Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: +KdFqmBIb2zHp8Suo5FJiWPx9fF8ZvtTG/gPQvpEn2Q=
Subject key identifier: BC:F5:C9:17:22:7F:62:27:A3:4C:72:CE:F7:D9:CD:AD:71:29:48:93
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 019CACEBA9B13BD176428AE07383368ECEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: 7Z7C+3t5DbddH39+/q6URO/qsmcsE1fFiCEmoC3e7MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a9:b1:3b:d1:76:42:8a:e0:73:83:36:8e:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=bcf5c917227f6227a34c72cef7d9cdad71294893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:13:e4:61:7c:26:99:9f:e5:e1:6b:57:29:
c8:f8:e3:29:1c:dd:7e:46:47:6d:3a:02:09:75:0b:
a8:a1:a8:0e:db:36:45:98:3a:91:79:be:56:8b:98:
12:77:78:32:f6:8b:a2:51:cb:86:e9:28:00:96:9a:
3d:58:10:4f:63:51:2b:de:7c:dc:41:7f:5d:13:7a:
0d:f6:42:80:03:5e:5b:da:1b:ce:db:61:5b:6c:4b:
bb:59:7b:3b:c7:12:4f:14:00:36:af:84:18:3e:8d:
e6:be:0c:cc:b7:ac:d3:20:03:85:4b:8b:88:41:ec:
37:ac:8e:6d:81:34:2a:46:27:f1:32:5d:48:26:50:
95:fe:19:08:13:b2:dd:ee:de:20:e6:ef:a7:5e:b0:
46:66:43:bb:e7:12:7f:06:2a:9e:99:fd:85:7e:f0:
57:25:36:4c:56:cd:0a:a8:ba:8f:6a:7b:8f:59:40:
cd:2f:fa:ef:20:20:51:a6:14:fc:b4:2d:ef:36:a4:
10:5c:cf:03:a9:e7:42:88:b0:09:14:49:4d:c0:4c:
89:4f:42:49:bf:97:59:13:7c:e4:18:ef:ae:db:ba:
8d:65:b6:79:4e:39:68:7d:e9:cc:a4:40:ef:0d:a4:
24:aa:b4:d8:a0:3d:84:84:93:a5:d2:b5:2b:51:3b:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F5:C9:17:22:7F:62:27:A3:4C:72:CE:F7:D9:CD:AD:71:29:48:93
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f0:f5:aa:c4:c7:f0:e0:82:f1:d3:5e:24:ab:0a:8a:06:5e:
12:5e:c3:f0:70:1a:ed:a1:66:86:a9:7a:c1:e2:20:eb:fe:b8:
83:81:24:22:c8:74:39:3b:d1:68:91:ce:68:19:63:a7:40:4f:
2b:3e:f6:8f:ca:ef:5a:ff:6a:07:9d:11:01:06:ef:9b:9e:3b:
e9:93:0a:4d:a3:aa:61:73:8a:8a:cc:ca:b7:57:71:4b:ec:a6:
a0:c6:4a:dd:f3:62:cf:53:51:20:9f:4e:76:75:c1:aa:78:08:
ea:47:21:2e:f8:96:55:fd:6a:a2:46:fc:4d:0f:9a:48:5b:19:
69:95:cc:bb:08:0f:b4:16:2e:be:21:18:88:94:2f:8c:55:88:
09:02:46:23:3c:e4:17:62:f9:f4:ca:92:e8:dd:a6:b3:eb:e3:
87:99:71:00:5c:06:ef:64:e8:17:aa:8d:40:67:47:98:8a:5d:
db:95:84:35:70:ac:81:83:33:6c:f2:63:d0:3b:d7:c7:d3:2e:
50:83:d7:74:2a:4b:74:e3:54:c7:c1:8a:e1:8b:51:e2:ca:39:
f2:43:69:9f:83:38:35:cd:81:5b:ae:6b:f5:46:67:10:62:16:
e7:c5:9e:ce:34:1e:2d:11:9a:7e:bd:94:78:87:6e:f4:60:a1:
03:7d:16:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys66mxO9F2Qorgc4M2js7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy
MGI4MzkwHhcNMjYwMzAyMDUwMDUxWhcNMjYwMzAzMDUwMDUxWjAzMTEwLwYDVQQD
EyhiY2Y1YzkxNzIyN2Y2MjI3YTM0YzcyY2VmN2Q5Y2RhZDcxMjk0ODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQQT5GF8Jpmf5eFrVynI+OMpHN1+
RkdtOgIJdQuooagO2zZFmDqReb5Wi5gSd3gy9ouiUcuG6SgAlpo9WBBPY1Er3nzc
QX9dE3oN9kKAA15b2hvO22FbbEu7WXs7xxJPFAA2r4QYPo3mvgzMt6zTIAOFS4uI
Qew3rI5tgTQqRifxMl1IJlCV/hkIE7Ld7t4g5u+nXrBGZkO75xJ/Biqemf2FfvBX
JTZMVs0KqLqPanuPWUDNL/rvICBRphT8tC3vNqQQXM8DqedCiLAJFElNwEyJT0JJ
v5dZE3zkGO+u27qNZbZ5TjlofenMpEDvDaQkqrTYoD2EhJOl0rUrUTvNCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLz1yRcif2Ino0xyzvfZza1xKUiTMB8GA1UdIwQY
MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt
Mzg5ZjkyMTk1YmViLzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi
LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/D1qsTH
8OCC8dNeJKsKigZeEl7D8HAa7aFmhql6weIg6/64g4EkIsh0OTvRaJHOaBljp0BP
Kz72j8rvWv9qB50RAQbvm5476ZMKTaOqYXOKiszKt1dxS+ymoMZK3fNiz1NRIJ9O
dnXBqngI6kchLviWVf1qokb8TQ+aSFsZaZXMuwgPtBYuviEYiJQvjFWICQJGIzzk
F2L59MqS6N2ms+vjh5lxAFwG72ToF6qNQGdHmIpd25WENXCsgYMzbPJj0DvXx9Mu
UIPXdCpLdONUx8GK4YtR4so58kNpn4M4Nc2BW65r9UZnEGIW58WezjQeLRGafr2U
eIdu9GChA30WLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:08 2026 by rpki-client