Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: Vn5ylbsFW20ATb6l8+bIodi+8gZrgu1W2uDTPu+GG8s=
Subject key identifier: 76:0A:A1:44:71:33:6B:5C:AC:AA:1E:DD:20:1D:32:6C:27:76:DB:1F
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 01A17281C258D374F03464EA3369024F8515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 1AC0
Signing time: Sun 25 Oct 2026 10:01:08 +0000
Manifest this update: Sun 25 Oct 2026 10:01:08 +0000
Manifest next update: Mon 26 Oct 2026 10:01:08 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: WqHQocTH7A1/CqgHP49I8mxx+tVw0tYvasbuPrywLnc=)
2: kYVHDkjWpBomTAXvZtm-ybsEw4g.roa (hash: 6LPY5S+V1vJP40u2fVqFKReWSp6f+FzxIr8cYQv0/dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:81:c2:58:d3:74:f0:34:64:ea:33:69:02:4f:85:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Oct 25 10:01:08 2026 GMT
Not After : Oct 26 10:01:08 2026 GMT
Subject: CN=760aa14471336b5cacaa1edd201d326c2776db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:5a:02:d6:48:a3:e5:ec:5d:5c:07:d0:ad:
69:73:a4:80:23:f0:4e:c1:c8:0d:84:b2:11:65:2f:
9b:99:af:d1:00:6e:09:80:a6:cd:b6:b2:a0:7f:c9:
2b:62:b6:1c:c3:93:44:f0:9e:fc:9d:b1:71:78:da:
2e:5e:72:f5:e0:08:5e:0b:6d:84:1a:dd:9c:81:19:
df:93:55:99:b2:c1:e1:62:f1:34:be:2a:1e:72:c5:
c1:a3:45:9f:c2:e3:bd:71:9a:3b:0a:b4:ca:84:be:
13:0f:d1:85:53:61:bd:ac:f6:db:8a:51:68:bf:e5:
5b:14:eb:b0:62:f0:cb:75:0c:a8:32:07:bb:8a:0a:
5b:73:7c:e1:78:33:06:ff:a4:c9:b7:38:d6:2a:f5:
43:58:99:cd:3a:35:db:ec:e1:7b:1e:66:f0:4f:60:
92:d7:86:aa:67:c5:d2:ee:ab:ed:bc:b6:01:18:d0:
f3:1d:94:66:ab:65:a4:65:bc:4e:8a:fb:f7:3c:cf:
dd:e6:92:aa:c9:8c:6d:9d:e2:b6:bc:a0:5d:69:e7:
ca:13:0b:11:d8:2e:ae:77:47:a0:08:ca:ee:33:4c:
3c:82:5c:18:9d:d1:19:b1:2d:1f:eb:18:37:10:ed:
67:56:71:c2:27:39:dc:53:65:1f:47:a6:d1:6f:17:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:A1:44:71:33:6B:5C:AC:AA:1E:DD:20:1D:32:6C:27:76:DB:1F
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:90:00:8c:9a:78:dd:68:a9:bb:a8:98:4d:50:bd:73:ad:72:
d2:46:97:5e:1a:42:40:61:d6:29:7c:2c:2c:72:3e:eb:70:ec:
ee:0c:05:a6:82:42:c3:fe:cd:c5:74:dc:5f:42:d7:01:b6:5c:
f7:72:16:e8:44:15:d7:ae:7f:35:13:2b:f0:0a:cf:93:f1:60:
ca:77:61:c8:f8:ce:eb:53:85:ea:23:82:e8:00:aa:5d:53:65:
d7:29:99:d8:19:84:7f:d7:ed:4c:90:be:53:a0:2e:5f:d2:a4:
a0:3e:2a:08:23:db:b8:b4:be:ec:15:e8:14:48:db:b7:75:03:
26:cf:3c:ca:fa:b0:68:82:40:cf:b9:2f:1c:32:84:1b:6f:18:
3b:7f:5b:e7:3a:c4:f3:4c:39:91:a5:10:fa:4e:41:d0:c3:33:
4a:6d:83:19:6c:9d:53:0b:86:53:09:a3:96:7d:ab:c7:93:e2:
af:b0:bd:d3:9b:28:86:34:a0:09:19:21:df:ac:13:a7:56:30:
d8:44:30:a2:d4:53:3b:6c:e7:0b:2f:00:d9:22:db:00:a9:16:
07:c2:ec:e7:29:e4:3a:cd:91:6f:3d:e7:83:9d:ab:43:6d:bc:
b0:7d:29:e8:7e:ac:d4:a0:10:3f:97:85:33:f4:78:8a:54:d1:
d6:be:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:52:53 2026 by rpki-client