Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: 0MtPFh2sXmmecxfKQXVtmsHZcRCbi86DBP15EkPI/f8=
Subject key identifier: 2A:DD:48:EF:42:C8:42:54:22:3E:D4:F3:30:77:E2:E8:71:48:B9:99
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 01A1DDCC5618CBFD08E1BFC17ADF609FF9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 06:01:58 +0000
Manifest this update: Sun 15 Nov 2026 06:01:58 +0000
Manifest next update: Mon 16 Nov 2026 06:01:58 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: 7FZeyZJbpk1tdcQXB44/9S7sPIuQothtaSQVJ+k87ck=)
2: ALvjuEagqkX_bxCENg8XKd0AAsU.roa (hash: IQ71j6lnnVzLcsftePg8wMiGMFkrq5Obvc/qjDtIg9o=)
3: UXTtsC8Oa5GFJq-oeBczgV235bU.roa (hash: QROFgHuLFM3vpOALM0ZjBn/r8WQThhQx6Zrl/aYuc/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:56:18:cb:fd:08:e1:bf:c1:7a:df:60:9f:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Nov 15 06:01:58 2026 GMT
Not After : Nov 16 06:01:58 2026 GMT
Subject: CN=2add48ef42c84254223ed4f33077e2e87148b999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:46:5c:39:be:79:0c:6b:d6:5f:67:66:ad:
bf:4c:26:70:de:fb:a5:b0:c0:f7:49:f0:6c:09:d7:
91:49:70:80:ed:dc:66:2f:c1:63:87:e6:b9:d1:0d:
36:48:6d:4e:31:81:11:c3:da:54:09:bf:4f:4d:90:
0f:23:ec:7a:d4:34:29:c5:aa:ec:de:d4:48:10:27:
90:88:a5:fd:61:9e:63:83:0b:92:cc:b6:ce:0d:6f:
77:e2:78:84:25:04:0f:b8:f8:5b:25:0e:b1:4a:4f:
60:7f:b9:66:44:29:ea:82:ad:9e:dc:3b:e1:26:8f:
93:05:ce:4f:11:c0:60:07:ca:d4:dc:d2:0a:6c:08:
9f:35:38:15:5d:59:9c:99:66:47:a5:25:47:87:c9:
66:7f:89:a7:1f:1f:22:c2:e3:5a:95:70:0c:3f:72:
0b:a1:f2:22:e7:33:e4:4f:39:ba:15:65:91:55:5d:
b4:6a:b9:cd:e6:4a:ef:42:74:38:b0:c6:6b:1c:c2:
a8:f4:7a:4b:ed:f8:de:d0:7d:08:e7:3d:e4:eb:ef:
e0:c0:35:37:36:57:37:66:95:0c:40:50:ff:ab:4f:
0a:a2:23:b5:a7:a2:3d:00:cd:8f:9d:42:75:23:33:
5d:7f:06:e2:bf:e7:12:48:c5:9b:2b:ed:85:50:01:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:48:EF:42:C8:42:54:22:3E:D4:F3:30:77:E2:E8:71:48:B9:99
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3e:e7:eb:b1:5b:6d:55:2b:4c:44:d4:d1:aa:2e:85:a5:5b:
1f:49:03:f9:43:91:e0:81:c2:64:26:12:eb:4d:42:42:a5:4c:
b1:35:43:dd:8f:3c:8b:2b:9a:86:23:c7:03:d4:ef:a4:98:68:
28:2a:81:c1:d0:78:b5:ad:9c:02:a6:5f:07:32:61:7e:35:82:
c7:49:f8:6f:0b:9f:62:29:35:03:37:de:41:72:24:93:b6:f5:
74:f6:1e:68:4c:ef:8a:84:af:09:cc:39:87:65:c7:d1:d2:e8:
82:e7:13:ea:c5:fd:44:93:56:db:e4:45:41:71:8a:d1:e0:80:
9c:86:e9:7e:fb:f0:8d:d7:7e:58:fe:5d:40:a7:9b:b7:75:4e:
07:8f:1d:30:d4:09:d2:fc:7d:d5:d3:75:17:ee:8b:8f:40:57:
76:fd:22:a6:f4:25:7e:82:41:98:af:56:b2:6c:ee:8b:38:1f:
73:ac:e6:a7:09:54:1b:b1:98:ae:a8:d3:de:a6:5f:b7:86:af:
95:b4:ab:d6:f1:f2:cb:42:95:22:a1:28:7b:dd:0a:03:42:c9:
cf:f3:49:76:89:97:1b:be:7f:d8:a6:a6:cc:60:9a:35:40:31:
70:0f:0e:62:9c:06:c6:40:c6:b5:67:a4:cd:aa:69:de:24:5f:
ff:4c:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:26 2026 by rpki-client