5E:83:52:39:8A:60:64:C5:54:28:72:FA:FA
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:60:6a:6f:34:61:77:a1:12:73:0b:1e:75:ec:45:64:b6:22:
01:e6:ac:c4:32:73:6c:77:d8:db:e2:6f:d3:99:2c:4e:2b:e9:
1f:0c:1a:b4:b7:a3:03:a1:c4:3e:7c:34:32:2b:14:83:f0:0a:
2e:d4:2c:58:64:e6:3d:55:39:32:0f:a1:f5:ec:0d:66:c2:16:
8f:09:09:f3:fc:23:2b:fd:4e:3e:dc:c7:b4:6e:a8:9f:34:48:
72:95:09:8b:3a:42:d2:bd:46:a5:ed:e2:20:cd:7f:b3:3f:c1:
28:b0:27:dd:78:32:12:1c:29:f3:b0:84:dd:5f:99:30:68:bf:
14:c4:5c:58:d7:98:f9:25:e4:8e:71:50:cb:ca:b8:8e:64:8e:
1e:00:49:4b:2c:8c:20:50:be:e8:17:3a:cf:26:77:77:39:f9:
d7:28:e6:0b:f0:52:1c:69:9a:c5:ca:3f:b9:45:04:eb:20:44:
e2:80:b5:87:35:ee:7f:cc:34:74:c1:b6:66:aa:db:9a:e9:44:
f0:dc:1e:9b:b8:c0:c3:2a:36:dc:10:ea:ef:fc:35:c2:46:02:
ba:3e:50:fd:6a:02:09:c9:bd:11:ee:e7:73:f4:8d:d2:da:85:
a2:54:c8:2f:2a:79:a6:fc:b1:f6:48:7f:92:76:df:ed:d4:74:
67:6a:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:17 2026 by rpki-client