Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: u0+BSJlc7d+b+0MghP6zFEn0N5cqU448TDiwuswkS40=
Subject key identifier: BB:6F:D1:45:25:D3:42:D8:D5:7D:60:35:D9:06:85:9A:F5:E6:36:18
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019EBFC7FDCE28332E1A02A7889FC75F45DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 07:00:15 +0000
Manifest this update: Sat 13 Jun 2026 07:00:15 +0000
Manifest next update: Sun 14 Jun 2026 07:00:15 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: rsSDcIhze/f45cD5dxmF/RhAa+S7NqnAuKGBBAX3MA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:fd:ce:28:33:2e:1a:02:a7:88:9f:c7:5f:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jun 13 07:00:15 2026 GMT
Not After : Jun 14 07:00:15 2026 GMT
Subject: CN=bb6fd14525d342d8d57d6035d906859af5e63618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:29:fc:52:38:5d:79:28:3a:c7:41:a8:56:
1f:20:10:03:74:8a:7e:74:0a:9d:d7:4e:aa:9f:34:
de:c9:6b:7e:fa:b8:6d:8a:92:31:62:e7:b2:3a:1a:
ce:13:fb:16:b0:84:7e:b5:86:47:7d:91:53:4c:31:
61:0a:b3:79:dc:50:bc:4f:5f:79:fc:1f:05:55:5e:
3b:e1:96:eb:3d:21:d5:d7:9e:a3:f7:5b:21:35:dd:
0a:fa:50:5e:2f:5d:d4:90:4d:b2:e9:8c:a1:25:08:
35:f3:fd:9c:62:68:fe:a7:49:7f:04:01:b5:51:05:
d0:79:e9:1b:e0:70:c3:6b:5a:40:c5:c5:22:1d:a7:
41:75:14:8b:15:3a:9f:9f:26:01:20:f2:ab:05:c6:
d1:a1:bf:23:30:e0:3a:1b:3c:10:46:bd:13:9e:8c:
83:11:32:fb:ed:87:85:21:cb:d7:bf:eb:c7:f4:05:
d2:f7:dc:a4:e4:f4:b9:a4:c3:f6:c7:1c:1f:f1:02:
54:af:2e:ae:a5:58:63:83:f6:89:e0:2f:b4:65:5b:
e7:ca:e5:61:dc:f9:13:f0:f5:3c:e3:8b:69:b0:be:
3f:eb:e2:f7:0d:db:30:1f:7e:39:f4:ed:05:fc:e3:
2c:d2:2a:72:49:f2:7a:53:9f:a5:78:3b:8a:01:bf:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:D1:45:25:D3:42:D8:D5:7D:60:35:D9:06:85:9A:F5:E6:36:18
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1b:9b:f9:3a:39:34:b3:65:b4:f5:8d:91:a5:7a:95:10:39:
8a:6b:c0:a4:2b:0a:f2:38:a8:b6:58:81:7d:36:c9:a8:a3:44:
33:70:ef:a3:20:63:5b:47:37:50:49:52:f9:38:72:47:99:8f:
ba:71:4f:04:af:0b:a9:b7:99:6c:38:4a:ae:82:76:f3:6d:ef:
46:10:02:2c:46:91:20:56:d1:bb:4e:ae:d9:3d:87:1a:84:83:
95:fc:0b:d1:a8:24:0d:c4:89:56:58:45:a0:28:ee:00:75:81:
cc:43:3a:3e:c0:e9:87:62:29:f1:ff:aa:fb:45:56:14:82:25:
fc:3b:3f:85:8d:b3:b4:14:7c:d8:87:77:10:6c:2a:41:82:be:
92:4f:4f:49:8e:92:3f:9c:58:85:3e:73:46:8a:db:a7:56:69:
be:60:03:ac:0f:85:ff:45:fe:86:c9:1c:ab:66:09:91:e4:3c:
63:b5:39:91:46:78:41:1b:07:76:52:41:61:12:59:50:33:9a:
dc:77:af:92:0f:6f:17:25:ee:c9:26:d1:86:8b:0f:6a:47:96:
26:78:4f:52:86:02:30:ab:04:d4:40:c2:70:13:de:4c:71:99:
08:97:df:5a:81:1a:96:3e:c1:98:c5:1d:9e:71:a7:f7:9e:29:
b2:72:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:58 2026 by rpki-client