Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: RERMarDbOTAf3bsaT77tywAuFKMLsuUIZ265F83dMdc=
Subject key identifier: 4E:0D:61:09:34:C3:62:0D:5C:39:8D:C0:D8:58:59:0E:75:8A:B9:DC
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 019D3A1C713BF23A4CD6CF2B681DF2B17013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 15:00:35 +0000
Manifest this update: Sun 29 Mar 2026 15:00:35 +0000
Manifest next update: Mon 30 Mar 2026 15:00:35 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: TbCMJoCzKY2+gOudtL/VttopoIi83mPrehWPPdFKZj0=)
2: ALvjuEagqkX_bxCENg8XKd0AAsU.roa (hash: IQ71j6lnnVzLcsftePg8wMiGMFkrq5Obvc/qjDtIg9o=)
3: UXTtsC8Oa5GFJq-oeBczgV235bU.roa (hash: QROFgHuLFM3vpOALM0ZjBn/r8WQThhQx6Zrl/aYuc/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:71:3b:f2:3a:4c:d6:cf:2b:68:1d:f2:b1:70:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Mar 29 15:00:35 2026 GMT
Not After : Mar 30 15:00:35 2026 GMT
Subject: CN=4e0d610934c3620d5c398dc0d858590e758ab9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:50:00:5d:63:d7:a3:a6:f1:5f:94:7a:bf:
93:de:fe:20:9b:dd:36:ea:09:0b:4a:9c:44:e8:d8:
29:81:d8:5c:ff:c3:e5:51:00:f1:d7:24:14:f8:8b:
3a:0b:5a:df:6c:26:00:41:eb:67:c4:4b:db:ec:56:
47:39:ba:12:84:5a:62:2a:6b:ab:85:0f:8a:17:fb:
c6:6a:71:b3:9c:75:e1:dd:d9:76:72:18:cf:6f:b2:
cf:0e:f4:0b:12:79:3b:67:2a:ea:44:b3:03:c2:1c:
eb:ef:81:a2:97:e7:15:29:a7:24:7c:4b:d9:2d:31:
8c:84:62:ee:a0:32:57:10:4b:e6:43:02:39:2e:f5:
b4:0b:28:f7:2a:d3:f2:0e:2b:46:13:11:cb:48:5a:
39:e2:6f:ba:83:11:6c:f9:26:da:26:c4:31:86:21:
b4:d1:7e:2c:fa:da:91:5a:03:95:78:fd:d6:74:eb:
b0:48:d1:62:6d:02:53:16:eb:b9:b9:16:15:37:02:
ad:ee:6e:60:04:5e:a2:f6:66:29:6d:b0:55:f2:c4:
6e:57:6c:56:07:81:6a:bd:14:d7:23:22:cd:a6:3e:
f2:a7:cb:72:f2:5f:bc:b3:81:b0:65:62:e6:eb:f3:
5c:91:c1:00:a0:e0:2e:3b:f9:b8:e6:bc:d1:86:1d:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:61:09:34:C3:62:0D:5C:39:8D:C0:D8:58:59:0E:75:8A:B9:DC
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7e:a2:60:1d:c7:b7:2c:17:78:0f:4b:16:27:00:e6:f0:db:
f3:d1:11:2e:70:14:04:d3:a6:f2:d1:9c:50:27:00:6a:a6:ac:
90:ea:e8:a3:d2:b5:6f:2d:f8:8c:3b:7b:ba:0d:17:6d:38:1e:
95:ea:8c:04:3c:c5:ed:43:cb:ea:df:81:a5:db:3b:7e:98:3f:
63:a3:11:d7:0f:88:65:8d:65:6c:a1:8d:a6:6a:bc:fc:0a:b4:
77:46:61:bc:46:05:c3:7f:4c:1c:26:53:2a:a8:f4:2b:fe:f4:
a2:a6:46:3e:40:94:91:bd:27:2f:e3:44:4c:25:44:7f:cf:39:
cd:16:b9:49:80:ca:66:ca:91:a2:52:e9:55:a5:9b:db:32:a9:
85:32:6e:50:d6:3d:a4:ff:c3:1a:48:96:b0:b5:ac:eb:f0:16:
50:69:c1:0a:dd:2a:2b:44:cb:01:71:28:bf:d2:87:e8:bf:3d:
31:da:0c:88:87:8e:5b:8f:32:29:24:1a:f5:fe:27:94:58:92:
84:10:80:2c:f5:28:90:01:4c:d4:83:14:19:5c:77:56:97:94:
f9:25:0d:9a:8d:8e:77:ee:51:de:cb:96:16:21:1c:fa:e5:eb:
a0:5c:83:03:55:7e:35:51:fa:bb:db:6c:c3:2a:86:d0:fe:d5:
90:49:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:28 2026 by rpki-client