Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: Qt0KIeileorg+neb6sz9WYddg2pH1/il7vyi9Z1tNpU=
Subject key identifier: 46:95:30:4E:CA:DA:13:74:4D:CA:4D:09:CB:D6:39:16:7E:3A:96:83
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 019D3940F65BCFA403AF13D8B28755AB66B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: 2tvfGtmx8dnYbCqgNfYYoEuFSmQ.roa (hash: dB+mwPmyjYo+G09vPTtEL8PzXYu39MOAVRZ8TcykmPg=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: TVt9w3JLr0vNS03bg416KQJmNlN1QHKFR25+GW1wABM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f6:5b:cf:a4:03:af:13:d8:b2:87:55:ab:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=4695304ecada13744dca4d09cbd639167e3a9683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:36:73:6d:75:02:77:e7:d0:c8:55:ab:2e:
cc:ca:65:69:be:12:50:01:f9:9c:aa:4f:08:1f:c5:
e1:f5:a2:2b:e6:cb:c8:95:e8:c1:01:19:3b:17:f8:
c3:a5:43:fb:39:fe:f8:a8:5f:c6:88:25:bd:fc:a4:
d2:56:07:b5:7a:25:62:04:2b:a1:f8:54:42:da:54:
01:43:d0:55:e4:2f:ce:0c:a2:ba:45:29:1a:5c:99:
1f:b7:9e:6a:ed:74:eb:39:ba:d6:54:84:a3:44:f1:
8c:01:d3:41:ed:db:7d:86:30:c9:c8:10:d6:c1:3d:
a2:f1:5a:c2:6f:7b:e9:fb:2e:bf:2e:5c:fe:f3:40:
9c:a2:34:9d:79:2f:e0:d9:f7:ed:de:67:7e:b9:89:
fb:f2:d3:79:5b:b6:af:f5:ab:63:9a:7f:36:99:94:
92:89:d9:6a:5a:ae:53:ea:01:0a:b6:14:c5:e4:a9:
dd:e9:2c:08:75:49:d3:ee:8a:53:15:93:08:8a:d2:
97:1d:5f:44:54:68:53:4f:e7:3a:b2:e4:68:ee:f3:
10:89:19:65:32:62:55:d6:e7:4d:46:fc:ce:6a:ed:
4b:4c:22:28:6c:5d:83:6a:2b:65:a2:82:62:3d:38:
a7:20:bf:cc:7b:8b:e6:93:44:c7:3a:97:1f:5b:c7:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:30:4E:CA:DA:13:74:4D:CA:4D:09:CB:D6:39:16:7E:3A:96:83
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:95:b6:63:38:99:c3:7e:7a:fe:8c:e3:ae:9d:49:fe:45:01:
e8:b0:27:af:e4:88:1b:2f:e8:d4:1d:d1:fc:e5:68:dc:f8:e8:
e2:6a:d9:b6:d3:89:2e:54:3e:6f:4f:d6:30:12:4d:be:83:e3:
9b:58:45:d9:52:41:e7:4a:7b:3f:cb:05:6b:d1:eb:b9:2a:6d:
5c:d6:c8:05:96:7d:4a:8d:f6:98:fc:6d:e8:7d:3d:66:7c:d7:
be:fa:fe:62:e9:60:53:6e:ac:97:bc:5f:1e:fb:87:ac:cc:98:
6f:68:f5:28:4b:23:cd:d7:75:e7:8e:76:75:9c:81:3f:eb:a1:
f9:04:6b:43:a8:6e:06:aa:f4:3b:bb:f3:ae:af:40:a4:98:2d:
40:4f:7e:1e:aa:2b:54:ff:84:40:9e:4c:bb:b3:de:00:fb:2a:
54:84:d9:04:24:be:cc:e4:f5:65:ba:63:8e:ec:c9:91:50:5e:
cf:f7:22:b0:2f:d7:24:37:62:71:e3:a7:65:0d:e8:01:7a:8a:
5a:a2:88:df:06:40:3b:a8:1a:4a:e5:f0:46:be:83:05:a5:6b:
e4:41:a2:62:1a:fa:bc:a0:f2:7f:e0:d2:6d:5d:4c:86:4d:72:
cb:f9:0d:9b:0f:77:c1:a4:ef:a1:53:e2:06:13:b9:ee:af:19:
22:06:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:52 2026 by rpki-client