Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier: fFeSqRkYY3MH9iBnXTPhYKuLqHghQ7sQj6sKP2uov64=
Subject key identifier: 3B:9D:40:99:3A:9F:AB:AB:42:8B:7E:0A:44:D1:F9:98:4B:AD:A8:F0
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial: 019D9B51230541A10DEE073CDE09FB3E9A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number: 11E4
Signing time: Fri 17 Apr 2026 12:01:18 +0000
Manifest this update: Fri 17 Apr 2026 12:01:18 +0000
Manifest next update: Sat 18 Apr 2026 12:01:18 +0000
Files and hashes: 1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: for7nn9J90Eh1X6cPHS3lpCWoSR4Z3QiUVKnMyQBuFE=)
2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:23:05:41:a1:0d:ee:07:3c:de:09:fb:3e:9a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Validity
Not Before: Apr 17 12:01:18 2026 GMT
Not After : Apr 18 12:01:18 2026 GMT
Subject: CN=3b9d40993a9fabab428b7e0a44d1f9984bada8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:9b:78:97:7d:35:f3:59:4b:fa:87:94:a1:
ca:55:2e:d2:b1:c8:71:ec:6f:6b:f1:9a:03:3a:b3:
cf:8d:c4:7d:ee:1f:a0:57:39:0d:db:4f:67:49:e9:
2e:f6:34:97:c7:f6:5f:50:bd:e6:3d:ec:64:26:6f:
c7:3f:48:18:25:75:31:37:dc:5c:03:3b:a2:1b:9a:
17:6c:0a:6e:a9:23:81:d8:d2:b5:e9:12:08:6d:c8:
92:61:8d:95:b7:c9:d1:21:a2:a8:6f:31:4a:9b:ee:
b9:f6:f9:a2:df:19:3d:b0:9f:8c:80:9e:e5:4f:07:
51:a0:78:7c:34:26:09:71:ea:c0:9b:b3:c6:9d:b8:
4c:64:26:a7:82:9e:2d:55:d2:61:4f:0b:9f:58:71:
ab:9c:80:2c:4f:5a:46:66:47:13:94:6d:53:2d:1b:
02:6d:1d:0a:e5:86:47:0e:37:cf:af:49:a2:74:b6:
7f:77:5b:5e:19:7a:cd:34:43:cb:d9:e5:0c:68:32:
e3:fb:c9:50:0c:d9:68:ec:65:6d:06:fb:e9:57:c3:
8c:ec:2a:84:74:79:6d:c0:bb:c9:fe:57:60:c4:94:
e1:44:f0:4a:a7:33:2f:02:f9:65:a3:8e:2a:d1:45:
3f:fc:08:02:aa:1e:e5:c5:bb:51:e6:30:70:82:70:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:40:99:3A:9F:AB:AB:42:8B:7E:0A:44:D1:F9:98:4B:AD:A8:F0
X509v3 Authority Key Identifier:
keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7f:7f:2f:5d:25:a6:b5:ea:2f:5f:89:a1:cb:54:74:e3:b0:
a9:6c:5d:02:7e:91:f1:f4:85:7e:c6:af:d4:5a:5e:8a:c6:3e:
b5:31:39:fa:9c:b6:e5:23:1f:ea:32:ff:95:2e:99:fe:4c:cb:
85:93:87:de:fb:8e:d0:b6:16:bb:95:be:99:56:20:04:29:10:
cd:d3:22:83:62:50:62:ad:e3:07:42:a9:9c:7a:8a:15:76:26:
d3:a6:73:d7:08:40:2a:e3:6c:22:50:cc:8b:4a:63:8b:5e:21:
13:3d:a4:f0:7a:eb:73:c2:17:1f:b1:bc:79:98:54:c4:65:45:
53:4b:29:e8:16:d3:a4:8a:87:79:b0:4c:6f:37:3b:e3:16:1f:
78:fe:a2:bb:4d:05:91:f4:3c:4d:cf:43:2b:57:c7:86:fd:3f:
05:3c:39:e7:ac:82:4c:f7:03:e6:3b:d1:2e:5c:1c:e0:35:e9:
51:39:f4:7e:46:76:ba:7d:b4:dd:ce:0b:ea:a5:bc:86:c6:24:
c6:ec:64:95:21:ac:fc:e2:63:27:4a:6d:ec:b0:2c:46:aa:7c:
47:15:a7:2e:f5:ab:25:10:59:99:bf:aa:ba:2c:78:74:67:00:
95:fa:94:5d:9e:82:1e:d3:cc:f1:eb:04:2b:e7:16:eb:21:de:
83:fc:01:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:26 2026 by rpki-client