Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: 6C3KlT0iYmbs/J2jdOVTNoejWdB7HjQhd9xeP9pYL6U=
Subject key identifier: AF:0E:C9:8C:72:7B:F9:47:17:D2:5C:CA:8F:9D:3A:00:E9:C7:90:D0
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 019D3941B6A81BCC13BC2DF1E74ED6FAFEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:41 +0000
Manifest this update: Sun 29 Mar 2026 11:01:41 +0000
Manifest next update: Mon 30 Mar 2026 11:01:41 +0000
Files and hashes: 1: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: G8hUJnSADH+wrJh0tQLP1IdWx69fLJ7Zn0bv88/Xg/8=)
2: dkCET2TsQcDN0c2dtertiEUqhPc.roa (hash: UbBALHBb0UI7Hqy8fBR1ma0BVv2xaYRMtaFsCVJRBPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:b6:a8:1b:cc:13:bc:2d:f1:e7:4e:d6:fa:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Mar 29 11:01:41 2026 GMT
Not After : Mar 30 11:01:41 2026 GMT
Subject: CN=af0ec98c727bf94717d25cca8f9d3a00e9c790d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:e3:98:41:3d:cc:e2:91:40:2a:07:2c:e9:
b8:af:af:43:f8:0a:4b:91:2d:03:d8:53:f4:62:c8:
7d:23:a1:58:83:bc:91:c2:3c:c5:da:9d:b2:89:6b:
9f:89:4a:5c:0c:4a:89:de:a0:cd:1f:55:47:aa:4b:
4b:e7:d9:dd:1e:10:29:c7:21:63:2e:ad:07:d9:89:
98:7d:22:74:8d:7a:e9:74:6d:0a:22:9e:76:73:5a:
b4:4f:b2:a5:22:3e:cb:58:c4:23:0d:a8:fa:ae:61:
f9:7c:4c:20:42:9e:cb:32:c3:7a:c0:b7:eb:f7:92:
52:2f:8b:22:cb:9e:eb:37:f4:8a:77:74:76:67:71:
ab:d5:19:09:73:84:ea:61:ed:f0:ba:b2:11:95:bf:
e3:10:51:36:c1:37:42:20:7f:1f:10:e5:48:b2:95:
fd:5d:b9:b2:ba:99:d0:d3:e5:66:e6:7f:30:e0:f2:
2d:ec:39:04:1d:2f:3d:95:a7:84:bb:7f:17:b2:e1:
59:77:8e:ba:c6:04:2e:58:21:3f:4d:fe:04:8e:e5:
5b:96:9d:ff:55:c3:da:d4:98:51:5b:e8:29:d5:d5:
9c:27:25:ba:83:ca:dc:a8:f5:f2:3a:2f:a9:4b:77:
7e:5d:76:1c:62:c0:27:9c:81:2a:d2:48:54:41:75:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0E:C9:8C:72:7B:F9:47:17:D2:5C:CA:8F:9D:3A:00:E9:C7:90:D0
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:af:f8:77:51:86:d7:ce:dd:47:bd:c3:a1:97:fd:31:12:e5:
fe:02:f4:57:4f:c1:d8:e7:0f:03:0a:97:3b:04:0c:1a:2f:67:
17:3a:60:4e:93:2a:8b:6e:3c:e6:8e:19:34:a3:a3:4b:df:cc:
63:92:4d:ac:c9:9d:4c:12:1c:1e:bd:f7:0a:34:26:95:cc:1a:
ba:74:ee:20:1c:be:2b:4f:57:92:29:29:a7:96:8d:7c:f9:74:
0f:08:fe:65:d1:9a:6e:06:d6:01:17:2b:6a:29:96:2e:eb:85:
c4:f6:34:fe:2f:56:ba:17:03:70:1f:bd:50:ca:8b:77:00:65:
78:2f:46:d8:d1:ee:78:d2:dd:2d:5f:60:b5:6b:85:16:12:bf:
00:f5:5d:62:bc:ae:3f:1a:9b:63:8c:f1:74:e2:fd:84:2d:a8:
4d:e4:92:08:36:50:42:59:7d:6d:27:d1:0f:d4:ff:e1:00:7a:
07:7e:99:22:f3:1b:b7:19:d7:6c:3f:27:35:0a:c3:34:3c:96:
7f:f2:a5:27:78:ed:26:ad:b6:43:41:a3:64:0f:e5:e5:46:03:
4a:58:9f:7b:7e:99:5c:a8:a2:6f:ad:4e:5a:25:a0:76:a6:7b:
fa:17:98:d1:d3:67:56:94:dd:ab:f9:81:56:28:d5:48:38:fe:
4f:e8:a3:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QbaoG8wTvC3x507W+v6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4
M2EwNTgwHhcNMjYwMzI5MTEwMTQxWhcNMjYwMzMwMTEwMTQxWjAzMTEwLwYDVQQD
EyhhZjBlYzk4YzcyN2JmOTQ3MTdkMjVjY2E4ZjlkM2EwMGU5Yzc5MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i/jmEE9zOKRQCoHLOm4r69D+ApL
kS0D2FP0Ysh9I6FYg7yRwjzF2p2yiWufiUpcDEqJ3qDNH1VHqktL59ndHhApxyFj
Lq0H2YmYfSJ0jXrpdG0KIp52c1q0T7KlIj7LWMQjDaj6rmH5fEwgQp7LMsN6wLfr
95JSL4siy57rN/SKd3R2Z3Gr1RkJc4TqYe3wurIRlb/jEFE2wTdCIH8fEOVIspX9
XbmyupnQ0+Vm5n8w4PIt7DkEHS89laeEu38XsuFZd466xgQuWCE/Tf4EjuVblp3/
VcPa1JhRW+gp1dWcJyW6g8rcqPXyOi+pS3d+XXYcYsAnnIEq0khUQXVyEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8OyYxye/lHF9Jcyo+dOgDpx5DQMB8GA1UdIwQY
MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt
NmFjMWFmZjM2YzA3LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3
LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq/4d1GG
187dR73DoZf9MRLl/gL0V0/B2OcPAwqXOwQMGi9nFzpgTpMqi2485o4ZNKOjS9/M
Y5JNrMmdTBIcHr33CjQmlcwaunTuIBy+K09Xkikpp5aNfPl0Dwj+ZdGabgbWARcr
aimWLuuFxPY0/i9WuhcDcB+9UMqLdwBleC9G2NHueNLdLV9gtWuFFhK/APVdYryu
PxqbY4zxdOL9hC2oTeSSCDZQQll9bSfRD9T/4QB6B36ZIvMbtxnXbD8nNQrDNDyW
f/KlJ3jtJq22Q0GjZA/l5UYDSlife36ZXKiib61OWiWgdqZ7+heY0dNnVpTdq/mB
VijVSDj+T+ijfA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:25 2026 by rpki-client