Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: tAh77R51iNU9S/bCl6xzTXfoTe5vSZ5IhenlMUv07hQ=
Subject key identifier: 09:77:ED:39:AB:76:51:2C:D9:AF:B9:20:15:79:B4:B4:92:B5:4B:86
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019D9A3E364C1528976D7E215D38A9C478A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: UVRAUWZq62os+WP+wL6uMTEQL3e9TnylwZELlwg/T2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:36:4c:15:28:97:6d:7e:21:5d:38:a9:c4:78:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=0977ed39ab76512cd9afb9201579b4b492b54b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:95:d2:1b:ca:0e:76:b0:20:1a:11:fd:50:
dd:9e:1e:93:e0:54:35:f0:35:61:44:4e:c9:da:5a:
22:08:f9:ea:52:bd:0a:26:31:86:27:37:2b:ba:a0:
49:c0:83:af:51:fd:d8:0d:8c:95:e1:a3:c4:07:17:
8b:af:a4:4f:2f:f7:ab:ba:4a:a1:07:72:10:4e:a2:
5e:cd:68:7e:1f:b5:35:3b:3d:0b:d8:52:23:80:28:
8e:bc:e5:e4:0c:70:d6:48:4a:36:ec:9a:99:58:23:
27:6a:e5:67:19:2e:f8:7a:b4:35:d9:93:52:4d:b1:
85:ee:99:f2:f0:44:a1:eb:9f:78:3f:82:e8:4b:63:
c9:4a:54:04:b2:a2:7d:9d:f9:fd:fa:7a:60:e2:e5:
83:a3:b5:07:e4:55:93:06:f5:1e:18:9f:a2:c4:fe:
a1:35:03:54:5b:5c:22:b6:99:49:fe:07:09:55:6c:
a7:bf:da:ee:83:85:33:cc:89:26:d7:28:3d:85:73:
95:4b:d5:17:bc:84:89:52:f3:fa:24:29:1a:62:55:
47:5a:37:7d:79:b3:40:22:61:e6:51:2d:1f:b1:9e:
82:dc:d9:a1:b2:30:ca:0d:5a:46:13:a1:27:f8:b9:
31:ac:81:f0:56:9a:46:c6:f4:27:a4:aa:48:1e:53:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:ED:39:AB:76:51:2C:D9:AF:B9:20:15:79:B4:B4:92:B5:4B:86
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:59:e8:1b:af:e7:94:9c:f4:02:19:a9:08:cd:01:21:06:4c:
6b:2c:8e:f8:c1:98:f3:9f:73:eb:43:26:f5:20:8b:82:fe:2e:
c5:44:67:02:36:81:c1:14:ee:66:c8:53:1e:85:1e:85:a5:6b:
22:60:ba:aa:62:b4:de:22:1d:68:48:07:70:33:fa:90:5b:3f:
bc:5d:32:5a:1c:11:04:13:d4:ff:29:71:a1:b5:6e:c1:67:e2:
17:5b:a3:d5:9d:05:bb:a0:33:ae:e0:da:f3:0e:62:9e:02:5e:
09:b1:72:a8:5d:44:38:b9:0f:15:74:4f:f3:77:8b:96:13:d2:
e7:30:84:df:d4:91:f2:a0:5b:f9:51:46:a3:a1:77:2c:d1:e3:
b7:fc:30:9c:b8:f1:80:d0:bc:d2:eb:64:4d:2d:9f:ed:de:ac:
16:4f:cc:b0:af:60:a9:0f:80:cd:9c:85:5e:cf:63:ee:17:e4:
b4:c9:cb:a0:4e:66:83:ef:69:f6:06:ef:4b:b8:10:49:f3:b5:
fe:96:5b:4e:8c:d5:6c:83:45:f8:ce:1f:df:06:01:ac:14:d2:
9f:c0:ae:f1:90:7e:f0:c0:4b:4a:b6:da:13:ae:fc:82:90:3e:
da:6e:1e:c2:9e:19:3f:12:e9:da:5b:f0:14:57:e8:74:85:7f:
e3:4f:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:23 2026 by rpki-client