Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: VhGb1eZUFluQPPB4DpfKTxE7HSJOyUo4ktt4RYcxHhk=
Subject key identifier: A3:90:E4:2E:89:1B:2B:29:DF:0B:C0:54:60:09:F8:2B:1A:F1:12:9B
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 019CAA591EB48EC43FA13AC7D8B7A609558C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0C68
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: 4x1TKBz_BI-V4dj9yOWPflsgBy0.roa (hash: AEyQ4d3oKadVqU+q8qpPHgCbs4RI3Y80TBihfli8Oxo=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: eSs1nG1aygXV/D8W86dclgCwnthhMWMikbCAbbtxqxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1e:b4:8e:c4:3f:a1:3a:c7:d8:b7:a6:09:55:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=a390e42e891b2b29df0bc0546009f82b1af1129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:16:7a:ce:f9:10:57:c2:55:8a:61:d5:29:
ba:52:88:ba:5e:87:ff:2e:c0:74:da:7d:af:3a:e1:
f6:73:d1:55:02:fc:72:d7:a2:e4:ee:01:1a:fc:90:
e5:30:c5:93:5d:63:3a:b9:53:07:a1:62:5e:8f:0d:
ef:15:19:c1:3f:28:45:39:c8:ce:a4:25:1c:a3:49:
19:67:5f:3d:99:32:4a:ce:ef:71:a9:4d:4a:df:14:
8d:5f:9c:cd:a7:a4:a7:35:30:29:1e:7c:24:99:68:
75:7c:40:55:b9:26:69:7e:e9:e5:b0:1a:55:0f:94:
07:df:36:51:f1:e3:14:7b:71:b8:86:41:9c:a0:e3:
a4:92:f8:f3:97:d8:d5:73:98:ed:27:bd:e3:13:58:
44:b0:26:31:84:dc:02:22:11:d0:26:2e:5a:d5:ee:
eb:ff:0e:f8:25:5c:b6:b1:20:06:ed:9b:a1:9d:a7:
7d:73:68:4b:80:84:e2:b8:03:85:f8:89:fa:2a:d4:
21:8a:60:7f:ac:0e:e9:77:63:88:dc:8a:a5:6f:6b:
c3:c8:3b:a7:f7:80:64:32:71:bb:a3:4f:c5:23:47:
38:0c:91:e5:05:33:a3:52:04:15:23:91:9c:b5:d2:
c5:d4:58:e6:f0:b2:d1:01:56:23:43:bf:55:d3:ae:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:E4:2E:89:1B:2B:29:DF:0B:C0:54:60:09:F8:2B:1A:F1:12:9B
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f1:14:04:72:cc:ca:f0:ee:40:89:28:1d:72:e0:f6:02:5f:
0f:6e:42:9a:06:b7:a6:d1:36:71:95:d3:24:96:57:89:cd:3e:
ae:58:ec:33:7f:6a:e0:0f:49:86:f0:25:61:a0:dd:86:78:5b:
4a:08:48:a1:b9:15:d0:69:8b:c5:93:1f:2f:4e:a4:9f:e0:01:
98:f3:43:31:dc:87:6b:27:ab:4d:c6:31:3c:dc:4d:34:0b:3b:
35:4c:31:98:07:93:0a:c2:22:a3:a3:4a:77:f0:0b:5d:90:0f:
5b:da:67:ae:f6:99:58:b1:25:0b:c9:68:1c:5b:d1:94:ec:96:
31:18:aa:35:db:1d:96:e9:6e:91:0c:7f:21:5f:18:33:18:d8:
fa:d7:c6:3b:6c:3e:21:e5:09:2c:9b:fb:c7:ba:63:f5:9b:72:
8c:02:69:bb:66:66:c5:2e:72:7d:9b:21:d3:77:6b:9e:7c:4a:
74:31:11:c1:16:db:d5:91:86:39:cf:a8:51:7f:7f:2e:ca:ce:
d4:fe:6a:e8:18:73:a4:cd:6d:61:1e:e9:6b:87:b7:53:45:b8:
43:21:0a:7c:f8:03:d9:5b:d8:f0:48:76:09:4a:14:62:93:f5:
db:c1:81:3f:aa:f6:a7:a5:6a:0c:46:84:f2:45:07:aa:55:d7:
d9:17:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:29 2026 by rpki-client