Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: 7J99KrgECeKL587M8oUUT2W0CJvG1xB6Ar8i0fBc2JI=
Subject key identifier: 32:67:D9:C8:BD:51:F3:EE:79:BF:00:AB:3D:2C:AF:46:4E:BE:38:AE
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019D37533E77096A10B366A283325354C162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0A80
Signing time: Sun 29 Mar 2026 02:01:35 +0000
Manifest this update: Sun 29 Mar 2026 02:01:35 +0000
Manifest next update: Mon 30 Mar 2026 02:01:35 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: 9Nze2ur62CgH90vkakeme4z51cdjlL4ASmK1Ken6Abo=)
2: zh3jJi7VlgsCf1B8mSSIRkmxTfM.roa (hash: UL+DW0mVWjoP5JojLcH0dVPVuqkEZ0cepJzgkv7Gs7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:3e:77:09:6a:10:b3:66:a2:83:32:53:54:c1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Mar 29 02:01:35 2026 GMT
Not After : Mar 30 02:01:35 2026 GMT
Subject: CN=3267d9c8bd51f3ee79bf00ab3d2caf464ebe38ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:63:77:64:c0:62:bd:3a:c4:1c:d0:ac:dc:
d9:3a:df:a3:b0:2f:7b:a8:e8:bd:6c:5d:7f:41:19:
75:98:3a:20:33:7f:ab:7c:5c:26:10:32:d8:7c:19:
76:07:07:ad:88:24:59:6f:32:59:c5:cc:71:14:c2:
3e:17:fd:22:b5:21:39:1f:90:fa:97:f5:3b:f7:b1:
2b:38:0b:76:1a:a1:32:37:06:62:c5:ea:8b:16:3b:
19:4d:a6:9a:fa:87:a2:1e:00:8a:60:f0:51:f0:c8:
05:d5:ac:90:e7:e4:ec:b5:11:a1:e4:40:b5:8c:9d:
0f:df:74:31:f9:82:d2:ac:13:2b:57:a7:d4:96:30:
f1:c9:0d:fc:11:e4:14:25:04:3d:7f:46:20:a2:79:
0e:a4:8b:0e:ef:cf:65:e4:d2:e8:0b:4b:d6:c7:7d:
4a:c4:0f:86:04:1b:5a:c0:c4:8d:05:05:b8:53:d1:
b9:7c:47:c2:21:5d:2b:76:b2:b0:37:9d:0e:2f:ab:
f5:3b:c6:ca:d4:8c:a4:57:bd:40:49:56:f5:df:41:
35:2e:ad:6b:4d:3b:ab:82:fd:3e:10:b8:b5:ba:8b:
2f:bc:f7:d9:e8:ab:c7:f0:76:03:52:88:d0:bd:26:
04:84:0d:c9:51:d1:34:32:53:1a:7b:93:c3:c0:1e:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:D9:C8:BD:51:F3:EE:79:BF:00:AB:3D:2C:AF:46:4E:BE:38:AE
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c7:4b:03:04:77:79:3f:f0:0e:f7:6d:4d:a5:68:d1:a7:30:
27:50:07:e2:81:1b:87:2d:30:25:7b:9a:44:53:7a:bf:a4:6c:
ed:dd:d6:cc:52:ab:af:40:bd:f7:5c:4d:5b:4b:60:83:1d:0a:
ad:8b:de:eb:ce:bf:90:85:b9:6c:6b:bc:ed:e4:e4:c7:ea:bd:
61:21:09:4f:b2:87:28:10:c3:f8:16:8e:f0:7e:97:84:92:c7:
4e:1b:a2:75:fa:b5:c6:cf:50:4f:09:f7:ca:07:8f:7b:83:10:
68:37:ec:6b:de:fd:48:a2:75:c2:66:eb:5d:e6:24:2a:e1:70:
63:8b:67:26:54:47:8b:16:99:9f:67:7e:c8:99:96:09:a5:c9:
60:26:ec:46:87:3f:43:ff:85:b0:c3:1c:62:c7:d7:e9:8f:47:
5b:2c:b2:29:f3:dc:d0:08:7e:2c:96:bd:56:37:72:a2:31:1d:
1e:d5:13:ae:22:4b:19:1a:65:4c:ab:a4:5a:21:e1:98:e9:b1:
1d:97:15:f4:c0:47:d6:e9:49:06:53:c2:b9:d5:70:86:14:db:
84:41:15:a5:87:68:49:fc:f3:65:2b:a4:67:10:a1:1c:31:bf:
4a:ad:19:61:c5:73:ea:d3:e8:c5:c0:2a:61:f1:3e:71:e8:17:
6e:bc:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client