Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier: THYhbnVu3Ishvk3DUedyfuQA69I3K0ChA4A7KYQ1a1I=
Subject key identifier: 0F:1F:12:8D:86:B8:52:23:F2:94:B0:FE:47:2C:A3:17:E2:E1:99:A3
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 019D06D42A1A9B9E9EF9030D0A6FC1DC6402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number: 05A1
Signing time: Thu 19 Mar 2026 16:01:00 +0000
Manifest this update: Thu 19 Mar 2026 16:01:00 +0000
Manifest next update: Fri 20 Mar 2026 16:01:00 +0000
Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: nNvyk+g3oQIt3JBrhnLuGVqanRflu14Tit/SXMs9isY=)
2: kiYvW45_WESo09z9DDPWp3aMKvk.roa (hash: o2aI0HzhoCPi6LjvBwdhvtbnQjp7uz8yNBS4PhNW0AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:d4:2a:1a:9b:9e:9e:f9:03:0d:0a:6f:c1:dc:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Mar 19 16:01:00 2026 GMT
Not After : Mar 20 16:01:00 2026 GMT
Subject: CN=0f1f128d86b85223f294b0fe472ca317e2e199a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:4a:6f:5c:bc:a9:3c:ce:f0:2f:61:cc:2b:
9e:a6:4f:c7:65:97:11:bc:81:c8:7e:bf:0c:1e:1a:
61:86:1f:86:fc:12:58:64:35:d4:94:ac:c6:f5:ea:
08:95:f6:ba:51:b3:1b:0b:9f:f2:09:a2:ab:be:42:
08:73:ea:c9:e9:ba:e5:f8:05:85:39:a2:e0:ba:09:
8d:a2:f4:c4:08:20:0d:d2:0d:6c:a1:b7:06:f9:d1:
bd:6a:97:12:ce:30:65:1a:10:5b:f7:41:c8:2b:fa:
6a:be:9b:17:cc:56:ae:16:e1:26:f7:23:27:ac:dc:
b1:50:ea:b8:cc:0a:c3:8d:78:2a:b5:e9:3e:07:e5:
94:96:cd:75:33:02:ef:ad:a7:e5:98:d4:04:68:90:
aa:36:fe:98:0e:22:93:91:f2:db:f5:36:4b:8c:d3:
46:cc:90:47:45:aa:18:5e:c6:bc:01:f5:65:ba:8a:
ab:fa:29:1b:f1:56:15:a3:d3:ca:bf:8a:92:23:5e:
6c:a4:e2:8a:a1:02:92:1c:60:e5:09:b1:b4:de:62:
0c:bd:5d:b3:88:91:93:4f:9a:7d:6f:c1:4c:28:f2:
b4:ec:a1:cf:39:7e:8f:b0:75:0b:e7:63:18:9f:bc:
f4:2f:00:20:80:14:b7:f5:a4:63:a2:06:3f:77:1e:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:12:8D:86:B8:52:23:F2:94:B0:FE:47:2C:A3:17:E2:E1:99:A3
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f5:8c:19:78:a2:95:bd:d8:2f:f3:7d:11:6a:4e:05:22:cb:
4b:68:3c:98:0e:4d:1e:15:fd:a1:e9:17:71:91:33:28:e8:6b:
da:2e:a6:59:b3:51:87:a2:eb:78:ee:fa:29:32:89:84:52:0e:
5d:27:3b:02:0e:83:77:f4:59:8f:9b:13:b4:8b:49:e8:9f:38:
49:b8:11:52:39:79:8c:3a:1a:f4:2d:1c:83:5a:b8:60:62:70:
76:2a:95:14:31:6b:e5:fe:e1:c2:fb:f9:08:1e:c4:7d:b1:22:
18:20:ee:19:c9:b1:61:db:8f:ed:d8:1d:56:5f:66:4c:07:86:
f8:35:25:5f:df:c0:56:0f:d6:2e:8d:4e:d5:f5:72:b7:8c:17:
58:81:d5:18:b8:5b:52:49:11:84:8a:c0:6f:3b:78:74:ef:3f:
e3:a7:11:c5:e2:12:1f:d1:04:01:6f:ff:bb:e3:2f:0e:09:1f:
2a:bc:48:9b:f2:3d:dd:3b:f1:05:bd:eb:69:ea:c0:24:59:dd:
78:16:d4:bf:39:b4:37:20:08:9e:a6:8c:67:30:31:76:68:17:
02:17:8e:29:99:e5:49:33:7d:3c:99:43:7b:79:76:3e:06:fe:
90:62:51:94:b7:46:65:27:a5:40:1c:9b:ed:2d:77:f2:1b:0e:
03:de:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 20:02:24 2026 by rpki-client