Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: A/+1ImCtYvbUYmPtEpxqy/Gke+rJ5ZNjF3DVkIqhVWY=
Subject key identifier: 4B:63:CB:08:6F:DF:58:41:E2:2C:B0:0C:66:2A:20:AF:8D:AA:26:27
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019CAA591AE03E8DF5C86B4834BC56B5B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0A37
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: rArJpo/gzYq5z1lUgZsUlTggTnRUJRnQiI/qEJdqYCY=)
2: zh3jJi7VlgsCf1B8mSSIRkmxTfM.roa (hash: UL+DW0mVWjoP5JojLcH0dVPVuqkEZ0cepJzgkv7Gs7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1a:e0:3e:8d:f5:c8:6b:48:34:bc:56:b5:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=4b63cb086fdf5841e22cb00c662a20af8daa2627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:31:9c:4a:79:7d:3c:dd:7e:7f:37:7a:97:
e9:59:f2:7d:65:f7:ae:f0:44:f5:35:bc:46:a5:de:
4b:18:31:4e:a2:b4:3c:30:9b:a8:63:18:82:5b:c5:
b8:2a:98:e8:c9:73:a2:1b:2f:92:31:20:ae:0a:33:
4f:a6:7d:ed:df:92:6b:6e:84:d1:bf:bc:21:f5:87:
fc:ba:53:a0:e1:ba:75:68:81:ee:11:c3:a1:c3:44:
25:da:e1:6c:74:21:20:41:34:df:08:71:fa:f0:d3:
48:66:0c:2f:2f:c6:c5:25:d3:39:4d:e1:1e:60:ad:
f6:34:02:d9:4a:38:68:8d:c8:58:dc:ad:c1:1c:2e:
3e:6b:9e:cc:2a:10:70:74:72:1f:5e:3f:b1:ce:06:
30:5d:5a:a2:ba:a0:dd:83:a7:f8:4e:94:68:5a:32:
6b:78:29:6e:10:de:bc:60:d6:e6:e9:6b:67:8f:f7:
93:48:40:50:d4:6c:29:1d:d9:08:3b:69:8b:65:f8:
c8:61:4a:f9:5e:0f:b4:10:54:0a:b1:35:e5:b3:90:
4c:67:83:31:fa:5c:da:96:86:2a:37:c6:36:ce:f5:
b1:dd:a4:6e:23:cf:c1:8f:91:88:06:6d:88:7f:65:
4b:5d:43:d8:bb:a6:23:ec:dd:75:bd:94:54:26:e9:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:CB:08:6F:DF:58:41:E2:2C:B0:0C:66:2A:20:AF:8D:AA:26:27
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:bb:98:87:41:1f:ef:6f:6d:9c:ef:5d:c0:87:5c:b1:86:
a0:14:14:f8:8c:00:ce:f2:1d:28:33:61:c1:65:8e:6a:b4:0d:
e1:08:32:26:ce:ac:8d:84:a8:aa:7c:ed:88:c4:ea:3d:58:d9:
8c:c1:5f:3c:8b:dc:cb:3f:f0:3d:40:29:2f:0f:a1:26:1b:ee:
d0:4c:4f:eb:e7:ab:97:08:bf:cd:6a:a2:f9:60:d5:d9:6e:62:
a0:a1:8d:4c:a5:c2:39:3a:34:1f:8b:71:e8:4b:96:1f:ed:35:
97:c8:4b:4e:a4:bd:b9:d0:ae:f4:81:82:75:48:cb:52:31:ca:
ad:8a:79:6d:a0:85:ff:37:0f:29:95:a3:0a:c9:8e:a5:20:8d:
45:fd:6e:fa:71:06:80:96:18:84:0d:31:33:a5:12:89:45:a0:
9c:7b:30:04:f0:9e:b0:ae:14:07:6f:e1:b5:54:fc:d5:5f:04:
76:08:16:5f:d0:ce:88:72:e4:cf:41:8a:29:10:ec:f2:3b:80:
64:5b:42:c1:09:72:e3:51:c4:b7:c0:b0:72:d5:16:4f:b1:a6:
78:c2:80:03:5f:eb:53:c2:ef:1e:e9:47:24:36:f5:e6:dc:57:
b3:f2:f5:50:75:82:5f:69:1b:e9:f0:8a:03:a9:a7:26:2a:8d:
e7:a5:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:44 2026 by rpki-client