Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: yzDQdPlZnfQ5cNPoyn5W6oJhxoFWFRTdYVlEIdjnXcM=
Subject key identifier: AE:6C:A2:0E:AA:01:D4:B7:7C:B4:4A:BA:3F:2C:73:AE:41:F5:5E:4D
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 019D382E70F24BF0088CA4CB14908992462D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: fqe6NyqGeZLZDcQwpvqs6mMdDI0.roa (hash: 2W2OermTlAjnbB1evXIPuqiK3CU6ZGK4qE5cQcpe5Uk=)
2: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: 5wtboBHPVSBiYboRiacf3Bphf9kA8ZQNLM1iZJAAMLU=)
3: x0UL_tHjtGxiEevSxlF8WJ92kng.roa (hash: d2i4QuG0v0Jk1Or2egUFmUz1aiUe0+YuRvWeIsg+YUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:70:f2:4b:f0:08:8c:a4:cb:14:90:89:92:46:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=ae6ca20eaa01d4b77cb44aba3f2c73ae41f55e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:ac:1c:b9:e4:51:21:7d:27:e9:66:fb:76:
42:33:70:17:fa:16:46:f9:f5:41:f6:c7:b5:5a:f3:
f7:c8:15:af:ad:ae:9f:a0:12:50:c1:b5:05:d0:76:
4d:65:3b:d9:c1:0e:c8:c7:2b:c5:8c:aa:d4:b0:96:
fa:8a:90:a0:41:4f:4f:cc:37:37:30:ca:8a:1f:2e:
b4:4c:ce:72:5c:2e:6d:73:72:38:85:e4:11:bb:b6:
37:18:3b:03:b4:93:fa:99:f1:3f:94:98:f3:b4:4d:
b4:25:33:b7:a7:01:35:39:7b:0e:1d:61:f4:44:2b:
16:15:f7:b0:14:30:bc:92:0d:64:86:c8:48:e3:e8:
a4:e3:51:ce:2f:e8:4a:3d:84:12:fe:86:76:97:f6:
a1:cf:42:b3:e2:4b:e0:ba:4f:38:13:b3:8f:34:70:
5e:88:79:67:02:fb:06:c3:63:e5:cf:76:df:54:b1:
72:2d:48:d4:66:4d:99:33:1b:c2:5f:36:54:6b:df:
41:6b:47:72:24:aa:d4:76:14:e2:9f:0c:70:fc:ab:
b3:62:35:e4:88:f4:2d:91:17:ba:cf:d8:e3:c6:58:
f4:e8:00:fe:c4:48:a2:a1:70:e7:24:ff:23:f8:a5:
c8:e9:60:a9:f1:b3:bb:b4:ce:6d:5e:5e:a5:44:60:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6C:A2:0E:AA:01:D4:B7:7C:B4:4A:BA:3F:2C:73:AE:41:F5:5E:4D
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:11:35:38:35:30:7c:82:97:1a:87:67:27:2e:d9:90:6f:02:
a6:37:39:3b:c4:a7:21:84:56:0b:fa:b8:ec:6c:eb:b3:24:f0:
a1:f0:53:fd:a8:36:17:4b:62:a4:1f:a0:22:46:39:e8:4b:ed:
6b:1a:0e:fc:0b:ac:37:1e:2e:4d:98:93:47:10:c5:1b:64:06:
cf:09:4a:c4:b9:47:ca:cd:d3:b4:e6:a8:80:1f:ae:22:7e:29:
f6:ee:ea:79:44:46:42:00:56:82:0e:5f:c9:ec:ef:18:22:3d:
3b:e9:75:de:3b:0f:12:4d:47:32:63:7f:32:9f:71:7b:de:71:
29:c9:54:8f:25:4b:d3:7c:d7:9e:2b:32:94:01:fb:8b:02:2e:
a5:31:14:91:b6:10:81:c5:94:42:eb:d2:67:95:bd:d3:cb:e5:
18:0a:95:6e:ec:aa:67:e7:35:6d:e5:32:18:b1:94:19:0e:4c:
78:2a:81:8e:2e:ca:19:19:9a:c8:43:42:6d:1f:95:1d:d5:62:
34:55:ca:66:ae:d6:d7:d7:2e:b7:42:37:aa:cb:2a:88:cb:6a:
85:17:4c:01:db:ec:3e:d5:3b:59:bd:cb:91:fd:b3:47:dd:8c:
e5:9f:fb:42:a6:82:b2:a3:b9:81:e8:c4:6c:52:81:ec:cc:a9:
58:4a:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:34 2026 by rpki-client