Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: O9WPfdE7pgtYrYi2h4XFpfogMRlC4d+ZllAfBPit7nc=
Subject key identifier: F2:DB:86:5D:11:85:7F:F0:6A:40:1B:1D:75:C3:AB:BC:39:CF:2E:E2
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 019CAC46C0F90EC4432F85A102EF22CCECF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 0734
Signing time: Mon 02 Mar 2026 02:00:43 +0000
Manifest this update: Mon 02 Mar 2026 02:00:43 +0000
Manifest next update: Tue 03 Mar 2026 02:00:43 +0000
Files and hashes: 1: Jpv9SoI3kGDyqv0pBDJ7LN0fBHk.roa (hash: 9hKDjqkV+zjeJgPKdV8lkrKW71TW0AgzmRdy+RD5KHQ=)
2: cBfzvfjBZ9QzsbzNAqBanT3PAEQ.roa (hash: 9GQHIoCRbaLBWwe64oMJBck16pra3GUNikVKVTlABGQ=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: K9Fm69xYIngbkucR6KJPKZJyDHQoYnY5pIEi12BMMiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c0:f9:0e:c4:43:2f:85:a1:02:ef:22:cc:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: Mar 2 02:00:43 2026 GMT
Not After : Mar 3 02:00:43 2026 GMT
Subject: CN=f2db865d11857ff06a401b1d75c3abbc39cf2ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:26:14:5b:6d:d9:7d:32:bf:a3:c2:d1:34:
69:48:af:96:46:e0:9a:e3:12:31:2e:f1:38:32:f2:
c2:d5:0a:d2:a5:ba:79:e9:c8:85:88:d6:3c:5b:5b:
50:8f:9b:2a:29:0b:15:c7:97:3c:cc:50:d8:34:ab:
b1:08:7b:1b:31:49:44:aa:86:71:3f:c6:56:5d:2c:
8e:71:61:73:d6:1b:bb:c4:cc:2e:e4:0a:79:9b:8c:
1a:3d:09:fb:63:0e:00:2c:65:21:ae:46:84:f8:3b:
66:b7:00:d6:8a:b7:25:53:99:15:3c:b8:15:ea:aa:
e6:53:5a:54:95:d3:c5:9c:84:c1:3f:42:76:6b:f9:
8e:e7:c3:77:f7:e9:2f:f2:1e:a5:f5:8e:36:39:eb:
82:04:6c:3a:7d:fc:7d:91:71:71:db:fe:f0:bf:1b:
90:06:6d:7d:b1:fd:73:e2:34:26:23:65:2e:2c:2d:
35:a4:20:5e:da:14:a1:c5:e2:07:f2:a4:e6:32:85:
a8:bd:65:69:e5:4e:2f:66:4b:9e:08:bc:e9:cb:e9:
8f:04:ea:cf:39:00:f5:22:84:18:dd:2b:24:fd:2f:
db:c1:5e:dc:4c:86:38:22:e1:7b:01:30:b3:4d:d0:
bb:c8:9e:56:a3:e8:15:aa:39:c6:e0:fc:c2:e2:f1:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:86:5D:11:85:7F:F0:6A:40:1B:1D:75:C3:AB:BC:39:CF:2E:E2
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f2:03:02:aa:00:c7:74:6e:cd:45:48:53:70:ea:1f:ba:9d:
67:18:a1:b7:7c:d9:10:47:ff:16:62:f4:b4:a0:e4:c3:01:d5:
b7:ae:4c:0a:86:24:49:33:8d:f8:99:d5:7f:bd:23:bd:1a:6b:
4f:ea:3e:e1:df:38:89:d2:7e:ad:7a:52:de:2e:01:c6:65:d9:
b8:f6:82:95:50:ea:0f:37:c5:9e:71:89:7a:77:41:83:c3:ec:
a0:5e:2e:f2:d0:20:2c:7d:27:e2:3a:c6:ce:70:0e:a9:45:14:
2a:99:a5:f4:2a:3f:9e:90:7c:f3:6a:19:6e:79:7c:1b:a3:f0:
34:27:4a:22:a6:5e:98:87:f6:e5:5c:92:c2:d5:09:e9:76:11:
c1:5d:1a:68:66:4c:db:ed:6f:4a:36:ee:6e:c8:8d:08:d2:4c:
1c:cf:20:48:93:57:07:cd:37:7e:88:e6:6a:20:3e:17:f0:28:
2d:fe:8c:e6:2a:a7:2d:3a:06:7b:dd:d4:4f:77:f8:eb:8f:e1:
3a:2e:39:aa:38:eb:d1:41:29:13:87:d5:40:be:91:34:53:3f:
43:8c:6b:56:a2:57:89:bf:67:66:c9:4f:51:9f:12:84:4b:5c:
c2:39:9e:a5:32:1a:9e:f0:55:98:84:92:7b:e9:6d:7b:d7:55:
51:6a:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:54 2026 by rpki-client