Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier: hhyF2X7efYX0LNa6rlnjbIx9Dmd9/RwhTZ1Dl7lgxoI=
Subject key identifier: B1:3D:E0:5C:34:A9:80:D2:06:DC:B9:9E:4A:07:1E:36:36:0D:07:82
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial: 019D38D2EA1142B537CA9DAA980E6457F8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number: 11B1
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: VElP0mohB9Hs3lyO2umc0DIa9SrQMr0Rh9S6RHy0Hy8=)
2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ea:11:42:b5:37:ca:9d:aa:98:0e:64:57:f8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=b13de05c34a980d206dcb99e4a071e36360d0782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:30:ae:e7:4a:75:00:9e:08:6a:ac:18:68:
89:4a:80:3c:0c:7a:64:90:d8:c0:cb:5f:6f:bb:d9:
8d:49:98:66:6b:74:82:e2:fc:20:43:30:55:3f:0b:
d3:11:47:f4:12:5e:b8:98:cf:4b:c5:e3:2d:14:02:
06:df:3e:25:fb:6c:09:56:5b:b5:c1:c1:ad:42:07:
fe:5f:06:57:a0:70:c9:d3:35:50:2c:46:a2:8f:01:
72:a2:01:e9:ff:a9:8d:e6:83:c4:16:dd:3f:a8:d7:
34:7c:91:bb:cb:aa:65:aa:fb:9e:e0:f6:96:85:7b:
99:31:50:7c:69:90:40:c0:a1:d9:2d:ba:50:35:9f:
75:a2:f7:7a:dd:70:d6:43:82:b5:f7:d5:b4:51:4b:
89:42:41:ce:e8:50:7d:64:ea:6e:e6:2a:29:d3:05:
5c:24:79:6d:67:3d:a8:f2:57:81:0c:00:d3:58:d4:
96:4f:a8:89:de:63:28:8a:fa:3b:d9:aa:c8:08:2d:
73:f8:43:5e:c0:b6:1f:66:f1:75:3b:b3:57:40:5f:
9d:ff:43:33:4a:3e:99:12:e6:e0:b7:90:bd:ef:58:
7f:c1:0b:51:c6:85:4c:da:cc:60:5f:43:35:32:1e:
66:6a:11:fa:67:b9:22:83:ee:da:bf:83:83:fe:a5:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:E0:5C:34:A9:80:D2:06:DC:B9:9E:4A:07:1E:36:36:0D:07:82
X509v3 Authority Key Identifier:
keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a1:b9:15:98:5c:69:34:56:5d:6e:2f:ce:94:33:50:0b:dd:
22:99:e2:c6:b3:8c:a2:4c:c2:3f:92:39:7e:d2:52:fa:a4:3a:
c9:48:2f:16:0a:46:71:69:b8:fb:d0:ab:14:9a:b8:7d:ef:cd:
fd:33:2e:86:a8:0d:dc:e0:9c:83:cd:59:b9:17:3c:49:1f:28:
1b:16:53:3b:0b:dc:2f:5f:2e:19:6d:66:d5:59:a3:da:78:2f:
b6:98:09:45:03:54:ce:37:1c:98:1f:1b:90:a3:25:10:ad:66:
1e:95:c9:12:38:2f:0f:10:7c:28:54:b4:6a:f9:f2:35:8d:70:
13:57:15:49:b9:25:64:9e:9a:d4:3f:09:9b:a8:13:43:2c:72:
b7:08:50:09:af:23:44:29:20:9d:0f:c0:ba:57:26:d8:1e:5a:
83:24:a2:04:9f:78:1f:6c:58:70:5f:1d:47:4d:d8:7c:b4:2f:
58:75:fd:bd:97:c4:24:f9:86:e5:79:aa:c2:35:21:fb:d4:f9:
7b:87:65:b3:2c:34:e9:ce:ff:0f:29:60:ba:78:08:83:d4:59:
45:bc:fd:db:7f:bf:e2:95:4c:5d:a2:23:49:24:3e:35:94:99:
f1:17:7e:58:84:4c:05:c9:be:ae:75:72:eb:2d:c5:de:eb:48:
92:80:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:30 2026 by rpki-client