Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: 3wciGdjvO4NMEYFkd8zgplAzIiv1Lc6VReCBGUMhcf0=
Subject key identifier: 25:77:2C:23:2E:AA:B1:CF:57:17:E7:55:32:1C:17:A2:1F:31:E0:FE
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 019D39409E70ED0766E09743D8503EA682E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0CB2
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: 4x1TKBz_BI-V4dj9yOWPflsgBy0.roa (hash: AEyQ4d3oKadVqU+q8qpPHgCbs4RI3Y80TBihfli8Oxo=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: gLj09D+CmPt7W+B7YbPONKzzsyzyyde1qvjD7x6SbSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9e:70:ed:07:66:e0:97:43:d8:50:3e:a6:82:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=25772c232eaab1cf5717e755321c17a21f31e0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:1e:e0:bf:04:96:21:9c:b5:c9:40:cf:d3:
b5:59:48:f1:91:6e:ff:5d:a8:df:aa:f0:6f:98:4e:
41:7e:8b:00:c8:14:58:35:89:92:56:57:0c:5e:e7:
0b:7d:f2:fe:2a:a0:23:b6:2a:89:29:27:0d:99:84:
1a:0c:e3:00:b1:63:0a:92:f0:74:60:79:8e:e2:f5:
99:03:98:87:16:52:93:f9:72:a6:89:31:e7:c7:7f:
a3:8e:19:48:f6:6d:aa:04:30:93:dc:ea:27:5f:28:
e8:8e:d6:65:1f:d4:70:21:0b:9d:4a:8d:4d:f3:90:
76:5d:da:99:6a:6b:b1:74:79:43:ee:45:18:11:91:
cb:4c:ad:83:60:d9:7d:04:5b:8f:11:b8:c5:c8:13:
73:1f:8f:2b:64:ff:71:30:36:12:44:f5:ee:2b:46:
4a:56:f3:a8:22:30:9a:ba:32:bd:6c:57:6c:05:77:
a2:c2:f3:fc:c7:f8:96:31:01:d1:fc:a9:de:2e:c6:
28:98:1d:ee:01:95:7c:9a:bf:4b:22:31:25:86:8c:
1c:25:69:b6:25:79:9a:d8:bd:0d:78:88:4b:4a:ee:
66:45:01:6f:e4:14:be:48:e8:8c:45:6c:56:8f:49:
08:e5:b9:a8:1f:6e:b4:a7:35:d0:7e:d8:3a:61:06:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:2C:23:2E:AA:B1:CF:57:17:E7:55:32:1C:17:A2:1F:31:E0:FE
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:df:3c:d8:ea:2e:e9:94:31:52:56:53:51:8b:89:3f:d5:
39:e0:f4:c7:c5:a6:01:02:fa:73:df:cb:aa:0c:7e:55:cf:bf:
a5:d8:c3:c9:ea:c1:8d:b5:75:fc:25:bf:9b:42:ad:5f:76:bc:
ed:df:34:fa:5b:76:8c:58:a9:66:6d:e3:52:95:4e:04:20:d1:
b7:77:cc:25:ca:61:9d:67:38:ed:ee:26:2c:20:3c:68:bd:f6:
fd:c0:ef:b6:3f:18:fa:90:f0:b3:f5:e4:0e:70:32:85:3d:eb:
5a:ff:eb:7d:ff:ee:cb:8e:13:87:45:03:ba:aa:6c:cf:87:37:
48:54:a0:4f:c8:66:2a:fb:ae:ee:06:1f:e9:5e:a0:8b:a7:33:
3f:47:7c:bd:fb:bc:91:d1:fb:17:d5:e5:fa:32:6c:a4:d9:71:
33:76:d3:1c:a9:e4:3b:72:05:08:3f:9b:86:78:2f:cf:21:5d:
72:06:d8:94:5f:fb:d1:85:14:1a:6f:7b:53:08:82:5c:32:a7:
b9:1e:59:62:33:68:40:ce:d8:59:1b:9b:c1:20:e3:e2:0f:bd:
78:1e:73:48:fd:6f:df:79:db:1f:3a:a0:66:b7:3e:e8:2b:27:
6b:d3:d3:16:4c:50:8b:e1:d3:dc:26:33:67:70:c9:92:37:04:
a3:1e:e4:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJ5w7Qdm4JdD2FA+poLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk
ZjNkMjkwHhcNMjYwMzI5MTEwMDI5WhcNMjYwMzMwMTEwMDI5WjAzMTEwLwYDVQQD
EygyNTc3MmMyMzJlYWFiMWNmNTcxN2U3NTUzMjFjMTdhMjFmMzFlMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd4e4L8EliGctclAz9O1WUjxkW7/
XajfqvBvmE5BfosAyBRYNYmSVlcMXucLffL+KqAjtiqJKScNmYQaDOMAsWMKkvB0
YHmO4vWZA5iHFlKT+XKmiTHnx3+jjhlI9m2qBDCT3OonXyjojtZlH9RwIQudSo1N
85B2XdqZamuxdHlD7kUYEZHLTK2DYNl9BFuPEbjFyBNzH48rZP9xMDYSRPXuK0ZK
VvOoIjCaujK9bFdsBXeiwvP8x/iWMQHR/KneLsYomB3uAZV8mr9LIjElhowcJWm2
JXma2L0NeIhLSu5mRQFv5BS+SOiMRWxWj0kI5bmoH260pzXQftg6YQbG6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV3LCMuqrHPVxfnVTIcF6IfMeD+MB8GA1UdIwQY
MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt
ODIyNjUyNGU0YWNmLzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm
LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+XfPNjq
LumUMVJWU1GLiT/VOeD0x8WmAQL6c9/Lqgx+Vc+/pdjDyerBjbV1/CW/m0KtX3a8
7d80+lt2jFipZm3jUpVOBCDRt3fMJcphnWc47e4mLCA8aL32/cDvtj8Y+pDws/Xk
DnAyhT3rWv/rff/uy44Th0UDuqpsz4c3SFSgT8hmKvuu7gYf6V6gi6czP0d8vfu8
kdH7F9Xl+jJspNlxM3bTHKnkO3IFCD+bhngvzyFdcgbYlF/70YUUGm97UwiCXDKn
uR5ZYjNoQM7YWRubwSDj4g+9eB5zSP1v33nbHzqgZrc+6Csna9PTFkxQi+HT3CYz
Z3DJkjcEox7kOA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:13 2026 by rpki-client