Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: nsGizvaly8fHizD4rrKOxEHOJ0RqwiCkIWwzIc/rq9w=
Subject key identifier: 39:FD:56:71:AF:B3:30:C9:24:85:CA:44:F1:AB:46:7B:9C:DB:CC:17
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 01A0C3697B30189741C7160D4535D16894AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 10:01:04 +0000
Manifest this update: Mon 21 Sep 2026 10:01:04 +0000
Manifest next update: Tue 22 Sep 2026 10:01:04 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: m2s8SuAEOf15hMwh5nJUOkiRqjcs6OkzXHqC4P0vovg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:7b:30:18:97:41:c7:16:0d:45:35:d1:68:94:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Sep 21 10:01:04 2026 GMT
Not After : Sep 22 10:01:04 2026 GMT
Subject: CN=39fd5671afb330c92485ca44f1ab467b9cdbcc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:ce:75:bc:6c:ca:c8:b2:0f:68:66:e5:21:
8a:f4:81:87:d2:66:f9:d2:66:19:0a:f9:e3:fb:ad:
02:b9:d4:30:f4:b9:c7:88:6a:6d:0b:37:49:a6:7a:
a4:53:77:2d:d1:50:97:64:99:1a:da:84:73:8a:dd:
0c:2a:c9:49:a3:49:3b:47:87:86:97:ab:98:0b:36:
ae:bf:4c:c2:47:bb:fb:54:db:39:bd:7d:61:b8:c6:
dc:b7:cc:44:64:68:88:37:ff:51:74:5e:b2:22:ef:
b1:4e:78:df:93:79:94:16:d7:dc:d5:21:a6:ce:08:
df:f5:b0:9d:9a:f2:58:37:15:c4:2f:03:ca:d0:8e:
6c:26:55:cb:e1:1c:fc:83:4d:5e:e7:72:a6:f1:0c:
66:b1:86:67:ee:b5:d1:78:3a:11:74:d9:65:81:d4:
3e:91:07:4d:74:32:19:69:25:3b:f6:ad:95:52:6e:
ee:d1:80:83:17:7b:51:3c:fa:26:63:46:bf:a4:37:
c2:63:5b:11:18:f1:e9:41:7b:7d:f4:1e:08:85:f5:
11:2b:f2:e6:94:7b:d7:ff:9c:97:d4:9a:e6:70:c6:
0f:06:52:1b:0b:76:41:cc:c5:8c:f2:5e:e5:a2:07:
20:1d:e0:e0:e1:db:ce:23:7d:d9:f0:d4:6a:10:4b:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FD:56:71:AF:B3:30:C9:24:85:CA:44:F1:AB:46:7B:9C:DB:CC:17
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:de:6e:cd:ce:25:23:9b:61:99:01:9e:bc:18:ba:9e:cb:0a:
fb:46:ac:51:96:40:68:7a:57:af:d8:b1:d5:6b:31:98:2c:7f:
b5:8f:8e:4b:30:41:42:02:32:0c:79:61:66:81:4b:21:c8:b1:
a0:68:f7:03:a5:c0:4b:66:97:67:b5:b0:7b:2d:3f:f0:17:34:
3c:92:c0:08:89:37:56:d8:fa:12:d5:a3:10:c8:30:dc:c5:36:
11:bf:1f:71:b1:b8:be:a5:26:9f:a4:fc:a4:7e:86:5a:b5:1f:
6a:f4:16:23:66:c3:c1:bf:33:e4:35:76:61:51:ad:66:c4:71:
f6:1e:2f:b6:00:19:12:b6:87:69:33:d0:ee:36:80:8e:e1:80:
92:7b:7d:84:b9:4e:df:0d:8c:1a:80:20:1a:3b:71:49:89:5a:
64:bc:16:a1:70:c8:3a:c0:2b:b8:32:04:45:b1:e3:9e:70:ba:
ec:4d:32:40:1c:13:cb:63:63:73:70:31:d1:c4:0e:44:e9:dc:
f8:49:db:42:2b:c2:1d:b9:97:70:af:13:23:3e:f7:c8:5c:79:
a7:b6:b9:14:09:77:8a:b0:90:2d:3a:8f:6f:1a:a4:83:fb:45:
b1:80:18:07:86:ae:06:95:86:86:78:d7:c9:ed:0f:b3:53:f5:
e8:04:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:42:29 2026 by rpki-client