Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: U8ffxZExvRgPMfnqj8s+92X4ap8/iR+9kY/DYHlIa+k=
Subject key identifier: 3D:E9:10:A2:8F:73:F3:CA:02:A1:F9:0C:DE:5C:42:19:D3:1A:B7:3F
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 01A06DCC06D37742026FE470AEDA83EB282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 19:01:22 +0000
Manifest this update: Fri 04 Sep 2026 19:01:22 +0000
Manifest next update: Sat 05 Sep 2026 19:01:22 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: Z+93ccg4VMaBKK2bal3/QEQaCGyORRDXM6Nl4Ipw9ls=)
2: kYVHDkjWpBomTAXvZtm-ybsEw4g.roa (hash: 6LPY5S+V1vJP40u2fVqFKReWSp6f+FzxIr8cYQv0/dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:06:d3:77:42:02:6f:e4:70:ae:da:83:eb:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Sep 4 19:01:22 2026 GMT
Not After : Sep 5 19:01:22 2026 GMT
Subject: CN=3de910a28f73f3ca02a1f90cde5c4219d31ab73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:d7:1c:b5:e9:1e:6e:bc:a0:4a:f4:0d:43:
4b:33:d3:55:be:a6:07:6b:92:47:90:45:cf:12:4e:
c9:7f:43:c8:d0:70:a3:a8:2c:6d:95:5b:27:4a:d8:
78:cb:cc:ec:f0:1a:60:5a:8d:04:37:66:fc:9c:60:
8c:98:7f:19:8f:16:96:64:31:63:70:da:18:eb:d1:
a4:5d:ac:32:95:83:81:66:6e:94:4b:8d:9f:e4:86:
05:a5:ca:3a:97:24:c7:fc:8f:97:c6:cf:ef:74:8c:
d3:56:b9:cc:c6:6d:8d:0f:1c:58:ad:20:99:93:55:
d7:5e:74:4f:07:ad:33:94:82:42:ee:1f:6c:d7:b2:
26:75:07:eb:bb:e2:03:6d:af:95:ec:13:41:91:5e:
0b:08:76:58:b2:d7:5b:81:b7:9b:7b:1b:96:a0:dc:
15:09:d0:d7:97:97:a2:c2:0d:07:fd:f0:90:f0:66:
4a:16:16:0b:e0:59:11:bd:ed:2a:14:b4:9c:99:e4:
31:48:81:09:13:4d:4f:02:76:d1:82:a6:e7:4c:80:
87:af:ab:48:c1:08:45:77:00:a2:01:e3:43:41:cb:
1c:f9:ac:e8:51:2e:78:90:b8:09:93:5d:86:4e:64:
97:a2:1e:56:99:72:c3:b9:47:9b:9c:09:25:ef:2f:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E9:10:A2:8F:73:F3:CA:02:A1:F9:0C:DE:5C:42:19:D3:1A:B7:3F
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a5:00:eb:de:4a:6b:ab:ff:5a:99:d6:a8:88:ff:80:6c:08:
ce:fc:9b:e3:50:3a:2d:5e:bd:68:b1:7f:57:da:0b:0c:67:47:
9e:5f:cd:41:3d:2d:12:89:4e:ea:78:7f:46:5c:50:26:aa:65:
28:71:50:39:15:ec:92:44:f8:e5:a5:5d:11:7e:9a:e1:63:ff:
84:76:09:cb:97:0d:e7:7f:59:c7:a4:2c:25:c9:64:50:0e:9e:
81:9b:9d:ee:cc:90:8c:04:64:e6:90:d1:52:52:f3:2a:76:2a:
a6:a3:e4:8d:6c:95:75:3a:75:85:46:27:2b:9a:0c:86:c5:ad:
d7:20:3f:46:de:f7:87:15:90:ed:45:03:ca:af:80:b8:b5:55:
bd:3a:7e:1d:58:50:88:1d:c8:93:ac:e8:6a:06:94:0c:5f:81:
66:1e:b5:d8:da:1c:31:d4:61:5a:f1:f3:c5:c8:07:22:15:5e:
c5:c7:15:9a:e8:bb:fd:f5:6a:9e:9b:a7:ae:9f:05:19:67:b8:
c4:12:d4:4c:cb:53:8f:08:f6:6e:51:04:0e:95:db:3e:9f:a7:
6b:50:8c:63:85:61:de:6f:b4:87:5a:72:62:aa:34:53:65:58:
d1:af:57:db:e7:97:46:c8:30:63:de:5d:4f:57:ee:f9:75:7e:
ca:83:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:41:39 2026 by rpki-client