Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: TqqmJTjmRhz3Wodp23/rqU/L9kYIHs6DzbuV03DfoLE=
Subject key identifier: 9A:B4:99:5A:E0:31:0D:E3:2B:9E:F3:9B:56:11:9B:B8:58:94:FF:B4
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 019D99D0E9D350145DD6361049AE30E7C853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: 39Zeghjdsro3Nkj91LxUDtRtA2Ekt8RowA1Fr6SK+Fo=)
2: dkCET2TsQcDN0c2dtertiEUqhPc.roa (hash: UbBALHBb0UI7Hqy8fBR1ma0BVv2xaYRMtaFsCVJRBPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e9:d3:50:14:5d:d6:36:10:49:ae:30:e7:c8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=9ab4995ae0310de32b9ef39b56119bb85894ffb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:65:0d:30:b9:50:83:8c:af:01:4e:2a:a6:
22:06:08:e8:9c:df:42:e3:06:67:ca:b2:7c:e8:9e:
62:3c:78:71:b8:00:ff:20:c3:df:a0:b8:8c:95:59:
d3:00:3a:25:71:cf:2b:18:46:6b:06:c3:7b:15:0b:
42:46:7a:db:f2:01:45:ca:90:78:48:7d:09:4d:1c:
f8:f6:f1:2b:5b:1f:8c:6d:22:79:eb:e1:4f:f0:7a:
ea:cd:51:5b:39:08:8b:d3:4a:96:e3:3e:ff:d9:6c:
7a:99:c2:fa:18:68:ff:e7:fc:a6:3e:95:ea:20:8d:
ff:4d:eb:f9:ed:eb:0a:f2:e9:95:bb:f0:2d:68:5f:
17:64:92:ec:3e:ad:d5:53:39:b2:d1:89:e5:6e:ea:
b6:7b:5b:f9:8c:d7:79:14:26:ed:45:46:cd:62:c2:
7d:84:99:4b:d8:21:a6:e4:c9:a6:f2:5c:85:7c:3c:
f3:67:79:08:48:52:c3:d0:16:8c:6a:14:8e:2d:11:
9a:40:c8:07:83:7f:47:97:fc:85:49:a5:33:6f:26:
e4:6c:37:bf:3e:d6:25:82:7a:c8:de:98:c8:83:8a:
3a:f9:7d:21:07:06:1e:8d:83:5a:42:b0:f3:a8:aa:
62:41:d7:58:68:ee:53:d7:2e:e2:74:b6:ad:66:78:
aa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:99:5A:E0:31:0D:E3:2B:9E:F3:9B:56:11:9B:B8:58:94:FF:B4
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a0:7f:c9:0a:6d:cd:47:d2:3a:84:01:45:3a:5f:57:1c:04:
f4:84:c6:e5:d6:ef:79:e8:f9:37:63:3c:cb:e7:8f:db:9a:22:
5a:58:82:47:7b:b2:54:ed:24:ae:77:cb:8b:06:0f:2e:da:32:
ef:50:4b:f9:8b:d8:73:b0:71:38:f3:0c:b7:cb:ff:68:dd:f3:
04:02:0b:57:1d:5e:6f:ca:a4:49:5c:f1:40:6b:32:22:bd:81:
15:be:59:af:76:0b:0d:67:a6:55:02:e8:82:f8:9f:c8:bb:00:
c6:f0:71:36:74:4f:ae:76:a6:f3:9c:a6:e8:9c:75:33:07:0a:
7d:d8:9a:7f:b7:9a:bd:d4:62:17:0e:76:06:f6:10:78:45:ac:
15:b6:57:63:af:2e:98:07:e8:f4:3f:30:c2:b4:45:63:e9:36:
2d:c9:c5:25:c6:d6:e8:32:71:3a:ec:97:24:a1:a3:51:a9:1b:
e4:67:1f:5f:8a:e0:66:81:ff:a5:88:f1:b8:2b:19:41:c6:b9:
9c:21:37:52:e0:ca:3b:ac:a1:24:07:4a:a4:44:2a:84:83:5e:
60:c5:90:64:b5:f3:79:40:c8:bd:c3:f9:c4:a2:ab:02:38:a2:
65:6e:4d:27:9b:26:6b:45:68:d7:2d:0e:41:b2:8b:3e:d5:ec:
77:38:87:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0OnTUBRd1jYQSa4w58hTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4
M2EwNTgwHhcNMjYwNDE3MDUwMTM4WhcNMjYwNDE4MDUwMTM4WjAzMTEwLwYDVQQD
Eyg5YWI0OTk1YWUwMzEwZGUzMmI5ZWYzOWI1NjExOWJiODU4OTRmZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZRlDTC5UIOMrwFOKqYiBgjonN9C
4wZnyrJ86J5iPHhxuAD/IMPfoLiMlVnTADolcc8rGEZrBsN7FQtCRnrb8gFFypB4
SH0JTRz49vErWx+MbSJ56+FP8HrqzVFbOQiL00qW4z7/2Wx6mcL6GGj/5/ymPpXq
II3/Tev57esK8umVu/AtaF8XZJLsPq3VUzmy0Ynlbuq2e1v5jNd5FCbtRUbNYsJ9
hJlL2CGm5Mmm8lyFfDzzZ3kISFLD0BaMahSOLRGaQMgHg39Hl/yFSaUzbybkbDe/
PtYlgnrI3pjIg4o6+X0hBwYejYNaQrDzqKpiQddYaO5T1y7idLatZniqswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq0mVrgMQ3jK57zm1YRm7hYlP+0MB8GA1UdIwQY
MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt
NmFjMWFmZjM2YzA3LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3
LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKB/yQpt
zUfSOoQBRTpfVxwE9ITG5dbveej5N2M8y+eP25oiWliCR3uyVO0krnfLiwYPLtoy
71BL+YvYc7BxOPMMt8v/aN3zBAILVx1eb8qkSVzxQGsyIr2BFb5Zr3YLDWemVQLo
gvifyLsAxvBxNnRPrnam85ym6Jx1MwcKfdiaf7eavdRiFw52BvYQeEWsFbZXY68u
mAfo9D8wwrRFY+k2LcnFJcbW6DJxOuyXJKGjUakb5GcfX4rgZoH/pYjxuCsZQca5
nCE3UuDKO6yhJAdKpEQqhINeYMWQZLXzeUDIvcP5xKKrAjiiZW5NJ5sma0Vo1y0O
QbKLPtXsdziHLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:44 2026 by rpki-client