Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: 6ySDI9zihvyJpfk7hSBCJWF2zwRL7uk0ImUHebIPCN8=
Subject key identifier: 9B:7B:8A:81:CB:F7:83:65:95:ED:09:F7:53:09:DA:89:49:7B:2D:DF
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 019D3AF896DAAE218D114CD7CF08BCCA2258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 19:01:03 +0000
Manifest this update: Sun 29 Mar 2026 19:01:03 +0000
Manifest next update: Mon 30 Mar 2026 19:01:03 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: h6mIQfpGp4d1ON5rL/L0bjGAonTDtZb5FHqoIMhWklQ=)
2: kYVHDkjWpBomTAXvZtm-ybsEw4g.roa (hash: 6LPY5S+V1vJP40u2fVqFKReWSp6f+FzxIr8cYQv0/dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:96:da:ae:21:8d:11:4c:d7:cf:08:bc:ca:22:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Mar 29 19:01:03 2026 GMT
Not After : Mar 30 19:01:03 2026 GMT
Subject: CN=9b7b8a81cbf7836595ed09f75309da89497b2ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:c3:be:72:90:64:a1:48:e0:e8:78:23:40:
10:ea:43:71:c8:92:12:40:a3:1b:6e:32:8b:b3:ef:
da:30:4b:12:c3:cf:5b:db:2b:06:c4:17:4a:64:43:
87:7c:c6:13:6c:c6:5d:4d:4c:0a:43:00:a2:86:7b:
26:58:ad:96:10:66:76:d5:15:3c:91:b9:6c:05:8a:
fe:22:6e:6f:c6:28:04:f3:86:1d:57:c7:5c:72:df:
09:17:15:a2:20:1b:9e:20:2a:9a:67:eb:e7:18:41:
92:69:b2:f9:fd:36:4b:5d:4a:01:86:13:9f:57:bc:
7d:9c:07:b4:fa:91:59:e5:68:89:87:e2:aa:9b:8b:
b9:73:11:8b:e1:6a:70:1e:61:bd:f1:9e:33:4e:a3:
10:a2:d7:01:c9:76:0c:73:6b:97:73:03:5f:e6:f7:
db:65:a7:55:a6:fd:8e:c1:6c:73:02:4d:46:74:3d:
e1:53:0d:a1:bf:41:16:fb:4c:f3:eb:c7:0e:83:6b:
d6:5d:d8:8a:4f:9c:26:cf:57:4c:1d:0b:cb:02:cb:
59:d8:88:0a:99:f3:c3:3c:ec:97:07:ed:63:c9:de:
3f:30:05:ac:9c:1b:29:54:36:fe:19:8f:18:19:62:
c9:ff:69:62:c8:1a:41:a3:1a:38:0b:56:69:13:9e:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7B:8A:81:CB:F7:83:65:95:ED:09:F7:53:09:DA:89:49:7B:2D:DF
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:ff:05:a9:97:de:6e:7f:ec:30:9e:88:8d:aa:26:33:60:
4c:ac:2e:eb:68:42:86:05:ce:e9:53:2d:18:1e:ab:89:3b:d3:
fd:0d:24:8e:c4:0d:49:e9:17:06:a8:7a:fe:e8:fa:7e:ca:f6:
c7:3d:cc:34:33:60:fe:4b:d5:f1:b7:9b:11:fd:bc:70:7d:fc:
a1:b6:5d:b1:95:e2:59:fd:bc:ab:4f:52:b1:89:95:db:d4:4c:
bf:08:ad:0f:a2:c6:7e:21:63:ff:ca:35:27:9a:c4:11:0f:40:
5b:89:af:5f:41:5c:70:53:f1:22:83:3a:71:1e:ed:c5:c5:75:
fa:87:93:f3:f7:7f:5d:0a:5f:5b:0d:f5:8e:66:15:01:d6:0d:
e9:16:71:3b:e5:22:dd:8f:34:88:02:37:c8:b6:ea:dd:6f:2a:
2f:af:ed:97:d9:c8:98:a6:d4:fd:fa:6f:6b:a6:db:41:25:43:
09:76:11:13:65:1c:99:85:6f:ea:7f:f8:ab:2f:ec:19:57:19:
97:af:1b:bf:89:23:45:19:0c:b8:2a:a4:29:05:8d:03:15:01:
33:87:1b:b8:46:b6:9a:56:97:71:d8:77:f0:4e:a2:93:57:30:
4d:78:50:5d:5c:43:9b:22:f9:7e:12:97:f1:2e:5a:45:5f:83:
d8:87:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:21:03 2026 by rpki-client