Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: n3YXtgBGt2XvROOAJAxVOq0dU7nrhvdBywdV+UVZhXQ=
Subject key identifier: 42:28:3A:83:AD:F9:22:CC:07:5F:10:31:34:51:A6:4B:C0:37:9F:50
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019DE6A1CD4C2DEC6E046779AB12DB905BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0FD0
Signing time: Sat 02 May 2026 03:00:56 +0000
Manifest this update: Sat 02 May 2026 03:00:56 +0000
Manifest next update: Sun 03 May 2026 03:00:56 +0000
Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: SZRegieE6v8mbzKux6L0jCMo9VDwx4DiJuGIEJJbGNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e6:a1:cd:4c:2d:ec:6e:04:67:79:ab:12:db:90:5b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: May 2 03:00:56 2026 GMT
Not After : May 3 03:00:56 2026 GMT
Subject: CN=42283a83adf922cc075f10313451a64bc0379f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:bb:0a:4c:28:db:7c:f2:8d:40:dc:79:a1:
4c:d8:99:b6:72:3f:a3:7a:f1:4e:79:25:9a:3c:47:
1d:f8:6a:30:d6:47:3e:d3:36:cb:21:07:90:82:22:
ce:40:96:d4:15:08:d5:e2:bf:d4:8a:56:70:69:bf:
94:e4:e2:c4:49:4f:fe:e9:fe:aa:c4:34:d7:ff:95:
a2:5a:46:04:56:06:99:9b:a2:fc:8d:d9:b6:95:ba:
b2:52:e8:a7:b2:fa:35:73:ad:8e:06:7a:63:77:f6:
2b:a6:08:9d:a7:90:ec:c1:1a:21:8e:29:f6:15:19:
25:f8:12:23:d1:d1:f9:01:c8:03:92:a5:fa:cc:9f:
c4:a6:ea:bc:e0:7c:61:4a:ce:f3:eb:26:48:db:88:
6e:86:a4:b2:10:3a:65:fc:6f:3c:0f:64:69:98:8f:
1e:63:93:15:21:63:d6:d3:63:8d:43:27:6b:b8:e3:
a2:ad:59:8b:07:b2:cd:e5:0d:6b:94:8b:99:46:08:
7e:94:69:43:c4:b9:67:c2:0e:9a:b0:6c:14:e8:77:
d1:be:ac:e6:fe:a1:c8:c4:04:ad:24:7b:40:75:fa:
92:99:de:4d:38:cd:a6:81:b5:c3:68:32:f5:dc:2c:
b9:6f:ad:24:04:e2:d0:51:b4:89:bb:ed:0c:c1:ab:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:3A:83:AD:F9:22:CC:07:5F:10:31:34:51:A6:4B:C0:37:9F:50
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:87:2b:b4:de:e4:70:b0:b2:55:b9:a6:c5:1d:6b:6c:b9:e7:
b9:97:1c:ae:77:69:86:e5:7c:f4:36:35:37:1b:fc:75:9d:95:
9d:4d:e1:f6:9f:0e:17:44:4f:c9:1b:20:2f:d3:a1:15:30:7f:
9b:11:2d:d0:2b:ce:72:6b:a1:12:94:3b:51:15:3d:2c:61:88:
99:f5:0a:f2:56:e7:a3:65:8b:6d:ea:04:9b:db:6e:fc:ca:35:
a4:0c:49:d4:59:9a:32:67:7e:bc:e6:99:46:a5:1a:48:68:76:
09:6a:54:ee:fd:5d:9c:87:d6:f1:a9:11:40:d2:2d:66:ff:11:
f2:c5:b7:f8:cc:99:e9:38:8a:55:25:b9:ea:20:9e:45:c5:63:
7c:56:ea:13:a5:6a:77:63:bf:00:78:ee:fb:fa:3e:1a:06:59:
9d:49:0f:e3:98:cc:a9:a1:c6:06:63:26:07:07:00:8e:47:5a:
4a:23:54:52:15:ee:13:8d:8e:05:a0:ee:93:0b:75:f8:7f:65:
0d:b7:46:5e:b4:6c:5f:20:1e:fb:a1:59:43:ac:2d:ee:a2:5d:
d4:ba:0d:53:47:d4:e7:32:3f:35:f0:45:b4:6a:67:01:34:be:
bb:26:43:54:ed:ac:7b:06:bd:62:5d:fc:86:1c:98:eb:22:2b:
95:a3:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 11:12:21 2026 by rpki-client