Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier: a4Y5hk09wgaVIXf0cS6kMN3uuGY+jJxaH2OAmR7ADkA=
Subject key identifier: D3:BD:DC:1A:E8:BC:F3:05:AB:51:3A:4F:62:AD:67:C8:29:17:59:1F
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer: /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial: 019D98504F871E9884E3F1A79FE5A2123744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 22:01:33 +0000
Manifest this update: Thu 16 Apr 2026 22:01:33 +0000
Manifest next update: Fri 17 Apr 2026 22:01:33 +0000
Files and hashes: 1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: qohDCOPev2G6A1NMmBtlGEFXnDAqaazNwjkTvNRGVss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4f:87:1e:98:84:e3:f1:a7:9f:e5:a2:12:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Validity
Not Before: Apr 16 22:01:33 2026 GMT
Not After : Apr 17 22:01:33 2026 GMT
Subject: CN=d3bddc1ae8bcf305ab513a4f62ad67c82917591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:1c:90:d8:50:33:34:62:05:c1:38:e5:8f:
fb:4e:1e:db:69:5a:99:b0:a8:9e:df:c9:d9:25:06:
01:1f:3c:08:8a:74:19:7d:4b:96:ae:b8:e0:ae:2d:
14:73:72:a3:f1:5e:6c:59:b4:5e:aa:f2:9f:fe:e0:
6a:3a:af:c6:a6:84:4a:ff:66:d1:47:96:44:aa:5f:
16:0e:30:b3:51:d0:63:7e:e6:89:e5:9b:a9:6e:60:
dd:a9:29:e3:49:62:51:34:01:9d:0d:c6:6c:f0:3f:
6b:96:0a:6c:90:ec:7f:60:13:07:1a:1a:dc:c7:62:
e0:98:aa:be:65:ab:9c:81:2a:f0:e2:b2:93:c5:85:
d7:92:5f:27:ee:d3:87:dc:aa:89:03:d0:13:50:ff:
d1:05:bc:5c:64:03:1e:f4:6d:5b:4c:35:1d:20:7f:
14:1a:b7:7e:e4:42:be:5a:ec:c2:6f:03:ef:51:97:
0e:1a:3e:c5:f4:a2:63:72:6c:aa:72:c5:db:7b:68:
db:a5:e0:96:a6:71:bd:d0:62:ff:e3:e7:d4:04:c6:
f5:77:20:ea:ef:aa:1c:14:26:3f:7d:9a:ec:0c:c0:
ce:98:ba:d7:75:38:d4:a8:e7:75:25:59:a4:cd:c6:
08:6d:60:5c:c8:bf:ab:9d:a5:c6:39:ec:93:fc:78:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:DC:1A:E8:BC:F3:05:AB:51:3A:4F:62:AD:67:C8:29:17:59:1F
X509v3 Authority Key Identifier:
keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e7:68:78:9c:2d:b2:d1:a7:6a:36:1d:14:13:2b:4c:4d:67:
28:94:4a:fd:e1:15:92:13:95:5d:ad:e4:60:1e:1f:84:72:a1:
e9:07:7f:26:ea:cd:69:cd:a3:88:03:91:b6:17:a5:89:cf:9f:
aa:f0:87:c3:20:66:23:16:7d:fd:a3:3a:ea:a0:41:b0:d3:8d:
55:bf:cd:61:3e:83:ca:67:3b:c2:e1:af:f8:4d:6a:40:14:66:
ee:56:33:e1:1b:b4:dc:ff:63:4e:83:fd:d8:3b:1f:cc:d3:84:
8f:bd:e5:2a:d4:ad:54:26:d8:71:98:da:c5:63:ce:4a:dc:22:
05:80:39:d9:b1:b3:37:58:1e:11:9b:50:8f:fe:c6:82:63:4b:
57:03:7b:0c:68:80:b5:93:71:fe:ac:60:70:ab:42:14:4e:af:
ec:3f:f2:a8:fd:ec:49:6c:14:92:90:32:92:32:3b:3a:b5:8a:
33:b7:a7:ea:e7:e3:f9:0d:c2:94:b6:c8:1d:45:74:f6:85:8c:
6d:63:36:81:39:cc:95:e0:fe:e8:58:ba:23:d3:e1:a2:0e:69:
e4:4e:bc:cd:52:a1:a7:f3:4d:91:d2:bc:ec:80:7d:26:07:3c:
19:ac:9d:1d:ae:33:15:aa:8b:5f:7d:f4:5a:f3:23:cc:cf:7d:
74:1d:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:09 2026 by rpki-client