Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: zWsrpnuMLF7zDJS9TZkwEajGl9cImZo6G6Ok+cuqTr0=
Subject key identifier: 3E:A2:69:1D:3B:9E:CB:BE:DB:BF:DA:93:27:3E:26:46:40:38:7B:68
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 01A0B9C1AB493CE706BD9E7739BAA85B2584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1A62
Signing time: Sat 19 Sep 2026 13:01:12 +0000
Manifest this update: Sat 19 Sep 2026 13:01:12 +0000
Manifest next update: Sun 20 Sep 2026 13:01:12 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: ZZOzso5/WD5ArjOabfP1CDhK6oiUeseeaOf/P47XhXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:c1:ab:49:3c:e7:06:bd:9e:77:39:ba:a8:5b:25:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Sep 19 13:01:12 2026 GMT
Not After : Sep 20 13:01:12 2026 GMT
Subject: CN=3ea2691d3b9ecbbedbbfda93273e264640387b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:7f:95:19:24:66:7d:16:ce:f7:90:af:62:
d4:67:d1:e5:a5:5c:3a:83:74:24:17:bc:fa:ba:4f:
78:8d:dc:ab:cf:a5:92:50:95:56:a3:a8:9f:61:b9:
2a:de:27:9f:f7:b2:7a:8e:aa:96:b9:95:4c:06:10:
a9:ad:a2:1c:aa:63:5d:df:50:c3:83:63:c9:ed:18:
b3:fc:f7:72:05:ce:8e:67:57:16:da:4b:22:38:07:
ab:f4:ca:de:49:a3:2e:d3:bb:29:1b:d9:ef:17:2b:
4b:8a:20:b6:45:c6:30:b6:c9:1b:fb:50:1a:5f:29:
d3:45:44:dc:29:9b:b2:d3:59:fa:29:a2:83:01:ca:
1b:ee:e8:cc:1e:34:12:ff:fb:29:8d:1a:2e:b3:bc:
4d:f2:cb:6e:c7:98:a1:36:70:77:a2:9b:89:57:ae:
dc:b8:dc:a8:d0:be:c3:33:c9:3d:9a:f2:66:6a:9b:
ec:14:12:af:ff:a2:a4:16:78:29:f1:66:44:38:3d:
8c:97:8b:5b:df:03:62:5c:41:f1:d8:40:e8:16:5d:
e5:9c:30:a1:e3:12:92:8c:c3:d4:48:fd:ed:73:3e:
a6:00:6c:f5:7d:68:13:b6:11:f4:98:32:64:73:42:
23:9d:32:7d:ee:1a:76:c3:87:14:22:7f:70:94:72:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:69:1D:3B:9E:CB:BE:DB:BF:DA:93:27:3E:26:46:40:38:7B:68
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:67:ea:48:10:34:08:41:0e:06:19:07:27:61:d2:25:c8:d5:
f4:6e:87:8b:c7:24:3c:06:65:3a:ee:b2:10:cb:fa:e9:fc:27:
88:2b:a6:01:51:43:6d:f6:78:a7:26:c2:64:01:41:47:1a:6a:
93:2c:f5:d7:18:69:a2:31:ed:5b:2f:7d:04:35:0e:dc:2d:b3:
1e:18:50:2d:a3:c9:a3:c5:8f:2f:84:de:67:5d:94:88:99:c2:
f8:91:f1:e8:8c:f8:21:2e:1f:a5:c2:c3:8a:42:5d:86:74:a4:
c6:e1:8e:2c:c6:fc:8e:5d:27:6b:2c:90:95:e3:96:3b:6d:e1:
3b:a0:34:9c:2f:be:ca:b2:4c:20:7f:5e:28:94:77:cd:02:f6:
1f:dd:7a:f7:14:b2:51:92:ac:c6:ba:8d:f9:56:cd:d7:36:1c:
a1:9a:99:d2:3c:47:d6:98:4a:74:af:12:aa:8c:62:92:24:7a:
fc:12:aa:b3:dc:3f:b7:c0:b4:c0:c0:6f:3b:d2:0e:02:4f:cf:
ab:25:69:81:bc:29:ab:99:e2:db:25:e1:fb:60:33:32:5b:bc:
eb:e0:d5:60:ed:05:f8:a9:ca:f2:3f:50:e7:72:be:44:be:e0:
19:2e:af:9e:78:0c:a8:21:e4:60:d6:41:ea:3e:ac:e7:39:2e:
38:eb:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 18:49:34 2026 by rpki-client