Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
File: MUY2acKBF1OVOAySpRzx_f_ukF8.mft (raw, json)
Hash identifier: 9tI6dfp+vV6XDoQaBhgMvHylMYY1jpz+Q5QIHITYxCY=
Subject key identifier: 23:30:9F:A8:B0:1C:8F:E3:4A:B7:B6:89:E0:3B:04:00:7B:8E:FD:11
Authority key identifier: 31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F
Certificate issuer: /CN=31463669c281175395380c92a51cf1fdffee905f
Certificate serial: 019CE6A3D1302AF0DDEDC376966A71B6EA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
Manifest number: 94
Signing time: Fri 13 Mar 2026 10:00:21 +0000
Manifest this update: Fri 13 Mar 2026 10:00:21 +0000
Manifest next update: Sat 14 Mar 2026 10:00:21 +0000
Files and hashes: 1: IQtWki5ELUTgi2gsS7IO7ixd2mA.roa (hash: APtYFNUlkTrTGFr0t02Zs6yCyIMFrfeQaS9bMm7zHBU=)
2: MUY2acKBF1OVOAySpRzx_f_ukF8.crl (hash: j6BC91iZfepwMKCqm4VWqwiiAL3ksVYVCC5nWpndLss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:d1:30:2a:f0:dd:ed:c3:76:96:6a:71:b6:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31463669c281175395380c92a51cf1fdffee905f
Validity
Not Before: Mar 13 10:00:21 2026 GMT
Not After : Mar 14 10:00:21 2026 GMT
Subject: CN=23309fa8b01c8fe34ab7b689e03b04007b8efd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:9d:b0:ca:83:a4:03:16:47:b1:63:5b:ef:
c9:02:37:ee:c4:76:f4:44:10:23:58:85:d7:59:30:
f2:fc:b6:7d:16:1a:f7:87:4c:b9:fb:f2:3b:3b:03:
34:80:3a:c7:f3:dd:b1:d2:f5:81:27:b4:57:1d:d1:
3d:a6:6d:28:a3:31:9e:4a:92:7c:68:33:2a:60:1d:
b9:91:4b:41:34:7b:95:ea:09:4a:a8:78:6d:09:73:
85:26:52:4d:33:ff:f6:fc:85:a0:b1:72:01:05:fd:
ea:1d:2e:82:56:27:13:57:75:76:a2:df:5b:80:2c:
4b:d5:66:c8:86:a6:f4:64:66:0d:79:95:73:44:0e:
e0:75:c8:5b:19:6f:a9:db:b9:87:a2:a5:87:a0:f7:
2d:d0:a0:d9:13:6e:84:09:8e:1b:3a:e5:67:35:b1:
8a:fa:64:9a:d1:8f:40:70:49:7c:db:19:e4:32:58:
7b:4e:d7:27:3a:94:ed:7d:b6:bd:97:ba:e8:34:3d:
65:3b:25:c5:a6:fd:e8:80:0f:c2:3e:d1:49:1b:a2:
7b:17:15:88:5b:16:c1:83:f6:81:76:69:25:ab:89:
1b:34:3e:03:69:60:d8:a0:69:0d:5d:a4:c5:3f:51:
0c:72:24:ab:36:85:87:06:19:79:9b:82:63:c1:f3:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:9F:A8:B0:1C:8F:E3:4A:B7:B6:89:E0:3B:04:00:7B:8E:FD:11
X509v3 Authority Key Identifier:
keyid:31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9d:23:5c:13:2f:d3:42:41:d0:ea:0f:dd:d4:54:7f:09:b3:
07:d9:f0:b6:cb:99:8f:b5:c1:7b:49:d6:49:6c:37:7c:1c:83:
84:31:ad:2a:b0:a7:15:88:24:fa:ad:aa:59:60:c7:6c:0e:21:
61:15:15:2f:b1:a8:1c:81:4d:e1:c5:4d:5c:42:55:dd:c2:c5:
5d:9c:19:17:b0:3e:ad:47:17:b5:66:4d:04:ed:e7:46:5a:10:
55:dc:bc:2a:98:6a:82:e0:55:8b:12:81:51:9f:86:f8:65:3d:
86:c2:aa:56:05:05:c8:50:91:53:b4:e4:19:3c:51:c9:fd:61:
4f:cc:43:33:29:de:32:34:be:c4:04:fd:a1:89:b6:12:45:d0:
67:ee:c6:93:16:c0:9b:d9:c4:3c:0e:aa:e9:6d:23:cb:97:5f:
08:a6:43:21:66:36:ff:eb:ac:32:48:5f:80:ca:bb:28:fd:69:
24:e7:f3:68:a9:f6:51:b9:e9:7f:52:a3:8d:bf:0d:93:3f:59:
02:3c:bb:2f:5c:b3:63:bd:ef:04:c0:8c:98:d5:ea:06:b1:4c:
82:e6:f3:de:d2:45:64:2c:a0:de:9a:f1:3b:94:68:0d:6f:bd:
9b:88:81:e6:e4:51:6c:20:b0:f2:6a:0f:8b:93:94:f2:48:e2:
41:e0:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:48:44 2026 by rpki-client