Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: ykPpnkGWwGIBFlpRLtLOdZY7auuVYL6pEFnFuo+XoGo=
Subject key identifier: 3E:D1:46:FC:05:73:5B:14:7C:84:F0:11:BF:82:DA:68:92:68:6C:FF
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 019CAA58C186EE2D7AC820B26A081A4306C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:09 +0000
Manifest this update: Sun 01 Mar 2026 17:01:09 +0000
Manifest next update: Mon 02 Mar 2026 17:01:09 +0000
Files and hashes: 1: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: iix52EYo3Ptp0iwFAVyccwmwknSeCyAISG4yJgEBcSg=)
2: dkCET2TsQcDN0c2dtertiEUqhPc.roa (hash: UbBALHBb0UI7Hqy8fBR1ma0BVv2xaYRMtaFsCVJRBPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c1:86:ee:2d:7a:c8:20:b2:6a:08:1a:43:06:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Mar 1 17:01:09 2026 GMT
Not After : Mar 2 17:01:09 2026 GMT
Subject: CN=3ed146fc05735b147c84f011bf82da6892686cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:30:6c:27:de:56:b8:0b:0a:0f:25:bd:6f:
69:1c:dc:3c:cd:35:73:26:98:b3:f6:ce:94:f3:60:
5e:2b:fa:56:ea:d0:d4:54:2b:c1:58:c3:81:1e:28:
bf:c3:76:6d:bd:41:31:17:26:6a:4d:58:da:a5:d9:
18:d0:2e:aa:96:a3:a7:34:b3:24:a0:da:2c:6d:1e:
63:bd:17:3e:49:32:4d:25:ce:d7:92:69:f7:5c:0e:
98:f9:77:dd:a7:27:24:18:94:4a:1e:bd:5b:4b:8e:
c2:28:7f:81:24:18:a0:b8:f3:fa:1a:67:3e:64:58:
d9:2c:a5:3f:b1:98:09:bf:30:70:58:87:10:a0:cb:
1d:22:cf:a6:f7:40:cd:61:cd:51:31:b5:bc:20:b0:
36:62:18:69:73:66:4f:c8:c7:58:dc:19:b0:72:0e:
f8:aa:60:aa:b9:cc:f7:3d:c3:03:40:9c:54:16:87:
ec:c5:ba:dc:a7:d4:24:3f:9d:e5:35:ba:26:a5:2e:
00:c3:5b:06:12:28:98:fc:a9:f3:80:2a:98:9d:87:
e9:01:9d:18:27:d5:39:40:e5:38:fb:73:0a:d0:0d:
13:7a:b9:4f:d8:f9:3c:41:94:9b:ad:49:79:31:cc:
19:fe:cd:a4:11:9c:43:c4:e4:d3:00:93:bc:75:94:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D1:46:FC:05:73:5B:14:7C:84:F0:11:BF:82:DA:68:92:68:6C:FF
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:87:d6:01:f9:12:b4:22:9c:3a:01:c1:84:66:68:1c:e6:
54:ae:05:ac:d5:ff:12:36:2f:66:cc:ce:10:fa:51:0d:e7:df:
eb:da:1e:15:e1:fa:2a:de:b3:8a:f3:d9:f6:43:17:3c:61:d2:
82:bb:41:a8:7c:88:54:d2:77:36:6f:c1:bb:d6:bd:cb:92:1d:
d0:53:0a:00:60:7c:c5:97:31:8d:fe:c7:3a:44:b9:ae:4b:d0:
cc:a3:3f:55:46:1a:26:28:79:90:af:61:a0:67:f3:e4:94:ed:
1d:a7:a8:bb:36:66:c5:c1:b1:f9:81:46:5b:54:42:d7:f1:96:
45:85:22:14:2e:60:1d:0f:f3:1d:2d:55:44:be:e8:7e:7c:fe:
36:b3:1b:c1:71:1c:23:2b:48:61:67:e1:36:d9:81:05:a0:03:
e6:1d:9e:eb:53:09:b4:ad:db:f3:eb:ab:5e:57:54:da:b6:07:
24:4b:e2:2f:c6:69:6d:d1:ab:00:dd:06:9e:dd:5d:4b:d6:5f:
79:0e:20:95:3d:ba:98:eb:45:35:68:46:9a:f9:f9:09:b3:c5:
da:1a:b1:10:78:0a:9c:ed:cd:52:78:ea:f7:14:9f:4a:07:fe:
2f:07:ac:eb:75:8e:ed:9b:3d:7c:6a:b8:98:86:4f:47:03:3d:
ad:10:7c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWMGG7i16yCCyaggaQwbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4
M2EwNTgwHhcNMjYwMzAxMTcwMTA5WhcNMjYwMzAyMTcwMTA5WjAzMTEwLwYDVQQD
EygzZWQxNDZmYzA1NzM1YjE0N2M4NGYwMTFiZjgyZGE2ODkyNjg2Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+QwbCfeVrgLCg8lvW9pHNw8zTVz
Jpiz9s6U82BeK/pW6tDUVCvBWMOBHii/w3ZtvUExFyZqTVjapdkY0C6qlqOnNLMk
oNosbR5jvRc+STJNJc7Xkmn3XA6Y+XfdpyckGJRKHr1bS47CKH+BJBiguPP6Gmc+
ZFjZLKU/sZgJvzBwWIcQoMsdIs+m90DNYc1RMbW8ILA2Yhhpc2ZPyMdY3Bmwcg74
qmCqucz3PcMDQJxUFofsxbrcp9QkP53lNbompS4Aw1sGEiiY/KnzgCqYnYfpAZ0Y
J9U5QOU4+3MK0A0TerlP2Pk8QZSbrUl5McwZ/s2kEZxDxOTTAJO8dZS6fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7RRvwFc1sUfITwEb+C2miSaGz/MB8GA1UdIwQY
MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt
NmFjMWFmZjM2YzA3LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3
LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGmH1gH5
ErQinDoBwYRmaBzmVK4FrNX/EjYvZszOEPpRDeff69oeFeH6Kt6zivPZ9kMXPGHS
grtBqHyIVNJ3Nm/Bu9a9y5Id0FMKAGB8xZcxjf7HOkS5rkvQzKM/VUYaJih5kK9h
oGfz5JTtHaeouzZmxcGx+YFGW1RC1/GWRYUiFC5gHQ/zHS1VRL7ofnz+NrMbwXEc
IytIYWfhNtmBBaAD5h2e61MJtK3b8+urXldU2rYHJEviL8ZpbdGrAN0Gnt1dS9Zf
eQ4glT26mOtFNWhGmvn5CbPF2hqxEHgKnO3NUnjq9xSfSgf+Lwes63WO7Zs9fGq4
mIZPRwM9rRB8WQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:05 2026 by rpki-client