Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: Q1HrHtj5A3vqv/gakzUJPPF6D3bvKg9hrsuwOZbDY9g=
Subject key identifier: B5:BC:3D:E1:D6:0A:E1:38:E0:A4:66:CB:F8:81:34:13:A6:F8:F2:21
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019DFCBB70DFA940F97B94A9968069483612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 18F7
Signing time: Wed 06 May 2026 10:00:35 +0000
Manifest this update: Wed 06 May 2026 10:00:35 +0000
Manifest next update: Thu 07 May 2026 10:00:35 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: yzCOe8WG7aGKNWdjyiV5ko17xmT5sS/me+Uj+6dyamU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:bb:70:df:a9:40:f9:7b:94:a9:96:80:69:48:36:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: May 6 10:00:35 2026 GMT
Not After : May 7 10:00:35 2026 GMT
Subject: CN=b5bc3de1d60ae138e0a466cbf8813413a6f8f221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:4d:be:cb:9b:00:67:2c:5c:04:f6:7f:13:
2e:36:24:7b:6b:08:45:35:19:f2:41:8d:af:83:5f:
0b:2e:02:eb:b7:e5:5a:76:bf:fa:73:cf:74:64:4e:
b3:ef:e3:0c:13:82:6f:e0:25:5a:86:f8:f1:99:ea:
01:11:19:ad:1f:e2:3a:3b:fa:7a:3f:20:cf:f4:9f:
a3:2b:88:2c:96:55:bb:5e:02:4b:c5:2a:51:5d:0c:
86:7f:3e:68:3d:49:b9:0e:56:0f:2b:14:e4:da:ab:
f2:9c:44:a6:50:00:a6:38:f7:a3:33:82:29:c1:9b:
03:99:70:e8:8c:4b:1b:2c:3f:5d:0e:13:0f:0e:b1:
80:3d:e1:90:d1:96:13:f3:c9:09:9a:f8:2a:a5:ab:
f6:a5:b0:bd:bc:92:2b:de:75:b1:46:c5:14:72:30:
e6:c9:d2:59:22:e9:86:37:8b:64:01:00:e7:09:f6:
1a:89:43:cb:6f:06:60:f1:d4:80:a3:b6:96:96:10:
01:88:08:99:db:3f:26:50:15:b2:20:da:dc:bc:5a:
e5:65:5d:ab:a6:8b:33:80:8d:f7:da:72:40:96:94:
c9:69:9d:35:5e:2b:18:92:b3:0b:87:09:9c:d9:32:
9d:db:b2:b4:4d:cb:cd:44:3d:ba:e2:4e:47:75:93:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BC:3D:E1:D6:0A:E1:38:E0:A4:66:CB:F8:81:34:13:A6:F8:F2:21
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:13:a4:3c:42:04:91:36:9c:1e:dd:88:29:ef:73:8a:d5:
d1:9b:b1:75:48:d1:92:bb:9b:61:3b:a7:65:3b:f2:28:bf:a1:
3a:35:fe:a9:38:03:59:b6:6b:0f:d4:3e:b4:d3:53:3f:f6:ee:
8b:5e:89:0d:08:a8:1c:d7:49:6f:59:ee:f9:53:3f:9a:b8:22:
07:2c:cc:f3:96:29:41:be:20:30:70:fa:03:f1:b1:db:6d:c7:
ef:b0:ab:3c:05:d6:56:15:28:bf:72:39:88:e7:e0:ee:c5:89:
be:c2:2d:0f:cd:e1:5b:3e:0a:fc:48:f8:f9:15:86:49:3d:76:
fb:0c:71:31:70:f3:c7:3d:c8:21:dd:65:75:3c:0b:a7:83:10:
5b:b4:5b:e8:26:b2:69:78:5d:2c:84:a6:27:04:c0:fa:d6:d8:
7d:37:38:f0:50:3d:ce:1c:06:38:01:2c:67:01:50:35:30:b7:
a3:82:d0:e0:d9:d7:09:bd:64:5e:7f:92:4c:54:e0:00:76:81:
54:23:3d:c5:c9:38:33:7b:8e:7e:63:7c:dc:79:49:c1:be:26:
b5:82:a1:8a:58:2f:63:87:4a:af:8a:23:07:41:dd:bd:c7:66:
8f:53:d1:a4:fc:1c:ad:6c:d6:92:3e:ef:c6:d1:80:69:bc:49:
7f:7b:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:01:30 2026 by rpki-client