Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: mgatmR0p+2BTfUGYQqpiwRQvBJQ3JaZFvta0egTRw6s=
Subject key identifier: A6:78:5D:9A:DF:57:72:B5:97:D5:19:3E:D5:BC:9A:D7:1A:61:E2:12
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 019CABD9299DF0F352A5147E40DEB9B204E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 143E
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: jY/REXISGkhAbnxEK8f3IoNVw35gmW2Ngyf2JShZ2VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:29:9d:f0:f3:52:a5:14:7e:40:de:b9:b2:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=a6785d9adf5772b597d5193ed5bc9ad71a61e212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:5a:c0:12:44:4f:6a:85:9f:0a:22:a2:33:
9c:d2:e3:95:b8:e0:ad:af:59:4d:b4:f4:40:82:ad:
f9:b2:ea:39:a0:68:6c:c0:ae:cf:cd:f0:f7:64:0d:
24:28:ba:33:b5:e7:01:26:8b:b4:60:ff:7c:4a:ed:
20:b2:0c:21:9f:48:00:fd:5f:b7:8e:13:12:39:7e:
72:de:7c:62:24:56:30:d2:78:9f:31:e7:a9:74:df:
c6:b3:d6:89:75:33:7a:cb:8d:65:ed:5e:4a:d6:5c:
20:3d:d7:d2:d5:f7:e0:74:2d:00:ee:47:9e:51:7b:
b5:7f:72:8a:23:b1:09:84:bd:e8:14:51:84:09:c1:
30:c8:a3:2a:d1:03:67:bf:c8:e4:42:20:5d:ba:fe:
fb:c6:b2:41:92:cc:09:ac:8b:bf:30:59:13:6c:24:
41:9f:53:cd:03:d5:b0:59:3c:35:5a:7d:a7:78:a0:
bd:a0:0e:86:d2:db:97:66:c6:bf:04:e8:ea:70:3b:
b7:58:a6:81:20:75:17:76:5f:c6:eb:d6:ae:fe:08:
d7:ae:9f:e6:ab:8d:57:f5:6f:50:88:95:42:c4:c5:
e1:3e:eb:a4:4b:9b:72:90:4d:c9:0c:52:d9:4d:1c:
01:2c:10:90:1f:8d:48:0b:35:cc:52:cb:19:13:e3:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:5D:9A:DF:57:72:B5:97:D5:19:3E:D5:BC:9A:D7:1A:61:E2:12
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7b:93:19:71:02:2c:c7:a4:ad:86:07:7c:63:8c:c7:a2:a6:
19:02:65:47:cf:23:6d:a3:0a:cd:96:8d:ea:e4:3b:b7:73:86:
20:7f:d8:b4:f5:da:20:1c:13:49:37:36:07:ae:c4:a9:f6:77:
be:c7:26:74:6f:6c:10:bb:72:f6:79:cf:03:ac:ad:3e:59:76:
c3:bd:5c:96:f4:f0:f1:35:42:02:ff:82:a4:ef:69:00:ea:5c:
5b:e7:c4:0f:77:07:f6:0b:6a:94:37:7d:8c:ec:ab:63:8e:f8:
dd:f1:07:f4:42:86:92:ee:50:68:f4:f1:94:99:07:ff:8c:23:
1c:0f:27:da:e5:14:d8:63:b2:eb:1b:e5:a0:35:30:21:0e:23:
a3:1e:2a:3f:ee:d0:1d:27:a5:e8:ce:c7:d7:93:d6:f8:5a:72:
27:00:e4:57:2d:26:6f:ca:f5:17:7d:b8:97:ee:5e:d5:55:20:
d3:50:f6:6b:ba:84:6c:f4:56:f9:02:bb:d8:38:af:62:b7:ee:
72:16:82:e3:6e:e4:e8:fd:bf:d6:be:56:d8:7d:55:4e:18:95:
4c:36:c6:f8:ad:f0:20:4f:89:25:bf:3e:db:63:25:d5:85:c5:
91:5f:4e:cd:f2:66:02:8d:6a:30:df:15:15:71:b3:0b:ac:9c:
0c:22:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:12 2026 by rpki-client