Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: 5U772iFmHLbzcexTpN8Lw7gL1oT3XwynZaotcW0g3EQ=
Subject key identifier: 5F:B5:01:C6:2F:4A:F3:C1:F8:55:F2:AF:98:04:B4:D3:69:35:44:A2
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 01A0C3D6786AE08FD2FF1DACAC27F47F5BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1A6D
Signing time: Mon 21 Sep 2026 12:00:07 +0000
Manifest this update: Mon 21 Sep 2026 12:00:07 +0000
Manifest next update: Tue 22 Sep 2026 12:00:07 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: AkG/UA0LcsIU17NUehV+CwQ0oNctrTzmRFujkbAXlxg=)
2: ALvjuEagqkX_bxCENg8XKd0AAsU.roa (hash: IQ71j6lnnVzLcsftePg8wMiGMFkrq5Obvc/qjDtIg9o=)
3: UXTtsC8Oa5GFJq-oeBczgV235bU.roa (hash: QROFgHuLFM3vpOALM0ZjBn/r8WQThhQx6Zrl/aYuc/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:78:6a:e0:8f:d2:ff:1d:ac:ac:27:f4:7f:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Sep 21 12:00:07 2026 GMT
Not After : Sep 22 12:00:07 2026 GMT
Subject: CN=5fb501c62f4af3c1f855f2af9804b4d3693544a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:b2:ed:40:ab:09:b3:3c:bb:70:e9:56:67:
98:49:44:80:cb:88:4d:33:fc:ba:cf:ef:c7:27:08:
11:5b:4f:0f:cf:df:60:94:ef:56:97:0c:e8:76:4b:
f7:82:66:66:16:35:f7:d3:63:61:d8:1e:8c:3d:c8:
3e:0a:d8:d2:8c:b1:c5:ef:85:fa:c4:05:56:0b:b5:
3f:fc:cf:bc:a8:e4:b0:0d:9b:5f:bc:d3:e7:bb:5d:
87:74:54:23:e3:65:ed:66:1b:46:a3:9a:60:ea:89:
ca:12:bf:88:51:2f:ed:64:8c:84:2a:3b:0c:ed:d6:
3e:cf:dd:05:fb:5a:9c:4e:4a:5a:94:43:a9:c7:5b:
99:c6:e3:51:8e:bf:43:eb:e9:50:6a:20:0a:fc:69:
83:f6:3c:e6:aa:a1:9b:85:ae:9c:7a:8d:85:10:86:
5f:74:85:96:a3:81:a1:fe:5b:b3:93:07:b6:e3:56:
55:6a:ed:b3:eb:7b:c2:ea:2a:f0:d0:54:b9:f2:bd:
6d:a7:85:69:0e:64:23:b5:32:4c:98:97:1a:5a:1a:
17:d8:05:86:bd:77:51:c1:a3:93:b5:5a:09:df:d3:
be:36:f8:ea:46:97:29:25:19:02:ee:39:c7:6e:18:
c8:bb:40:bc:81:39:7c:7b:df:ad:ff:b8:80:71:58:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B5:01:C6:2F:4A:F3:C1:F8:55:F2:AF:98:04:B4:D3:69:35:44:A2
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:39:49:e9:10:ed:72:e9:d2:61:d0:6f:f4:69:fd:fd:9a:
f4:3c:03:1b:f1:71:8d:0a:03:59:04:ed:ee:81:9f:1d:06:00:
89:c7:17:39:7d:c2:1c:df:ce:66:b8:9a:b9:d5:c2:ed:24:45:
6f:13:a8:e6:21:04:17:ff:f3:13:3a:4b:2c:4b:d9:bc:a6:a8:
7b:a6:07:4f:94:8d:fc:59:4f:96:c2:e8:db:e6:cd:4c:7d:38:
4b:90:55:11:07:69:4e:52:36:0c:15:cb:61:c9:aa:39:fc:fd:
16:a2:56:7d:c9:24:ba:8f:bd:2a:31:fd:96:19:f3:bc:7f:8d:
ba:89:b6:59:fb:70:33:89:74:a5:2c:c1:63:94:6d:d9:a1:a4:
31:e3:79:36:eb:1d:a2:21:b1:92:f8:ab:82:ff:a6:6c:07:f9:
ee:89:7c:da:30:c7:ef:e7:22:bd:92:f5:dc:37:9f:5f:83:78:
1f:83:ad:ee:8f:a8:67:90:78:fb:68:f8:c8:21:52:8d:58:93:
83:66:01:5d:92:8f:14:64:68:00:20:5f:38:b8:65:70:42:46:
03:9c:13:92:69:55:40:16:19:c6:88:a4:96:5c:c5:9e:1f:db:
89:bd:d2:d3:e4:6c:a0:45:cb:ae:97:ab:df:de:b6:c8:e1:df:
b2:73:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:34:41 2026 by rpki-client