Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: FsfojsKe9UWtsWJDqjtZ7aHdeGBy+5QQ+PFcLs5WRGA=
Subject key identifier: EA:4E:12:7F:BD:49:E4:60:DE:1F:65:04:16:20:AC:CF:29:84:97:05
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019FD0156484C0B37511B2143B4BDA388C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 19E9
Signing time: Wed 05 Aug 2026 04:01:30 +0000
Manifest this update: Wed 05 Aug 2026 04:01:30 +0000
Manifest next update: Thu 06 Aug 2026 04:01:30 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: mRt/Hg/oM48SJI7l2FtoY0uzI7JqRqwf5ALt0Rs44Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:15:64:84:c0:b3:75:11:b2:14:3b:4b:da:38:8c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Aug 5 04:01:30 2026 GMT
Not After : Aug 6 04:01:30 2026 GMT
Subject: CN=ea4e127fbd49e460de1f65041620accf29849705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:59:2d:2d:99:33:1a:ff:b5:15:fc:b0:34:
40:87:61:37:fd:a6:68:d8:91:5a:5e:2d:99:3b:e1:
a0:c2:97:e6:fe:e5:47:ff:28:d0:4a:3d:4c:80:d4:
4f:24:5f:a2:ad:56:a1:26:cf:bf:a3:4e:e0:17:cc:
a6:34:8c:95:52:24:a2:4d:2c:a7:f4:0c:de:4d:7e:
c4:98:c9:a5:ae:d6:00:cb:9f:07:74:49:80:c8:92:
e9:d0:a9:d5:2e:5f:ac:16:75:da:bc:d6:80:91:25:
5b:1e:23:83:13:76:82:92:28:98:29:9d:e0:a6:37:
70:70:94:04:ba:ca:1a:9f:bd:d0:61:c1:d5:67:80:
7f:8c:0f:5c:3f:a5:e4:37:a5:1a:08:1c:2d:09:5e:
4d:bd:fc:33:0d:b0:fe:b2:4e:33:9a:3b:3a:d4:ba:
90:2b:61:d7:84:81:7d:8b:6a:14:31:ea:62:12:20:
bc:e2:67:07:bc:71:cd:a3:c6:8e:0d:8b:3f:48:9d:
2c:e5:3d:4e:fd:14:15:c7:7f:d1:38:9c:b5:e7:e5:
3a:1c:ca:10:1e:19:3d:78:e6:a2:a8:f7:da:6e:ec:
0c:e1:89:0c:cd:2a:80:e5:f5:84:b3:34:6b:73:14:
ad:d5:5d:f1:fd:19:42:f4:eb:0e:8b:d2:37:2f:b2:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4E:12:7F:BD:49:E4:60:DE:1F:65:04:16:20:AC:CF:29:84:97:05
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f5:7d:78:ef:2c:42:3e:12:e6:d7:3f:10:69:15:cd:cf:1e:
d2:a4:22:72:07:da:4d:62:2a:9c:42:cb:36:c4:26:3f:03:85:
5a:68:32:79:45:1c:21:b5:8b:2b:45:cb:7b:3c:d3:cb:dd:84:
a5:ae:56:9c:26:40:81:60:5c:4a:ef:74:27:cc:5e:e3:f6:3c:
7f:ad:e2:6f:3b:c7:7b:d4:67:4f:36:58:f8:89:ab:51:1c:9b:
1c:7e:50:41:c5:2e:d5:0c:9a:2d:8d:1f:31:b5:cc:fa:94:01:
64:95:c5:f9:dc:3b:9a:41:65:9d:6b:ea:52:93:24:c4:46:bf:
b0:36:8e:76:83:22:da:a7:41:91:07:b2:00:22:8a:24:a9:4c:
7b:b0:87:e1:d0:ea:f1:f4:5b:75:2b:6b:11:07:7c:d5:17:d9:
a9:f0:5f:5c:84:db:8e:f5:3e:81:01:6a:4c:2e:3d:64:30:c4:
2f:1a:fd:15:68:50:db:11:a3:85:5f:f8:b0:ea:c1:d2:26:f9:
74:dd:92:3b:29:7e:d1:49:e6:b3:f1:44:5f:04:7d:51:73:28:
fb:64:92:e0:49:ef:bd:e2:fe:64:5d:30:f3:95:7f:4f:6a:03:
bd:a3:06:87:97:57:c5:cd:8c:27:50:f4:5d:70:1d:df:4c:1c:
ee:50:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 11:43:00 2026 by rpki-client