Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: fJd3SDyd7gKwbxoCPcPZ5ZzaS6TH92lDYLw7A1A0HCI=
Subject key identifier: 54:14:AD:1B:2D:13:C6:71:42:E2:54:D2:04:38:F5:76:5F:E0:4E:C8
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019CAAC6909A699612AE8C9E16E4C11A19CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:05 +0000
Manifest this update: Sun 01 Mar 2026 19:01:05 +0000
Manifest next update: Mon 02 Mar 2026 19:01:05 +0000
Files and hashes: 1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: gFAr6HuF67Pmhctn64fnYtlkTmXUxuPuUbUhlxJIQj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:90:9a:69:96:12:ae:8c:9e:16:e4:c1:1a:19:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Mar 1 19:01:05 2026 GMT
Not After : Mar 2 19:01:05 2026 GMT
Subject: CN=5414ad1b2d13c67142e254d20438f5765fe04ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:b9:92:0e:63:e9:ca:c5:ab:29:2d:9a:79:
24:18:55:5c:73:f0:22:17:17:04:84:5d:78:48:ae:
e9:5f:b6:4d:bc:01:92:fd:f3:6e:53:8c:cb:f5:11:
b2:59:7b:08:a8:57:60:71:04:05:a2:85:ee:75:ab:
81:15:e2:79:1d:ce:01:89:00:77:75:78:3c:4d:02:
64:e7:4a:d6:8a:eb:a0:8a:4d:74:70:d7:24:5e:a1:
92:00:3e:34:7f:93:9e:15:d8:b6:84:12:9c:01:07:
cb:05:4d:a9:1e:94:e4:8f:b6:05:29:e8:c0:30:02:
fa:1a:ee:fc:5e:ab:59:b9:1a:40:26:71:75:ff:bf:
67:55:1f:ce:e4:e4:47:a2:d5:a7:af:51:3b:ab:b3:
e4:c3:1d:30:4e:a3:f7:a8:f0:58:d3:95:14:0c:34:
cb:fc:9c:0e:77:d0:58:49:5c:82:f3:58:ab:0f:03:
43:67:91:08:5d:e7:60:69:81:3c:c2:d3:c4:79:94:
bc:8e:6b:cd:0c:80:91:69:af:28:09:40:ff:a3:b8:
69:c2:cc:69:e9:de:9c:92:9a:3e:d8:b2:b7:49:e5:
1d:b4:59:aa:e4:f7:fe:81:86:fc:4d:1a:e8:93:dd:
2a:c6:e3:8e:9d:8d:6f:d3:df:fb:b4:31:7a:10:99:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:AD:1B:2D:13:C6:71:42:E2:54:D2:04:38:F5:76:5F:E0:4E:C8
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:33:62:7f:0a:da:18:53:43:98:5b:29:38:52:90:28:86:c6:
9c:34:a5:05:81:54:9e:c1:85:f8:2b:3b:f0:eb:23:36:3b:d5:
47:1e:62:e5:20:8b:0c:ee:57:3b:fa:82:f0:f8:47:6d:84:3d:
03:7d:5d:d9:af:df:30:9e:b9:2d:4d:33:28:0a:f9:4c:b8:c7:
4a:85:67:12:0d:4e:48:8f:17:ca:f6:3e:3d:05:ff:4e:49:bc:
1a:2f:11:43:01:05:04:05:4e:53:25:e8:18:7a:50:a0:d1:7a:
0a:bd:0a:11:b2:e4:e4:0d:64:57:f1:7d:65:7b:33:cb:ea:6b:
c5:80:c4:9a:cb:4b:4e:1e:2d:62:f8:2f:da:80:3a:8e:a9:73:
60:33:0e:09:c3:9e:13:3d:28:05:27:39:3e:a1:bc:b9:56:65:
fb:c6:94:9f:56:c6:07:b3:66:55:32:6e:5d:bf:82:fd:3d:bf:
83:26:e8:e4:4a:75:31:de:c4:0f:0f:45:fe:3a:98:f3:b5:72:
c0:9a:8e:6d:a7:8d:31:e9:d8:bd:a5:3b:f8:97:e5:b9:06:da:
f4:c1:e4:a5:2e:9f:20:7c:ca:47:ce:7e:02:9b:e5:14:49:11:
2d:56:14:8f:c0:b2:c5:18:1b:de:82:a2:ee:0e:75:8d:ef:35:
55:9f:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:00 2026 by rpki-client