Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: 12UqzFUbzYzp2Ozndj3QX24vZXxddrmHtjDxVvoCrU0=
Subject key identifier: C6:06:68:BD:1E:2B:49:20:6F:3B:79:D8:10:38:9D:FB:3E:B6:3F:C3
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019CEB946C070ADCC66ABC103925C2B2C2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0F4E
Signing time: Sat 14 Mar 2026 09:01:38 +0000
Manifest this update: Sat 14 Mar 2026 09:01:38 +0000
Manifest next update: Sun 15 Mar 2026 09:01:38 +0000
Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: JCxRE93KP9x2rgRfD3ilOt2NECdI/EyNtqP6ObajTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 08:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:94:6c:07:0a:dc:c6:6a:bc:10:39:25:c2:b2:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Mar 14 09:01:38 2026 GMT
Not After : Mar 15 09:01:38 2026 GMT
Subject: CN=c60668bd1e2b49206f3b79d810389dfb3eb63fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:fc:d5:16:ee:21:59:d5:e4:35:dd:8a:3e:
2a:89:e2:78:07:92:5d:99:f8:d1:5a:ab:2b:8e:45:
24:88:71:82:91:fc:8c:56:9b:89:62:ea:dd:b2:da:
c8:06:4a:07:7a:a8:d1:54:44:1e:6f:e6:40:da:31:
b7:b3:a1:16:54:ac:fb:8a:36:ba:e7:ce:eb:f9:3c:
94:05:68:9a:6a:38:fc:4a:22:b3:2b:05:3e:c9:4c:
e5:56:ae:9b:22:df:e0:18:5f:28:d7:5b:a9:a7:9c:
59:26:f5:fb:4f:8a:82:eb:76:f1:19:4d:37:7c:5c:
7d:8e:06:6c:ef:c2:73:60:a5:3c:29:99:f5:c0:b8:
b6:b8:9f:83:00:da:c9:06:93:7c:17:3f:5b:21:71:
eb:76:79:05:9f:00:d3:d0:f2:49:13:a9:f4:17:4e:
ea:30:6b:47:7f:f1:08:da:44:13:9e:cd:4a:77:2f:
8e:ae:94:0b:0c:e5:0b:00:d0:76:0c:88:a9:14:76:
52:17:54:0e:f7:37:53:2f:56:24:9d:0f:cc:5e:ee:
d4:79:98:57:f4:4d:65:16:0b:d4:d2:ac:f4:14:d2:
7a:a2:95:43:1d:9c:37:d9:44:67:99:46:b2:c6:53:
ab:a1:cb:5b:fa:8e:9c:b9:fb:1b:fa:dc:de:ad:4c:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:68:BD:1E:2B:49:20:6F:3B:79:D8:10:38:9D:FB:3E:B6:3F:C3
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:93:8d:b4:98:59:db:e6:38:e4:a7:40:88:d6:fc:34:a4:55:
d7:9e:9f:2a:5d:da:a8:a9:ba:0d:93:ed:04:76:6c:1b:80:0a:
57:90:64:20:04:bc:e2:ad:4f:60:f6:50:1b:d1:79:11:c5:75:
6c:41:ce:c4:1c:fe:9d:7e:53:99:98:86:80:5f:98:3a:00:ce:
9e:fa:4c:9b:1e:d0:75:84:00:98:5d:69:2d:52:ad:b6:2b:e5:
40:32:f8:21:44:c7:04:d0:ad:62:fa:79:8a:eb:19:7e:cf:54:
35:93:17:a6:b7:46:95:a0:93:89:9e:82:d9:23:e5:4b:40:9a:
3c:4e:5f:69:ee:49:63:c1:ca:90:3e:80:25:da:75:41:51:bb:
4b:68:5b:07:fa:5e:51:80:46:a5:b4:a5:34:b4:5c:26:1c:46:
91:7c:33:d9:8f:52:82:90:eb:90:6e:e6:9d:77:56:8c:f4:ae:
d4:c1:cc:b9:a7:62:20:dd:e8:36:59:09:33:7e:d9:ac:d6:ff:
ac:6d:53:13:ae:00:f5:5b:d4:f5:d7:ea:7f:e4:4a:48:bb:76:
ce:77:9b:ed:87:cc:a4:a3:34:2e:f0:33:40:de:a1:cc:29:21:
7c:b3:f7:48:8e:f1:36:52:40:ba:a7:08:52:ff:9b:af:13:b4:
1d:fa:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:48:59 2026 by rpki-client