Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: 73tXerspdp7BvvbN8boTqBcHhXOfgQ1P9lLU/lV8e2g=
Subject key identifier: A8:91:FF:12:A2:29:9C:D9:89:6D:73:88:A9:06:AA:ED:CA:68:E5:DF
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 019FAB2C1318868E4892A7595B000A317664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0F45
Signing time: Wed 29 Jul 2026 00:00:20 +0000
Manifest this update: Wed 29 Jul 2026 00:00:20 +0000
Manifest next update: Thu 30 Jul 2026 00:00:20 +0000
Files and hashes: 1: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: NQ8/hlqH/eut4xrVnkadB029BgHLsAKCXx1j3ute3p0=)
2: pMXoRrm1A-T70xPjALrZ4oMq61E.roa (hash: FsTM7joUHNqdKecmC2zVhM+EhuHDUQROQu4Azrsbbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:13:18:86:8e:48:92:a7:59:5b:00:0a:31:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Jul 29 00:00:20 2026 GMT
Not After : Jul 30 00:00:20 2026 GMT
Subject: CN=a891ff12a2299cd9896d7388a906aaedca68e5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:64:8a:39:eb:39:a4:1f:85:d6:58:89:9d:
df:b7:3f:59:72:98:87:96:a9:f9:6f:3f:26:97:e5:
e9:ec:1f:6a:71:f5:66:65:31:9f:68:17:52:b2:c0:
43:fb:44:48:2d:9f:49:41:91:bd:26:ba:16:a4:5a:
98:c1:f5:f6:e7:f0:2c:54:f5:7e:75:cc:f5:a6:55:
e3:2d:fb:24:5e:cb:4f:8d:9f:bf:0b:3b:0c:91:a1:
f4:b7:9a:58:e0:3e:78:97:23:6d:1d:81:67:21:81:
eb:f0:fe:0f:13:07:08:25:34:5e:b7:ce:6d:9c:2a:
e8:6a:d1:89:47:27:ed:1b:e9:4e:5b:a9:c6:58:53:
85:52:ed:59:79:46:11:43:6a:0f:93:83:cd:81:60:
64:3c:bf:ed:6d:4b:98:40:90:5f:19:e6:2f:8a:db:
fc:21:22:0f:77:39:f6:eb:8d:49:5f:dd:ca:67:f3:
65:e8:06:46:84:69:66:84:1c:fb:97:fa:fe:56:1c:
b4:80:11:89:a5:10:06:fe:43:bb:c2:fe:28:3f:47:
4d:0b:76:d9:93:a4:b8:eb:ad:af:a4:43:f0:38:3c:
48:bd:9f:d9:b0:be:86:9c:90:e2:31:03:13:ff:8b:
44:d1:45:72:c0:be:d8:51:4d:f0:71:06:88:f3:39:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:91:FF:12:A2:29:9C:D9:89:6D:73:88:A9:06:AA:ED:CA:68:E5:DF
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:45:72:27:b8:f8:1e:b5:b6:ef:93:5e:dd:e0:2f:8f:71:64:
9a:8f:15:0f:50:20:08:64:2d:1f:33:40:68:1e:04:48:fe:17:
97:f7:cc:84:a0:4f:9a:03:eb:6e:ca:23:b0:86:7f:f3:f5:6e:
0a:94:c5:cf:a4:b2:8a:f3:ea:42:ec:ae:3c:79:61:3c:34:ee:
e8:a2:5e:6e:5d:ac:80:46:fb:32:08:4c:0c:4f:ab:4e:a6:fa:
44:f7:cc:65:63:4b:54:b1:dd:39:f9:3f:a6:b5:b0:68:ea:30:
7c:d4:ff:79:7c:e6:f2:31:97:4c:04:72:b0:e3:62:08:59:4d:
ed:5f:05:ff:a3:b0:54:1b:9a:0a:3f:ab:fc:a6:44:22:05:ec:
c6:a5:32:68:69:8c:21:82:93:e3:af:73:d9:21:e0:cb:cb:79:
f5:5f:59:c3:26:0b:69:5d:99:e1:4b:f1:4c:57:e0:21:2d:51:
00:13:7c:e0:b8:1f:10:6a:f0:d5:0f:74:a3:b7:26:e5:f1:7a:
c3:3f:4b:7a:ce:c9:4c:0e:aa:8b:14:a2:6d:e9:29:79:bd:d7:
12:b7:6d:26:b0:3f:f2:d9:07:43:27:3c:d2:9b:85:f1:26:75:
26:3a:85:fe:bf:54:44:5f:6b:6d:5f:5b:b6:eb:e6:16:9b:ca:
58:c1:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:17 2026 by rpki-client