Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: FbfWhM6l7get0EuFqqjS67mn44hrMXa2XUTmmQyUcqI=
Subject key identifier: 60:A7:28:84:58:51:BF:63:55:A4:5C:80:09:43:B5:7C:0A:6C:FB:70
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 019CAA582792E5F51E1B1C21EEBCA3683345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:29 +0000
Manifest this update: Sun 01 Mar 2026 17:00:29 +0000
Manifest next update: Mon 02 Mar 2026 17:00:29 +0000
Files and hashes: 1: 0gT4DLtTdM_CyVsv9Vw60QKs1N4.roa (hash: zFRwzZzrDs5I9AtJqZurIqmSmEX2LYuF+rvsMKclqlE=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: 96l5jksTjXinAAhRBEU3cNWHg4s1yKNq4Y+ExXrnLU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:27:92:e5:f5:1e:1b:1c:21:ee:bc:a3:68:33:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Mar 1 17:00:29 2026 GMT
Not After : Mar 2 17:00:29 2026 GMT
Subject: CN=60a728845851bf6355a45c800943b57c0a6cfb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:c9:cc:9f:c0:22:11:3d:e5:b0:91:91:dc:
fe:70:0e:e6:b9:61:0a:8f:fc:96:a0:3b:9a:2a:ae:
95:95:a8:e9:62:7b:93:c5:dd:eb:ae:99:9a:f4:51:
4c:70:b8:2b:64:39:f0:7f:8c:7c:38:cf:ac:ff:77:
d6:3a:6d:6d:b2:95:55:22:39:30:e2:0c:73:12:87:
65:8c:ae:0a:d7:ed:b6:c1:66:b7:ed:45:d5:dd:b3:
a7:c2:44:45:69:df:5c:26:05:67:76:3f:19:64:c8:
a2:da:5d:54:97:3b:56:c2:8d:a5:62:29:ef:36:af:
49:b2:b6:2e:64:67:50:2a:d3:66:a2:0c:ec:f4:48:
c8:69:f2:bf:2a:27:52:e3:72:ac:02:16:4e:e8:74:
bf:97:21:8f:80:d1:cd:ab:ad:ee:f0:ad:e4:cc:cd:
43:40:ee:eb:56:4b:e6:9c:78:04:3c:4f:85:83:52:
c5:89:0a:3b:b0:2b:b1:6c:11:ca:ac:22:92:e0:fd:
e9:dc:6f:91:ad:c9:d5:fb:36:b1:38:5f:8d:36:77:
e8:b1:e7:66:2c:3f:cb:dd:ca:3f:59:a7:ea:17:e3:
ed:9b:3a:00:38:f1:59:f3:59:62:03:bf:23:08:35:
24:5a:05:2a:80:c3:2e:4c:55:7c:2b:98:c0:c1:0a:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A7:28:84:58:51:BF:63:55:A4:5C:80:09:43:B5:7C:0A:6C:FB:70
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:ec:b5:e2:b4:73:71:87:1e:e3:5e:a8:8a:e1:ef:ef:4c:
2e:9e:3e:a5:51:02:2e:a1:f6:79:4a:56:df:d5:b4:cc:73:5f:
8a:31:4b:63:2f:44:d1:d3:35:08:f7:30:e4:8f:fa:8c:e7:31:
8e:4b:64:78:03:12:86:4a:0d:d0:75:dc:58:0e:db:88:c5:bc:
f0:9e:aa:b2:ac:47:5a:75:61:67:2f:fb:11:ff:52:49:c2:93:
7f:74:f5:58:b0:b3:83:0f:fd:00:9b:76:ea:a5:91:8c:c2:5b:
e5:ba:0a:b3:f9:6b:1b:18:82:77:39:fa:f0:22:e0:5c:dd:af:
6c:7f:d9:5b:d7:08:38:8c:77:bd:5b:a0:bb:c3:9a:f2:0c:16:
75:02:80:b8:a6:23:cf:e8:44:bb:e6:f8:bc:40:18:1e:d0:a1:
66:e6:9b:2c:0d:00:a9:71:b8:63:2a:8e:8d:5e:09:58:e4:9c:
cf:65:ff:bb:25:f4:f3:b6:b1:f0:2d:9d:46:41:20:f0:ce:c4:
2e:53:5d:82:4a:c4:ab:8f:7c:e0:69:34:41:f1:bc:a8:80:43:
64:1d:0f:0f:1b:39:52:9b:a4:b4:54:ae:3f:b8:73:b8:19:9a:
93:ae:26:a1:b8:1e:03:09:21:a5:58:37:55:a7:59:53:68:87:
e7:d6:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:05 2026 by rpki-client