
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: uPDZ79hOcLLWLyKBRkac4/aQ9DfhIWA3XVALQiF7aBg=
Subject key identifier: B9:4A:86:A9:02:7B:C2:16:DE:45:E5:DA:24:73:75:0B:A8:C1:9B:BD
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 019D3AC1AA2BD05271557970DED382E0348C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 1488
Signing time: Sun 29 Mar 2026 18:01:03 +0000
Manifest this update: Sun 29 Mar 2026 18:01:03 +0000
Manifest next update: Mon 30 Mar 2026 18:01:03 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: sipa6tJKKFtUyS7c9eE51C4k0kx+qINOl7AnP4YUC0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:aa:2b:d0:52:71:55:79:70:de:d3:82:e0:34:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Mar 29 18:01:03 2026 GMT
Not After : Mar 30 18:01:03 2026 GMT
Subject: CN=b94a86a9027bc216de45e5da2473750ba8c19bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:a6:cb:92:29:21:5d:44:86:08:38:60:56:
b1:fe:14:e9:89:e7:10:56:4d:70:cc:e3:7b:70:84:
15:3e:04:12:22:65:0e:ab:ad:ef:09:24:d0:6a:c5:
62:df:56:58:c9:b3:df:0a:18:b5:2a:5d:ac:94:40:
e9:83:41:56:f9:88:bf:3e:06:32:d4:e7:81:37:e5:
89:f8:27:00:87:b8:ab:23:c6:7d:c6:d0:c8:0f:2e:
2e:e0:ac:03:ed:2a:a9:c2:20:6a:85:4d:4a:bd:fa:
3d:83:12:f6:0a:d1:86:3b:d8:19:b4:dc:6a:0e:39:
23:1f:20:a5:01:88:6f:cb:3f:37:29:05:0a:23:91:
fb:ca:3d:fe:30:62:4d:52:b4:55:7e:a5:00:b6:88:
cf:b0:af:11:4f:20:3d:d7:f9:56:b4:f2:4e:2e:33:
b8:54:66:48:10:67:ee:12:af:92:fc:40:bc:be:a3:
0f:a4:41:c7:55:19:cf:f3:4b:d8:58:de:24:fa:81:
61:27:65:a6:bb:65:4a:2c:b7:58:71:35:03:ba:01:
a6:e5:bc:8c:3c:14:fe:5a:df:58:07:61:a1:41:0e:
42:d3:ab:fb:eb:d9:5b:fb:c8:83:d9:4f:1c:f2:1e:
21:8a:d4:6c:15:8c:8e:23:5d:6f:f7:bd:a7:77:c4:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4A:86:A9:02:7B:C2:16:DE:45:E5:DA:24:73:75:0B:A8:C1:9B:BD
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3c:4c:a8:2e:e5:6b:4b:ed:2e:42:48:ab:7e:c7:43:24:18:
b9:36:39:ac:2b:cc:f1:7a:ee:fd:f3:9f:e2:f9:41:18:41:e7:
ad:6e:09:f0:bb:12:19:8e:82:d9:01:30:7e:ef:20:d5:3f:6c:
ed:52:00:e4:6a:47:4e:f3:ce:0c:b8:f2:82:05:71:69:fc:43:
25:2a:51:03:dc:d8:dc:ea:9a:fd:8d:bc:49:42:cd:37:79:74:
10:71:13:c4:d5:be:f7:c3:f5:8b:0e:1d:fe:64:14:06:8c:e2:
27:68:ee:6f:e7:83:ce:65:f7:27:53:d7:c1:16:f0:84:30:86:
9b:68:c3:29:b9:56:55:b6:9c:0d:69:fe:59:25:77:14:42:57:
0f:bb:a4:29:39:8b:b8:94:45:62:02:47:e8:a0:89:f2:25:cd:
9a:5a:e5:c7:77:9e:d5:c6:60:a1:f2:73:9f:f2:e7:d0:28:8e:
41:81:9d:ec:41:9e:a1:e6:ea:6d:97:07:ff:29:03:0a:92:47:
cb:e2:67:4e:a1:59:cb:05:16:aa:6a:ff:c1:88:b1:25:59:7c:
98:63:d0:14:4e:cc:8c:48:34:f8:15:06:c6:25:3f:65:ca:43:
16:2a:38:f0:4a:f3:25:bc:03:14:33:1b:7f:e8:2b:24:cc:ad:
fe:e2:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:20 2026 by rpki-client