Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: 6S49B3prDF1SgWOzUgZ8/kFD1VOCct/W9h/Edt4ykXY=
Subject key identifier: 92:43:10:3B:1A:B8:09:B2:EC:9E:36:C0:C4:37:CA:B1:C2:D2:5B:9E
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 019F18675FD1B86D9AB2134ABD1C386A1570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 08AC
Signing time: Tue 30 Jun 2026 12:00:55 +0000
Manifest this update: Tue 30 Jun 2026 12:00:55 +0000
Manifest next update: Wed 01 Jul 2026 12:00:55 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: 5iJdQzxEYyJ9az6Hy3ZvEVbCXGjFkp+g8YDkGOEif7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:5f:d1:b8:6d:9a:b2:13:4a:bd:1c:38:6a:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Jun 30 12:00:55 2026 GMT
Not After : Jul 1 12:00:55 2026 GMT
Subject: CN=9243103b1ab809b2ec9e36c0c437cab1c2d25b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:40:ac:fd:b8:86:dc:7e:91:f3:37:e3:65:
59:a6:88:a8:8c:f8:a3:9b:2a:43:94:7e:63:63:e3:
85:62:40:9c:84:3c:1b:bd:ff:2f:9e:f1:e7:6b:9f:
b9:dc:a0:ef:bc:5e:bd:7c:43:f8:cb:27:cd:de:02:
16:78:f5:12:a0:ce:ac:ce:4e:4a:76:40:ad:1c:86:
1d:75:ab:89:b2:c9:08:09:28:3f:61:20:ec:b1:21:
c0:90:5a:bd:ff:80:2c:82:fe:0f:80:60:82:36:6a:
64:b7:30:5e:13:02:85:c0:d5:87:68:47:39:b0:cd:
90:56:46:eb:fc:6b:18:b0:49:e5:b0:b5:7b:10:46:
12:44:e1:d8:b4:5e:a2:e5:7f:c0:dd:31:59:5c:af:
7a:52:3b:e4:35:7a:59:bb:0c:5f:a3:24:ec:22:09:
af:c3:9f:f7:0d:c7:4d:ef:14:b2:46:52:da:99:4e:
30:67:86:27:cf:b6:4a:9d:22:5a:a5:5e:d7:36:5c:
2b:99:2d:66:ac:f9:e7:8e:2b:77:6f:2f:b8:c6:19:
9a:5c:06:30:cf:7b:b8:fd:66:73:0f:af:5e:51:1e:
f1:54:14:69:79:8c:da:67:d2:66:81:d3:ed:99:97:
b0:69:96:b0:cb:e3:49:2f:3d:e9:ed:fc:54:bc:28:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:10:3B:1A:B8:09:B2:EC:9E:36:C0:C4:37:CA:B1:C2:D2:5B:9E
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3d:6f:d8:6f:e3:e9:44:55:83:dd:e0:3f:61:13:ca:af:01:
69:4f:d5:af:03:ce:d6:bd:b9:91:e0:05:d2:c0:63:ea:88:86:
c0:e2:09:60:5c:91:79:81:6a:23:c6:0d:e6:d9:96:3e:1d:43:
65:75:0b:e5:15:18:f0:4d:54:c8:9a:6f:9a:48:84:e7:43:79:
f0:c0:34:0a:76:44:46:99:44:fe:29:0e:eb:94:9b:69:7d:a7:
60:24:51:72:0a:a5:ed:01:a2:2f:0b:85:35:66:90:d7:dd:af:
1c:1a:b3:02:3f:5f:76:88:64:7e:d8:92:27:9e:12:77:28:47:
89:86:4a:67:34:be:94:08:fe:47:dc:24:ef:b0:27:a3:d5:be:
83:74:af:bf:f4:ba:f7:61:1b:c6:3f:39:fe:38:4c:13:08:cf:
04:d5:59:d2:db:f4:8b:bc:1e:6b:28:73:b2:9b:cd:9b:af:c9:
7b:ea:2b:c6:9d:f9:43:4b:31:db:4b:f8:7d:a6:46:e0:98:4c:
d4:38:f6:7d:0f:5c:52:62:36:0d:08:b3:29:0f:37:a0:48:30:
68:54:83:25:1e:32:f2:c8:cd:06:ba:81:0c:2d:e5:3d:2a:2d:
e9:f8:e5:d8:e0:13:ac:f0:1c:dc:44:4c:35:7e:54:96:83:2b:
7c:46:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:45 2026 by rpki-client