Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: ImMdGK+2xaBFZa5UpnvqMiGapT0pgxv9eN+rK6mjNcM=
Subject key identifier: 6D:80:7B:06:A2:39:E4:7A:01:23:09:AD:89:65:5D:35:4A:0A:3A:B4
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019CADC76BAFFEE98D24C65C4EAD259F87AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0F2E
Signing time: Mon 02 Mar 2026 09:00:53 +0000
Manifest this update: Mon 02 Mar 2026 09:00:53 +0000
Manifest next update: Tue 03 Mar 2026 09:00:53 +0000
Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: 9ezOyAsRMdS7Cz16veSPOPNmbMo4Mcyiyn+tnpV41UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:6b:af:fe:e9:8d:24:c6:5c:4e:ad:25:9f:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Mar 2 09:00:53 2026 GMT
Not After : Mar 3 09:00:53 2026 GMT
Subject: CN=6d807b06a239e47a012309ad89655d354a0a3ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:96:ac:98:cc:38:e9:28:30:0d:4c:36:26:
61:d0:b6:be:3b:48:f6:25:bb:5b:07:cc:49:98:6e:
c7:f4:83:c4:07:dd:e5:d7:5d:d6:0e:0b:11:02:7c:
91:6d:7b:8f:75:d6:ef:48:a4:2f:12:14:f6:e2:29:
46:24:58:d7:8f:4e:ed:50:4d:95:31:67:c6:03:74:
68:a9:d6:0f:59:8b:20:a7:5e:4a:f4:0f:1c:ee:f6:
42:bd:e6:75:29:d9:5b:b4:e7:38:8a:4c:f9:e1:3c:
93:51:14:09:45:85:af:cb:41:02:48:f9:55:78:92:
31:91:4a:f9:a7:70:68:d7:6f:84:4c:db:76:0e:dc:
ea:7d:66:24:6b:f6:60:36:3b:49:99:42:8b:d2:93:
98:51:4f:8f:2a:71:fe:01:04:af:0b:fe:44:ad:f9:
b6:f0:ae:7f:44:b7:83:d6:01:6d:45:fa:13:26:e0:
ed:3c:69:53:39:54:f6:a3:d5:b1:71:3b:58:12:80:
ba:6a:1e:3a:35:09:9a:f9:79:d6:ef:29:72:cc:9f:
21:3f:ee:b4:91:59:92:4a:de:73:7b:69:32:df:0a:
a0:c4:a9:e8:e3:d7:b7:79:5a:81:7e:13:6e:60:9e:
98:6d:93:6c:31:9d:f6:66:61:35:05:6b:16:20:e5:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:80:7B:06:A2:39:E4:7A:01:23:09:AD:89:65:5D:35:4A:0A:3A:B4
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0e:93:cf:09:0a:6b:72:ad:ad:4d:c0:7b:f7:e9:0d:69:ec:
a0:9f:3c:db:cf:d9:7f:b3:6d:83:ce:0c:fb:48:45:6c:a0:55:
dc:e8:18:93:83:bd:9d:69:cb:01:64:75:2d:63:2b:f6:ef:c1:
e4:e6:2a:3a:10:9f:7d:50:48:83:bb:4f:3b:ae:c3:e2:6a:55:
b4:91:50:ad:7d:62:62:d3:40:42:69:e2:3a:55:3f:c3:f6:9f:
34:a6:db:31:e9:c5:34:40:3f:d0:73:64:30:85:8d:e5:b3:1b:
61:85:81:14:e0:8f:26:cc:cd:79:3a:13:d3:55:9a:c7:77:9d:
f4:91:58:2b:b1:02:d0:14:95:54:7d:2d:92:fc:2a:56:57:53:
3a:de:37:4d:34:b2:95:ce:8e:e2:b7:3a:42:4e:42:c6:d2:02:
e8:e4:ac:14:95:c7:16:2f:90:92:e8:47:08:26:cb:0c:02:bb:
e6:67:cd:87:ad:ec:37:7c:15:c3:86:2d:e2:e6:94:64:38:28:
db:58:ad:c0:a8:9b:7b:54:6a:34:f3:94:62:bb:87:ac:00:53:
b6:ad:7a:9b:d1:0c:15:23:b3:e4:fb:f1:99:5c:7b:c4:d1:f1:
fd:e7:64:24:95:dc:66:07:98:90:e7:d8:a8:a3:30:e1:bc:49:
70:07:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:21 2026 by rpki-client