Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: 3qYueXozKPPmqsNcpGqe57VlY/jH0IucDBLYAezeJhs=
Subject key identifier: 1B:90:6A:68:82:3B:71:98:76:03:E2:B9:97:D8:A2:2B:36:C4:60:1B
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 019D37F790B2A2393C9C0F79C377CEC65BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0FA1
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: ENxwjXTdbKTvs3cxszl-xyNLpXc.roa (hash: 47BjcSHsUkq+j3LunSdpEHT6VVnEgYALqU6b9V3eCd4=)
2: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: Xkdk4td3rKiZk8Ebi4283XELYMZq/+BEr+wRLUnQAu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:90:b2:a2:39:3c:9c:0f:79:c3:77:ce:c6:5b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=1b906a68823b71987603e2b997d8a22b36c4601b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:6d:07:6d:14:0e:a6:0a:e9:a0:93:73:87:
50:72:59:44:2b:9f:8d:3b:59:4f:07:61:3b:ab:62:
aa:ff:5b:98:65:eb:ec:04:a2:c9:c2:17:d8:b2:40:
06:9d:4e:b1:60:2a:57:be:57:9e:ad:1d:9e:19:d7:
47:d7:b8:d6:dd:b5:bf:55:43:ff:90:11:c5:b9:22:
dc:17:b2:1e:98:7e:7a:52:50:12:83:47:e5:29:93:
82:6e:c2:52:3b:8f:bd:d3:e9:be:5b:e1:e0:ac:f5:
0c:40:74:7a:dd:eb:1a:a7:44:2f:f4:e9:33:ab:ed:
e4:12:e3:55:76:77:d6:07:28:89:95:86:05:a9:8e:
a4:44:59:a1:28:1f:a3:ce:7e:1e:8b:ee:a4:aa:9d:
e6:e3:95:1b:b0:cf:b7:d0:ba:ce:15:f9:f8:36:86:
6f:67:8d:d3:d4:16:7e:28:ae:c4:a8:d9:b2:1e:37:
04:ca:b7:85:71:86:38:98:20:b5:24:30:e3:50:81:
c0:32:21:49:ec:36:07:75:1e:fa:b8:b7:c1:0b:29:
dd:a2:8a:53:c1:03:04:31:f7:5a:ce:18:e8:e2:90:
75:36:8d:28:91:23:6a:ec:b5:33:1b:f6:f5:4d:bd:
85:0e:67:30:4c:b8:83:b8:15:b9:0a:14:9b:43:6a:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:6A:68:82:3B:71:98:76:03:E2:B9:97:D8:A2:2B:36:C4:60:1B
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:29:ae:b9:f2:7f:c5:98:e7:98:ab:41:9c:a1:cd:83:48:
bf:38:2a:98:48:f2:dc:82:f8:c9:64:a9:3e:fa:fe:25:d9:90:
76:20:2d:45:e0:b7:7d:d5:6f:6a:a5:62:5d:1f:20:f9:f5:9f:
d0:9f:07:ae:4f:0b:8b:92:1e:21:32:bd:49:92:6c:7e:4e:ab:
a0:e6:5f:d4:0b:bb:b1:e7:ab:84:60:34:da:66:03:4e:ef:c5:
41:4e:45:39:4b:a9:e3:b9:52:04:ef:17:2b:96:05:37:51:d8:
25:fd:fd:8b:30:8d:cb:56:1c:ba:0d:9f:b7:2d:70:70:8c:7a:
0f:a9:19:77:0b:68:63:3d:e8:d1:0a:65:66:1d:ac:60:29:6a:
3d:24:63:da:37:35:ca:f0:e4:ad:85:24:69:3f:96:33:71:78:
be:04:5e:68:25:09:2b:dc:05:fe:ee:2b:1e:47:ef:eb:6d:65:
07:ad:04:54:c7:ad:77:40:01:b9:8c:82:4a:2e:03:07:23:17:
64:f7:78:e7:1c:3a:8a:02:fc:c3:5b:fb:14:9e:06:e7:c3:0a:
4c:3f:f4:75:32:08:4a:11:29:03:a4:c4:cc:d4:fb:be:8c:30:
26:59:57:9e:c7:1e:7e:81:78:5f:c2:bb:cb:be:5c:35:e2:b0:
a0:bb:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:14 2026 by rpki-client