Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: jR+Y9Q9QFm0DHDOzpCPrmiRloZXTU6nknGk3RNtHgM4=
Subject key identifier: 42:4E:49:88:A0:0B:92:CB:82:35:EE:69:F7:D1:E2:7F:06:B6:5F:7F
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 019CAB342DEBC8F555501AF7E96D1283EC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:49 +0000
Manifest this update: Sun 01 Mar 2026 21:00:49 +0000
Manifest next update: Mon 02 Mar 2026 21:00:49 +0000
Files and hashes: 1: fqe6NyqGeZLZDcQwpvqs6mMdDI0.roa (hash: 2W2OermTlAjnbB1evXIPuqiK3CU6ZGK4qE5cQcpe5Uk=)
2: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: gDi7OmrSATcZgSWOlLOfK6RSzHHjWQDUJ73wZq8Pyck=)
3: x0UL_tHjtGxiEevSxlF8WJ92kng.roa (hash: d2i4QuG0v0Jk1Or2egUFmUz1aiUe0+YuRvWeIsg+YUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2d:eb:c8:f5:55:50:1a:f7:e9:6d:12:83:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Mar 1 21:00:49 2026 GMT
Not After : Mar 2 21:00:49 2026 GMT
Subject: CN=424e4988a00b92cb8235ee69f7d1e27f06b65f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:fe:a6:08:6d:cd:f6:15:82:66:68:a6:ad:
e2:82:e7:a1:aa:e9:4d:57:09:38:4c:7b:86:d7:97:
ad:82:53:2c:3c:36:d7:3e:55:54:52:28:9d:bd:e2:
e4:e1:b0:f0:0a:05:63:2c:8c:ce:df:67:94:64:f6:
2d:29:74:d1:1a:f3:9f:7d:a4:60:79:80:4f:2b:a9:
bb:9d:91:29:fc:a0:71:43:5d:1a:ab:38:35:8c:51:
76:35:71:88:c4:e6:3b:91:7d:23:44:f5:ce:50:6c:
8a:d0:10:4b:0c:4b:ca:49:d1:6a:02:8d:65:ee:3a:
50:16:51:54:6f:1e:6d:3e:e9:bb:1f:d1:27:34:48:
08:ab:2e:1c:cf:35:31:6c:2d:6c:27:24:a5:19:b0:
13:e7:c2:d6:8e:b3:0d:ff:40:3d:c7:ca:15:83:c6:
5f:06:21:9f:c0:20:76:ea:ad:93:0e:a5:75:89:14:
93:80:4a:b5:ab:bd:05:4c:d5:29:ff:5f:0d:a3:1a:
a6:8a:72:e2:b0:2b:c1:13:9d:e7:11:78:52:98:49:
2b:75:21:cb:20:fb:d4:44:01:3a:15:1f:13:08:46:
50:20:03:f1:40:97:09:2f:d1:22:a1:44:48:b0:5e:
21:45:61:53:de:cc:ee:54:67:12:d7:f8:5f:58:63:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4E:49:88:A0:0B:92:CB:82:35:EE:69:F7:D1:E2:7F:06:B6:5F:7F
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:14:cc:ef:a6:79:73:12:09:8a:3d:d3:2d:3e:a0:f0:67:ba:
20:e2:21:ed:85:b8:55:b6:7c:35:3c:14:de:b7:b5:ab:f7:3f:
b2:b8:f2:90:1d:e4:ae:bf:f0:c8:26:1e:2d:60:8a:b3:18:a8:
4c:96:b9:d4:e1:f1:28:15:c9:01:0b:4c:ce:56:63:2f:f2:f0:
2b:80:3e:a5:df:fd:12:8f:33:a9:4a:40:7b:08:9b:5c:60:11:
25:8a:9f:2a:0a:0c:f8:82:64:f2:3b:dc:b2:35:73:20:19:80:
71:e3:90:b8:c7:6a:46:8d:e3:09:b1:a5:34:30:ef:97:79:c5:
84:6d:db:a8:55:e8:3d:f8:d1:3a:96:e0:22:4b:7d:6b:31:64:
89:e0:13:63:40:f8:bd:b0:66:af:a4:a4:38:6f:22:62:25:3a:
72:28:b7:52:96:5e:c8:ef:49:63:cc:3b:cf:43:94:1e:3e:bc:
64:50:84:a5:73:30:93:61:1e:1e:7e:eb:85:c6:cf:09:0b:0f:
8f:46:2f:c5:c1:08:08:8a:d3:a9:a5:9f:3f:d3:04:3c:b7:96:
fd:61:a5:55:40:f7:d3:56:aa:5d:2a:25:6e:20:bc:14:99:f6:
44:4a:b1:db:00:d6:45:64:82:5a:ac:02:5a:1a:ed:7d:49:a9:
b8:36:f2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:28 2026 by rpki-client