
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
File: MUY2acKBF1OVOAySpRzx_f_ukF8.mft (raw, json)
Hash identifier: xmLaAlbMO6dNdsETir+BRY4BlXiHCCiaDpvLVghvwh0=
Subject key identifier: 64:E4:61:5C:8C:8B:CB:0C:96:A5:B8:C5:A2:A7:97:10:14:A0:29:63
Authority key identifier: 31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F
Certificate issuer: /CN=31463669c281175395380c92a51cf1fdffee905f
Certificate serial: 01A091340372567B06C7DE81B0202B9CFD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
Manifest number: 027A
Signing time: Fri 11 Sep 2026 16:01:40 +0000
Manifest this update: Fri 11 Sep 2026 16:01:40 +0000
Manifest next update: Sat 12 Sep 2026 16:01:40 +0000
Files and hashes: 1: IQtWki5ELUTgi2gsS7IO7ixd2mA.roa (hash: APtYFNUlkTrTGFr0t02Zs6yCyIMFrfeQaS9bMm7zHBU=)
2: MUY2acKBF1OVOAySpRzx_f_ukF8.crl (hash: LnC7aGXgyrl94N9gb8bPApNDbF7CrVAX5bpbptOuulc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:34:03:72:56:7b:06:c7:de:81:b0:20:2b:9c:fd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31463669c281175395380c92a51cf1fdffee905f
Validity
Not Before: Sep 11 16:01:40 2026 GMT
Not After : Sep 12 16:01:40 2026 GMT
Subject: CN=64e4615c8c8bcb0c96a5b8c5a2a7971014a02963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:c7:e0:28:54:29:75:98:db:6a:d9:3c:b3:
bf:e6:40:c6:cd:fd:ee:f7:54:2b:3f:b4:9b:d5:ef:
a0:5a:c7:f2:42:f7:f9:cc:36:78:a5:77:f2:c7:c5:
54:0c:29:be:09:73:a9:9f:cf:3c:4e:8c:3d:a4:cc:
f5:d0:b6:ec:56:be:1a:fe:14:83:52:97:fb:81:71:
84:8e:68:15:0d:04:51:ca:ce:d0:4b:e9:63:e9:72:
2b:f3:22:b5:2c:fc:b3:46:1b:b7:9d:93:76:50:34:
00:68:3f:f8:d4:23:d5:8f:4a:53:a2:27:4d:b8:cd:
31:a7:28:e6:6f:c5:a7:43:04:67:83:ca:0a:35:65:
3c:12:e3:cb:aa:0f:17:b2:ee:c1:2a:a5:cb:04:aa:
17:d2:58:fd:51:ad:3b:9b:68:c1:dd:e7:fe:8c:f1:
60:eb:47:b7:ca:28:94:bd:0d:2d:cf:20:23:6c:a1:
41:e1:0b:88:63:ac:e2:72:56:4d:44:24:52:26:3b:
07:79:78:82:fe:ad:9d:5e:c9:24:6d:cc:1e:43:94:
82:21:c5:70:4e:85:51:ca:d4:af:07:dd:43:c7:a8:
70:d2:b7:57:ea:ce:dd:f1:27:ce:9e:70:1d:bf:3c:
aa:f4:1f:f5:5f:a8:4e:a9:3c:ec:ba:52:03:1f:9f:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:61:5C:8C:8B:CB:0C:96:A5:B8:C5:A2:A7:97:10:14:A0:29:63
X509v3 Authority Key Identifier:
keyid:31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:52:8f:aa:e3:ee:99:04:4c:43:7f:92:22:ba:52:0e:51:a7:
97:75:49:d8:65:1d:bb:4f:02:e3:4f:67:eb:98:37:f3:c1:21:
6d:85:e9:f9:3d:1a:42:90:96:f8:9b:bb:b4:cb:31:76:73:1e:
ad:a0:33:eb:c4:98:84:66:6a:8e:4e:46:c5:18:47:65:7c:fc:
1f:35:cf:4b:0b:3a:e4:e5:00:b0:99:48:d7:df:15:9a:cb:cb:
9b:50:74:76:eb:76:9c:43:ee:01:9d:eb:73:cf:5d:ec:f8:67:
19:7a:95:a5:be:51:3e:ca:77:47:ce:f7:ea:b0:c7:ed:42:ba:
a0:6c:98:c2:79:bb:04:1c:a8:97:57:69:f3:28:11:b5:48:f5:
2b:6a:9f:c5:3c:5b:02:f8:93:bb:e9:2d:05:a2:25:a6:ab:ba:
bc:9b:b9:0b:88:75:91:cf:0d:c9:2b:8c:0b:f3:0b:e9:12:e2:
7e:6b:9d:a5:08:e5:fe:c9:f3:64:c0:16:d1:ce:19:9e:ff:90:
92:d3:71:d3:7c:0e:00:92:6e:dc:84:ba:9f:82:48:40:ab:de:
73:18:07:9b:2c:b7:ee:be:d1:98:02:60:70:a4:6c:ac:58:95:
f4:98:33:62:58:f3:3e:fa:d6:2e:9e:4b:58:e3:71:b5:33:a5:
ad:32:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:36:23 2026 by rpki-client