Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier: pgzxui/4MW5ORobStGlhAcSMayumjh71f4pwnonLr7g=
Subject key identifier: 34:37:ED:0B:37:3F:29:0F:CC:D1:CB:D6:EA:12:FF:48:DC:E7:99:DB
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019D38D3A00D4A6152B2F4ECEC1AB15D1448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number: 14CE
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: 4RVMLPJDzZiRyY7Xu2lSc6hIVvh3MYTCwvmZS1rCQCs=)
2: di_0LtYX-zy7910p1HbVAPeQb4E.roa (hash: Q0mvASV/CVPiKor53MwAZ00Mlkbyxmt/p19B01XkHwA=)
3: pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa (hash: hUdGksl3Om+qi4NqcjWlHiivRsMFn3puC7yl77M9g+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a0:0d:4a:61:52:b2:f4:ec:ec:1a:b1:5d:14:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=3437ed0b373f290fccd1cbd6ea12ff48dce799db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:63:d5:27:fe:5b:fa:eb:b8:4f:19:87:37:
b9:72:4f:f4:db:4e:ad:5d:1e:49:12:c5:6d:6b:08:
07:9c:63:4e:b8:b2:52:45:12:d2:b6:9b:42:ac:02:
17:84:99:c7:fd:67:ab:ab:01:83:0e:dd:0a:df:c7:
b9:12:79:50:55:d1:63:27:51:92:81:21:77:cb:d5:
48:c0:42:35:b5:6f:f8:49:79:51:a7:75:c1:97:75:
6f:32:5e:5d:07:2d:23:3e:e7:39:3a:91:9d:94:2f:
54:fd:20:55:c1:03:59:2f:34:a8:3d:72:12:34:4d:
6a:50:99:78:da:e4:b8:1d:23:85:ac:3d:f4:e8:bb:
41:b2:ef:8f:14:14:47:e5:db:c3:d5:a5:34:fb:7c:
ce:28:91:07:9d:2a:42:bd:b5:99:ad:3e:e4:73:b7:
84:e2:42:b2:62:22:36:1c:67:d2:82:24:4a:35:ee:
7a:a0:b8:ab:cc:ef:d1:f0:43:4e:71:8e:7c:44:3a:
b6:d5:1f:8b:95:e3:5b:d3:d2:3b:c7:79:23:57:be:
d9:d6:37:25:4c:42:3f:c2:0c:9d:48:3e:6e:23:89:
c8:ea:8b:68:b9:d9:75:e9:90:e8:4e:a6:eb:78:6d:
e8:26:6b:6d:60:68:f8:a7:11:21:b6:61:b2:42:d5:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:37:ED:0B:37:3F:29:0F:CC:D1:CB:D6:EA:12:FF:48:DC:E7:99:DB
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8e:31:73:f6:73:8e:3d:0f:13:f2:6b:4e:fe:ff:10:bd:7c:
98:fd:44:22:2f:fb:41:5e:7f:6e:a3:25:2a:f6:ec:7d:fc:63:
48:02:da:cb:9a:88:a9:a2:95:2c:f7:d6:d0:89:79:4d:6c:0f:
d9:2b:b8:43:2f:71:99:7c:a2:e5:38:9c:11:af:2d:2f:a6:1a:
c7:28:84:0d:f1:db:84:92:d4:5e:24:c9:6b:04:db:59:ef:b4:
83:d8:e6:58:c4:4f:3f:7f:70:03:c5:13:a5:57:72:7a:c2:51:
db:ae:60:f2:b0:96:f9:d8:d4:01:1b:27:1e:24:dd:0f:54:63:
d8:85:c8:3c:46:0c:20:62:e9:41:ae:08:f4:28:c6:45:cc:53:
2c:c1:e9:24:73:9e:2c:27:52:cd:4f:31:af:a5:e7:51:fc:bb:
c0:61:51:6d:66:d2:df:45:aa:43:0e:e1:f0:b9:07:e3:ec:80:
6d:30:a5:30:c1:63:e4:c1:00:8b:1b:6c:8b:ca:6d:6a:5a:dc:
05:27:6c:22:86:6a:85:01:81:b9:4c:ea:04:83:7b:63:b7:24:
94:43:4f:8f:45:66:b6:ee:fb:99:23:b5:99:cb:1e:9e:64:23:
91:cc:c9:6b:bd:92:1b:b5:c0:47:4d:ce:33:13:6b:73:57:dc:
83:87:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client