Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: EcqcUnSr3aa6yAGOpKcWQMSC4rLfjnXYmdOMPP1O8qI=
Subject key identifier: CA:8F:C8:6B:FC:87:BB:5A:56:96:50:89:D2:96:98:3E:3D:86:C7:15
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019EE6684F9C0C4B9CE82F3822394A7C3A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1970
Signing time: Sat 20 Jun 2026 19:00:56 +0000
Manifest this update: Sat 20 Jun 2026 19:00:56 +0000
Manifest next update: Sun 21 Jun 2026 19:00:56 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: I+ZiChA2wCsHXTBc0m4E7hTjCILG8w87T9h4M6zhMO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:68:4f:9c:0c:4b:9c:e8:2f:38:22:39:4a:7c:3a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jun 20 19:00:56 2026 GMT
Not After : Jun 21 19:00:56 2026 GMT
Subject: CN=ca8fc86bfc87bb5a56965089d296983e3d86c715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:76:2c:e2:61:1a:2a:c7:80:d7:50:e9:c5:
3c:06:f0:de:e0:68:84:50:9b:9a:e4:73:4b:a0:22:
82:bf:f0:f6:71:c2:a8:ac:13:86:de:15:82:40:05:
18:74:81:11:43:5b:3f:d1:95:bc:67:cb:75:7c:40:
0d:c6:33:f5:e3:51:3f:e2:42:3d:c7:59:f3:29:a6:
82:6d:4e:aa:ba:c3:a2:bb:49:8f:e1:0d:84:b6:ae:
92:bb:e7:23:58:df:41:0c:77:1e:9d:80:2e:2f:a9:
5a:96:9e:43:b9:5e:c7:1e:f7:5b:6e:0a:f2:fd:7a:
18:a8:99:ca:51:17:6c:87:4e:86:53:db:8c:60:11:
e4:ec:4d:d3:4e:35:b3:9d:8a:c4:c6:e0:43:91:56:
37:56:61:1f:49:7c:fd:de:4b:6d:58:14:10:e8:a2:
ff:94:4c:e8:77:73:a2:fe:54:a6:f1:0e:5a:40:5f:
24:98:39:78:74:bb:44:2d:26:b1:79:47:a2:b1:6a:
99:2f:a6:f3:56:db:0a:6c:59:11:66:89:55:6c:70:
fb:93:e2:fd:93:14:32:df:b1:88:3c:8c:41:49:33:
a4:4b:f1:dc:74:6c:d2:91:6e:a8:f2:ee:09:b8:fb:
6d:ac:d9:a6:e9:e1:de:e9:b5:e1:f5:c3:23:b2:a2:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8F:C8:6B:FC:87:BB:5A:56:96:50:89:D2:96:98:3E:3D:86:C7:15
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:51:00:09:fc:59:2f:98:b5:39:8e:1a:92:0c:39:76:cc:36:
f9:a8:4f:b3:6b:d9:72:13:84:2c:20:50:46:92:3b:98:5c:0b:
a0:d5:f3:b5:d4:ae:24:90:32:f4:e5:2d:c3:4f:a1:7e:19:9b:
ae:fd:25:97:68:34:86:bf:ad:5e:55:bf:cb:d9:9e:6f:e8:52:
4f:cf:88:de:23:68:34:3c:54:43:74:50:98:43:8d:71:16:9c:
03:4e:b2:4d:41:47:8b:a1:db:43:05:ba:56:cb:e3:74:cb:af:
93:b1:5b:47:aa:1f:ec:1c:3b:35:37:44:b1:36:ed:2e:1b:4a:
19:a2:32:1b:ae:d8:b8:31:01:0f:ef:52:1b:e6:0e:a2:2f:4c:
0f:47:27:bd:37:1d:78:f5:11:7e:c9:7a:bf:3a:9b:47:b0:7c:
b6:ab:08:eb:cf:56:1c:ac:ee:35:0e:8b:21:5a:66:44:e5:2a:
f2:15:8d:e7:f8:7c:10:26:06:37:0f:da:96:0a:13:11:7a:2f:
4c:ea:57:22:19:d5:d6:7a:70:3b:3c:ee:86:74:91:d4:3b:e2:
ba:8c:ca:11:62:1d:ef:29:ca:68:54:19:92:88:ee:b1:9d:5d:
96:8b:f0:d5:42:4e:9a:40:66:30:60:66:a9:b8:e8:3f:78:ec:
20:b2:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 04:16:32 2026 by rpki-client