Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: AGEVG7fSsdzknQaBn73IOrm5Cy7R7FJYG3q3jCQ03w4=
Subject key identifier: 34:CC:25:43:67:C0:A6:17:16:6F:A8:A5:AD:9B:45:14:0D:5F:05:39
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019FA975BF32CC7CF8EAC2866026BD654D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 16:01:33 +0000
Manifest this update: Tue 28 Jul 2026 16:01:33 +0000
Manifest next update: Wed 29 Jul 2026 16:01:33 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: uM+LGH9SlpUC9zN8q5heHOlOTsYZHgZU55L2zb/ViqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:bf:32:cc:7c:f8:ea:c2:86:60:26:bd:65:4d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jul 28 16:01:33 2026 GMT
Not After : Jul 29 16:01:33 2026 GMT
Subject: CN=34cc254367c0a617166fa8a5ad9b45140d5f0539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:ac:0b:fa:fe:86:6d:a2:07:f4:d8:e2:94:
3b:de:3f:22:ac:fa:52:fc:81:65:e1:32:63:3b:f8:
9b:23:e3:0a:26:03:ff:a1:d8:54:d7:d0:d9:44:2c:
2e:79:ad:52:01:60:8a:ca:6b:11:45:89:79:92:19:
cf:53:bb:c8:61:0e:46:e1:68:a2:cb:e7:26:29:ac:
2b:2f:11:86:ca:21:8d:c5:54:3b:4f:c3:23:dc:7d:
01:b6:d4:50:60:45:cc:ab:2b:cc:f8:a4:f7:17:f9:
f5:f3:3d:f2:4d:c8:78:f3:62:f9:9b:b1:e2:80:32:
2e:59:64:53:0c:02:96:da:11:3d:a0:53:ca:f8:56:
35:29:6e:ec:9a:74:47:ee:e1:c4:93:86:d4:51:8b:
eb:64:f3:62:39:f3:dc:5a:a1:94:55:43:f5:09:97:
28:c1:97:83:aa:63:37:b2:d9:2d:6b:18:c8:7b:e9:
af:af:5f:a9:ff:5f:4b:fd:6d:31:81:84:86:fd:12:
af:17:ed:c9:6e:ca:d9:b4:19:46:89:bb:d8:c2:d4:
ae:1a:b3:fd:1f:42:1e:f1:10:df:76:50:84:d6:4c:
da:83:91:fb:fe:80:1c:b8:46:9e:f7:eb:27:e5:32:
b3:17:e4:0d:a7:d2:9e:97:1a:bb:1c:98:55:e4:2d:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:25:43:67:C0:A6:17:16:6F:A8:A5:AD:9B:45:14:0D:5F:05:39
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dd:f8:33:60:ed:99:ad:36:5f:db:fb:4b:ab:cd:08:7c:57:
86:55:00:df:01:67:24:28:a7:d2:ab:36:52:2e:0b:74:03:87:
78:95:84:c2:a4:2f:80:2f:06:68:8f:78:de:24:b0:6b:99:1e:
d0:c3:4d:6d:5c:1b:28:d4:14:a1:65:dc:28:6b:6e:56:2f:dd:
f3:9a:a2:5d:6b:6e:56:a7:07:39:aa:49:16:99:42:51:33:30:
23:36:9e:00:33:0a:17:48:ec:92:90:e1:12:47:01:b2:36:0c:
11:e9:58:4f:c7:60:7b:46:51:91:f7:e3:6b:54:88:ec:19:8e:
cf:43:68:5e:31:50:fd:c0:70:c6:fd:bf:50:49:e8:1c:d5:1b:
e9:74:33:52:6a:eb:9b:7d:8d:33:40:de:46:e7:d5:fb:92:61:
03:f7:d1:c7:41:a0:a2:4b:b1:2a:d6:69:c6:47:57:f3:8d:14:
f9:3c:01:83:f0:e8:6a:62:44:1c:7f:38:06:65:b6:a1:22:39:
18:0e:53:67:a6:a3:ca:31:4d:b3:1f:05:92:15:87:8a:5a:97:
88:e2:77:ce:fe:52:b3:bb:ba:22:a9:0d:be:91:04:01:98:63:
0a:66:60:52:70:10:04:c0:30:49:7d:3f:22:5b:c7:60:0d:a5:
19:52:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:06 2026 by rpki-client