Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: qQT4TGV/Of8WriWrfjZNjbjIQGj+LB73TTwl4Jyf6ec=
Subject key identifier: 2D:16:2A:FC:A0:A9:89:C9:63:BE:E4:15:6F:27:04:41:99:3C:BE:35
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 019DA453D9A24D89260020C730D150777A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:00:51 +0000
Manifest this update: Sun 19 Apr 2026 06:00:51 +0000
Manifest next update: Mon 20 Apr 2026 06:00:51 +0000
Files and hashes: 1: fqe6NyqGeZLZDcQwpvqs6mMdDI0.roa (hash: 2W2OermTlAjnbB1evXIPuqiK3CU6ZGK4qE5cQcpe5Uk=)
2: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: fai3f1SnxB9NZSuj+kHifZGPAoAgqorSkfq1R6qf0Ko=)
3: x0UL_tHjtGxiEevSxlF8WJ92kng.roa (hash: d2i4QuG0v0Jk1Or2egUFmUz1aiUe0+YuRvWeIsg+YUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:d9:a2:4d:89:26:00:20:c7:30:d1:50:77:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Apr 19 06:00:51 2026 GMT
Not After : Apr 20 06:00:51 2026 GMT
Subject: CN=2d162afca0a989c963bee4156f270441993cbe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:55:ee:8f:85:1c:61:ed:8b:32:e4:04:f5:0c:
9c:d5:aa:38:28:50:72:21:7a:7a:b0:05:fe:45:90:
c4:a3:88:74:1b:65:ab:62:d3:8f:ee:5c:1e:cb:d8:
f2:4d:89:00:e6:67:1a:0d:b3:d4:0b:28:40:ef:ea:
90:d2:4e:cb:40:87:46:a8:99:bc:f0:50:1c:72:4b:
95:60:90:1d:a0:4f:37:ff:88:4d:5e:82:4b:74:6e:
a0:dd:ec:9b:0b:2f:98:10:50:26:3d:0e:60:0f:f6:
dc:db:4e:37:bc:9d:e9:79:f6:a8:dd:01:16:77:9e:
a7:d4:cf:52:32:30:cd:27:d6:1e:96:29:be:b8:4a:
32:21:80:53:12:7c:7f:31:6e:cf:9a:ff:f3:38:f9:
cb:76:37:d5:d3:dd:8a:73:e4:c2:b2:fc:e2:62:40:
b6:ba:22:d0:9f:38:61:29:bd:53:44:81:c0:6d:fa:
85:af:26:d4:ef:83:b7:73:9e:97:a1:7b:03:f3:30:
3f:66:17:d3:ee:4f:e5:82:0c:b3:d6:98:9b:11:99:
c3:b0:48:f4:5c:4d:fb:9a:83:a4:88:bd:cd:4e:49:
5e:be:18:93:ec:68:01:52:21:90:ea:39:9e:ac:e3:
60:a0:b1:9b:26:82:01:8a:69:be:9e:11:6e:a0:7d:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:2A:FC:A0:A9:89:C9:63:BE:E4:15:6F:27:04:41:99:3C:BE:35
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:75:71:72:8a:9a:b4:47:a8:0b:88:ca:6d:55:00:a5:14:ce:
b1:d5:85:d3:37:c6:37:ae:af:58:0a:fa:d1:38:85:65:c7:f8:
4a:3d:87:f8:e9:31:e4:16:b4:4c:08:57:8b:da:be:71:95:85:
69:34:61:cd:46:92:4d:18:5b:cf:b6:3c:47:3b:dc:41:46:3d:
d2:3e:53:80:f9:25:b3:b6:8f:39:15:94:f3:89:7f:de:62:99:
d1:d8:c2:0b:7f:7d:82:ad:65:da:cb:d6:9c:e0:5c:58:c6:92:
b0:27:a3:d3:af:84:c4:95:7b:f7:55:3a:e4:c1:3b:b2:f0:d2:
3b:ac:90:dd:9f:98:56:d7:3a:73:8b:dc:c7:2c:e0:f5:e7:29:
25:0a:93:9d:8c:12:1f:75:00:6f:13:e1:1e:8a:2a:c1:2c:0c:
8f:75:a2:ea:36:37:e2:1e:df:69:9c:a2:8a:04:db:6e:7e:a0:
89:5d:75:c3:9d:a3:b6:51:c2:91:9f:d5:c1:af:90:44:fb:89:
ea:aa:58:28:7c:c5:6b:41:db:97:cd:d8:9d:8b:22:48:df:92:
31:27:30:20:21:a4:8f:78:b5:2e:50:e5:2c:50:ae:0c:48:f8:
9e:26:eb:7d:8d:9d:b0:58:03:e3:d2:9a:9a:62:c9:b6:08:7f:
75:36:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:25 2026 by rpki-client