Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: kD9eJ4LRoSxVmO7GeRMtHVKqP4J4JGf9Xo+hoSWejIM=
Subject key identifier: CA:AC:3E:20:5B:53:76:F9:87:CA:A4:84:34:00:CC:E5:B7:57:3A:35
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019D99D0246AA2DE3922CB67B8585A3D2554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0AB3
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: wzZ7HPnm25iEmCe0q3gswRRpTN5cgsWa55fAy/wUNpc=)
2: zh3jJi7VlgsCf1B8mSSIRkmxTfM.roa (hash: UL+DW0mVWjoP5JojLcH0dVPVuqkEZ0cepJzgkv7Gs7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:24:6a:a2:de:39:22:cb:67:b8:58:5a:3d:25:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=caac3e205b5376f987caa4843400cce5b7573a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:7a:0e:bb:e3:39:2c:db:30:c5:cd:54:f4:
ef:a7:79:6a:49:a1:14:a8:2a:75:72:04:d9:25:c8:
c5:57:f0:b0:6c:72:69:51:0a:c1:80:51:14:a4:72:
e5:2c:e4:1f:54:7e:49:76:ac:bb:76:2c:7f:ef:92:
e9:48:94:74:c6:b4:9c:90:84:e3:d4:26:16:f6:85:
1e:d6:45:98:91:34:5c:c6:76:68:42:43:1c:da:bd:
b0:e7:4f:60:23:ad:2d:8a:6e:8a:3f:48:81:2c:81:
9f:a9:50:75:6f:b7:ff:ee:c0:9a:1a:ed:f7:89:e2:
9e:2e:e2:bc:fb:51:8c:18:0a:4b:b8:f0:ca:b2:f9:
4e:4f:98:5f:7c:a4:24:44:35:e3:ac:b7:a0:a7:36:
f6:33:4c:34:a9:5d:58:d7:6c:7a:45:8b:cf:4b:08:
19:6a:23:53:f1:84:48:ff:c1:d2:07:71:bd:a3:70:
57:c5:e8:62:67:1e:f2:7b:9d:10:20:95:e1:a3:f2:
23:f1:1c:64:05:d7:87:13:46:9e:d6:9f:ba:81:95:
d9:19:44:ae:93:00:f6:ff:91:45:0c:26:af:d5:bd:
60:b0:95:25:f7:5e:a7:b2:79:93:38:c2:ee:99:77:
c5:b4:65:f5:eb:80:16:5c:c9:45:69:11:6a:c1:54:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AC:3E:20:5B:53:76:F9:87:CA:A4:84:34:00:CC:E5:B7:57:3A:35
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d6:3d:c1:c7:92:43:fe:a4:79:58:65:e8:c0:10:4c:75:97:
ce:74:4b:bc:ff:95:40:36:ed:02:f4:07:66:9e:ae:b1:6d:cf:
0a:5a:cf:65:b9:4c:7d:e7:08:20:1a:29:4c:10:dc:80:77:39:
38:83:ce:c7:9a:92:43:44:a6:f8:5a:c6:28:93:54:46:44:c0:
50:9d:74:a6:c2:55:8b:14:d6:b8:ff:87:9d:58:34:90:1c:8b:
f7:34:a4:8e:fd:80:39:e9:0c:3b:47:f3:cb:f1:07:2a:9b:dd:
11:ed:a4:25:c1:9c:f6:21:91:9e:0a:c2:58:85:ee:60:95:e7:
4f:f8:c8:d4:34:44:7d:10:5c:b1:65:91:24:62:4f:77:12:ca:
1f:03:cb:9c:c2:72:1e:b6:08:7a:d2:2a:8d:ed:f4:10:1d:ad:
88:98:ee:f6:1b:cf:79:41:1f:89:79:64:ab:d4:70:a4:45:12:
25:52:71:f4:c4:bc:15:e1:de:bf:80:9e:f8:73:df:bc:30:9c:
91:fb:ab:2c:e5:cf:5a:f0:e1:fa:57:3f:ac:3b:97:3e:34:43:
77:e2:8f:bc:5a:dd:88:f6:4c:ad:e6:a7:15:98:32:a7:34:bc:
b4:9d:92:00:14:4e:72:d6:53:d4:00:12:ff:95:d0:38:43:32:
2c:1d:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:22 2026 by rpki-client