Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: aDAKsXSkAEhwNff7d8Qjm5spo9clIGPd+Nk6wmHnoMo=
Subject key identifier: B1:83:76:66:7F:AE:C1:5E:26:45:5C:A2:33:F6:B9:02:EE:01:E2:C1
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 019D9A749916329A0B627620C6617340378C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: hQPXJ9wClC3GH68g0rUqZZiUnC0+sXgSS3jvrnaUi+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:99:16:32:9a:0b:62:76:20:c6:61:73:40:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=b18376667faec15e26455ca233f6b902ee01e2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:a0:71:24:14:20:2a:9d:1b:45:ae:2e:96:
8b:91:99:87:76:01:04:9a:0a:a1:d0:91:0f:75:f1:
c4:ef:f9:8d:1c:e8:db:36:76:4b:92:80:7f:4b:38:
5b:df:98:4b:a5:a7:88:ca:8a:00:99:aa:03:71:3d:
e3:e1:7f:02:5b:e8:48:2c:12:63:8a:2b:4d:cf:6f:
03:b1:97:d0:f1:62:a6:11:08:f9:b3:b9:6e:be:85:
19:0c:de:65:70:44:89:66:01:ea:33:d3:0c:d6:17:
6b:86:50:35:38:9d:06:ce:f2:23:58:d4:40:99:9b:
98:81:d6:7f:cd:13:95:c3:32:32:f1:13:f2:b4:cf:
ea:23:e5:fc:94:03:94:28:aa:5b:ba:15:22:92:91:
51:ce:1a:55:61:50:0c:e5:74:23:16:09:d7:b0:95:
95:13:de:f6:4b:74:aa:a9:f3:f0:24:aa:5b:74:23:
be:ea:22:2c:4a:db:63:a0:77:d6:8c:7e:96:6f:33:
16:5f:0a:b6:6e:d2:fb:f4:41:3e:70:75:01:34:eb:
21:8c:3a:a7:94:dc:66:33:41:2f:0f:14:3b:72:89:
9b:ea:ce:01:3e:6b:cb:b0:83:04:1e:ca:a1:25:5e:
a4:07:ec:6f:a9:b4:e7:ca:a5:12:73:06:27:d4:8f:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:83:76:66:7F:AE:C1:5E:26:45:5C:A2:33:F6:B9:02:EE:01:E2:C1
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6a:d2:8e:6a:9e:33:3d:85:3a:5e:f8:1e:1d:34:c1:de:71:
fc:73:61:a4:bb:e3:ca:ae:06:5a:74:67:f7:13:b1:82:4c:74:
d6:85:46:91:6d:bc:fa:11:3f:62:9b:73:24:b0:f2:a6:b7:b1:
b3:58:5e:fa:28:b7:54:54:eb:06:cf:63:a8:c9:bf:e1:a6:a7:
89:f2:e2:e7:36:d9:56:2b:65:8e:19:8f:d5:37:06:04:b6:f3:
05:4c:03:3f:bb:82:27:dd:d6:e7:e2:28:1f:32:01:53:d7:ef:
08:2d:a3:c7:b9:c8:8d:cb:05:c3:34:c5:91:5f:e5:ea:1f:21:
74:f9:1d:0c:73:ea:fd:44:71:07:54:6c:ff:48:d2:f3:cf:2c:
d3:5d:b3:70:e9:15:fb:75:49:8a:d7:06:06:24:d2:92:5b:f7:
e1:84:44:62:22:c5:b9:6d:ca:a3:b3:60:9a:9c:5f:50:3b:a7:
4c:6d:4c:ae:8b:a4:c3:d1:3d:cb:57:e1:ba:3d:69:7e:c4:3c:
6c:f9:29:9a:04:68:0f:88:6b:af:b6:28:dc:83:5f:2d:6f:d3:
15:c5:49:a3:b2:6b:5d:11:db:33:ab:2e:c2:4f:53:43:02:17:
9f:86:d7:73:d1:5c:f3:50:6c:68:97:c6:ab:c0:e0:93:c7:36:
14:0b:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:17 2026 by rpki-client