Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: Epty7N301hGy7XnvNSNzgqVh5Td3Jxd/Vm4W5hEkekg=
Subject key identifier: 7F:CD:28:E9:B2:5B:13:16:6F:C5:79:4E:51:1E:09:2F:4B:F9:CD:56
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 019DA41CD187A158760296FEB2DB013F1A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0FD9
Signing time: Sun 19 Apr 2026 05:00:45 +0000
Manifest this update: Sun 19 Apr 2026 05:00:45 +0000
Manifest next update: Mon 20 Apr 2026 05:00:45 +0000
Files and hashes: 1: ENxwjXTdbKTvs3cxszl-xyNLpXc.roa (hash: 47BjcSHsUkq+j3LunSdpEHT6VVnEgYALqU6b9V3eCd4=)
2: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: IEX5aPpq1ICzUrp+8zIQx766tK48jwI7/6vo2jgFrSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:d1:87:a1:58:76:02:96:fe:b2:db:01:3f:1a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Apr 19 05:00:45 2026 GMT
Not After : Apr 20 05:00:45 2026 GMT
Subject: CN=7fcd28e9b25b13166fc5794e511e092f4bf9cd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:b5:6a:30:86:08:9b:38:c7:b1:c5:4b:95:
37:ca:92:7e:49:39:f6:a2:05:bd:7c:e7:5c:fd:34:
90:38:94:68:d9:a2:3e:3f:29:02:dc:f7:8a:f9:6b:
40:75:59:02:da:7e:6c:b9:f5:32:ec:be:9f:ca:cd:
04:c5:e2:ce:37:f4:d5:b1:09:b8:99:06:c0:3e:8d:
47:7b:5c:5e:de:6e:c5:b4:31:27:39:fd:1f:a7:c9:
5a:3a:6a:b4:8b:55:89:6a:72:21:ce:85:2d:3c:e9:
a0:78:28:c0:2a:ab:09:2d:34:63:8d:b1:20:f1:58:
4c:32:ad:1f:31:0e:68:d8:64:4e:bd:a4:18:52:70:
ea:0e:70:01:e6:f6:20:10:9d:5c:46:e2:fd:11:99:
75:d8:55:5c:90:74:f3:12:20:5d:01:b0:15:28:12:
ed:c6:ae:1e:2a:11:1a:31:1b:a5:95:e5:37:94:4b:
c0:0a:e2:15:5f:69:66:4e:81:fe:03:36:bd:47:c5:
e9:1b:ce:7d:5b:05:a7:2c:02:64:fb:bd:76:01:55:
e6:e3:27:1d:1b:f0:2b:44:3d:94:89:bb:e8:7a:23:
45:b1:05:57:a6:d5:dd:2d:34:4e:b0:36:3e:e5:c0:
12:18:70:96:aa:39:b0:8f:f3:34:9f:97:9e:b0:43:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:28:E9:B2:5B:13:16:6F:C5:79:4E:51:1E:09:2F:4B:F9:CD:56
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:2c:5d:36:74:77:bd:47:8c:8b:f9:65:d2:fb:6d:65:47:
d7:07:e2:a2:d7:ca:e2:24:95:6f:9f:0e:c8:e0:15:72:13:47:
76:1f:42:13:41:39:56:52:f2:87:6c:61:d4:c4:c9:ea:23:b9:
55:da:42:52:14:8d:5d:35:9e:d1:d8:cf:1a:3c:1d:8c:f9:b3:
ea:57:58:95:43:ae:77:eb:bd:24:6e:ff:b6:cb:ca:a9:92:2f:
3c:5f:5c:75:af:be:ad:49:55:0b:ee:50:00:a1:e9:ed:e1:66:
a2:78:5a:93:95:29:71:df:93:9c:44:b3:62:2f:ef:ca:81:bf:
32:91:42:f2:7b:6b:f0:b2:7e:5d:cf:e9:66:f7:f0:b9:ed:0e:
f0:89:90:21:26:d8:2e:00:3a:a7:80:a7:1d:5e:84:b5:14:7c:
6d:f4:7f:a1:83:28:3a:5c:0e:d0:39:08:59:c3:16:d4:10:ca:
12:5b:bc:aa:41:23:e5:0e:fd:7a:03:0a:f5:79:1d:72:0a:f9:
46:a9:3d:b6:fa:f6:03:2f:6f:02:d0:b4:46:0f:e1:2b:79:65:
5d:76:55:5c:8c:00:2f:5c:ad:19:ba:00:80:a9:84:2f:d6:1e:
96:38:33:90:87:39:c2:9c:5d:5c:e5:90:cd:df:dd:ff:8a:cc:
50:f9:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:00 2026 by rpki-client