Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File: Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier: XomHK+B2i8gE6W79LEeMzjOt7/eGVwoGQnQqGyn8i9s=
Subject key identifier: 1A:34:2B:87:6F:7B:E3:81:71:FE:8B:A0:05:B1:01:B2:D4:43:8F:8C
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial: 019D390A1A2821DD9A57E666C5E9EEFC002F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number: 14EF
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: eKtcxrYHOT+UxVtXR9rIXa4y10IDPq1b1qruYR0p3OU=)
2: a_L8u_9OUTVsQn035qkg5zotc6w.roa (hash: i3QS2JwoyFZ8oKKUfbp9cckYFMGKSBc22cz4ktopp/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1a:28:21:dd:9a:57:e6:66:c5:e9:ee:fc:00:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=1a342b876f7be38171fe8ba005b101b2d4438f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:1f:0f:2b:4d:73:0c:78:e9:5b:a5:dc:8e:
22:7e:0e:79:eb:7b:d6:40:87:44:35:88:4d:21:87:
90:51:ae:f5:91:73:56:40:ec:28:fa:10:1b:94:4a:
9b:a0:a0:f1:68:5e:33:db:0f:7b:52:ff:8a:bc:5e:
4e:71:e9:2b:d4:9c:66:23:a9:35:63:35:db:88:07:
73:d5:28:de:83:42:0f:27:3a:2c:31:3f:42:ce:1a:
e7:32:ce:e5:78:20:a8:c4:65:7e:8f:22:e1:8e:39:
82:40:6b:2f:2f:bc:de:47:36:f0:21:68:be:43:d5:
96:23:bb:76:e9:b2:f4:d8:27:1a:13:18:3e:8b:6d:
9c:fa:63:3e:94:03:ab:80:3f:95:20:01:68:75:94:
30:ed:19:79:83:08:9e:3e:80:5b:6b:a1:45:26:90:
5c:7f:0b:6e:8c:18:6c:23:d7:09:3c:70:01:84:44:
6b:9c:3b:e4:2a:59:bb:71:81:50:88:ad:94:dd:15:
fd:af:64:41:2b:99:f0:9e:b8:6e:4f:0a:4b:04:f3:
a8:87:e5:7b:12:3b:06:f0:b2:dd:34:85:92:f4:d6:
a3:22:60:39:62:ee:e0:5e:3e:58:0f:db:3d:04:7c:
64:92:ee:08:2a:28:fd:1b:6f:28:9d:0e:8d:2f:22:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:2B:87:6F:7B:E3:81:71:FE:8B:A0:05:B1:01:B2:D4:43:8F:8C
X509v3 Authority Key Identifier:
keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a4:98:41:9e:ca:74:2e:30:4b:c7:35:31:4d:52:bd:ab:8e:
64:25:8d:77:0d:19:67:33:63:00:e6:85:dc:8e:ea:fd:65:5c:
f9:a1:95:92:64:c9:a4:69:f4:10:da:ee:e7:e9:c5:6c:1a:8a:
d5:2e:80:4c:75:2c:93:a4:fe:9c:e8:a7:c2:63:b0:ce:64:bd:
6f:7c:5c:96:6a:ab:1b:0f:02:00:de:02:ee:06:77:81:3d:10:
4f:69:a3:81:94:08:cf:87:a6:64:81:1c:4a:4a:b2:15:b2:68:
7c:6c:18:13:8b:d5:c7:6d:35:e0:01:13:b3:96:b3:3e:ca:13:
26:c4:58:1b:7e:98:60:79:31:6c:af:56:46:d4:03:9e:29:fe:
50:64:b2:b7:6d:6b:ef:33:1e:85:31:21:23:09:f2:b7:fd:c8:
4b:df:55:b8:c1:c9:dc:a3:84:87:45:98:8d:14:b4:05:5e:b4:
2d:ae:f8:bc:5a:cf:2b:83:04:5d:a9:bd:f3:93:7f:86:37:d9:
69:a7:12:bd:30:7c:97:5c:8a:38:a3:20:39:e3:1d:f6:32:2d:
3d:da:7b:62:23:b2:1e:8b:63:76:72:60:20:ae:38:e8:33:31:
44:35:88:46:01:67:60:37:c0:73:77:1b:eb:14:d4:9e:20:ec:
73:96:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:38 2026 by rpki-client