Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: oO/abDtqxisZ3S4VuC3QAkg15bU/twNkeCk6jSKAgIs=
Subject key identifier: 4C:BC:A8:2D:91:FB:27:ED:1B:11:51:36:29:E6:E9:AD:4F:F7:D3:A9
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 019D27A9369BBC262286416DB0CFB75C34EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: /z+Yx/TYpeHA8EgBB0kiSFmB2v1bhielsYU1ruGu3Qk=)
2: kYVHDkjWpBomTAXvZtm-ybsEw4g.roa (hash: 6LPY5S+V1vJP40u2fVqFKReWSp6f+FzxIr8cYQv0/dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:36:9b:bc:26:22:86:41:6d:b0:cf:b7:5c:34:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=4cbca82d91fb27ed1b11513629e6e9ad4ff7d3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:d7:e8:0e:70:db:39:f4:f6:aa:1d:93:48:
f4:4c:6a:05:a8:44:00:82:b4:ad:d1:0d:a3:6b:14:
48:dc:08:98:a3:74:0a:59:ca:60:27:5f:45:dd:c8:
7a:19:37:93:0f:93:fb:93:7e:ce:b0:f3:cc:19:98:
c8:11:6b:3f:db:3f:c6:7a:08:55:c2:ac:92:ac:dc:
99:ba:be:19:67:f4:a4:b1:5f:c1:73:20:7f:94:ce:
a3:7f:3f:7f:eb:50:01:c8:a5:48:b3:51:58:2b:ac:
b6:71:4c:82:14:4b:77:70:e2:98:ac:74:c4:8e:d2:
69:51:2a:b3:c0:ed:fa:f2:ed:75:04:92:3e:34:af:
22:42:88:65:66:8f:92:04:8c:25:c5:e0:4e:8e:e2:
43:1c:3d:18:9c:cf:06:e8:2c:84:72:24:cb:47:9a:
39:b6:e0:63:d5:60:00:d1:af:e6:92:1f:6b:5c:77:
8e:86:77:cb:c1:aa:ce:ba:c5:b7:73:d9:d3:23:99:
51:e6:a4:cf:c2:d6:5e:52:90:fe:4e:4d:34:f8:24:
70:b9:e7:2f:ed:e0:c9:dd:f9:a9:ae:1d:f3:77:99:
ba:87:76:4a:9f:64:d4:ff:87:13:fd:18:97:a8:ca:
e9:6f:2a:e9:1f:ba:4e:06:7c:d2:e1:32:80:1b:ba:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BC:A8:2D:91:FB:27:ED:1B:11:51:36:29:E6:E9:AD:4F:F7:D3:A9
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:9f:a4:dd:71:69:c1:0a:77:29:f1:4f:b1:43:05:c6:82:ea:
dc:71:36:f2:e1:63:cd:b4:9c:fb:14:1a:74:67:c5:c3:f5:f1:
96:bd:37:0a:77:ac:b5:05:22:eb:b8:6c:01:e8:64:22:8f:9d:
f9:4d:8c:19:9d:bb:09:bb:a2:52:d5:89:3a:fb:0f:dc:18:fe:
02:88:6a:ad:63:59:39:04:ba:f3:c2:5a:45:30:8a:c3:6d:57:
cf:a2:c8:5f:6f:8a:28:bd:82:73:17:a9:bf:0f:2d:99:43:3c:
39:6c:8f:2d:59:bd:e5:b8:ac:f4:a0:31:48:19:2a:1f:98:6c:
a2:ce:1b:51:53:af:6c:12:c7:23:82:e7:e6:99:86:46:d0:b9:
be:00:e7:78:7b:f3:b7:ab:46:98:cc:76:5c:9d:1b:37:39:0c:
40:b2:90:0a:8b:53:f1:27:0e:2b:7a:45:a5:a7:b9:85:1e:0d:
0a:ad:e5:bd:3f:8c:b6:66:3e:63:68:ce:fb:66:8b:02:32:9e:
92:76:05:70:98:b7:00:a1:dd:bb:7c:d2:fc:f6:64:f0:8a:65:
62:07:dd:f0:59:1a:3e:38:d6:dd:f9:05:96:7e:45:60:0c:44:
94:8c:e7:68:8c:3a:2b:40:1a:e8:37:17:b2:d4:3a:ab:69:8e:
cb:70:a7:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqTabvCYihkFtsM+3XDTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz
ODI3OTMwHhcNMjYwMzI2MDEwMTM0WhcNMjYwMzI3MDEwMTM0WjAzMTEwLwYDVQQD
Eyg0Y2JjYTgyZDkxZmIyN2VkMWIxMTUxMzYyOWU2ZTlhZDRmZjdkM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCfX6A5w2zn09qodk0j0TGoFqEQA
grSt0Q2jaxRI3AiYo3QKWcpgJ19F3ch6GTeTD5P7k37OsPPMGZjIEWs/2z/GeghV
wqySrNyZur4ZZ/SksV/BcyB/lM6jfz9/61AByKVIs1FYK6y2cUyCFEt3cOKYrHTE
jtJpUSqzwO368u11BJI+NK8iQohlZo+SBIwlxeBOjuJDHD0YnM8G6CyEciTLR5o5
tuBj1WAA0a/mkh9rXHeOhnfLwarOusW3c9nTI5lR5qTPwtZeUpD+Tk00+CRwuecv
7eDJ3fmprh3zd5m6h3ZKn2TU/4cT/RiXqMrpbyrpH7pOBnzS4TKAG7qVnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy8qC2R+yftGxFRNinm6a1P99OpMB8GA1UdIwQY
MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt
NjY4MmIwN2ZhOTQ3LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3
LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Z+k3XFp
wQp3KfFPsUMFxoLq3HE28uFjzbSc+xQadGfFw/Xxlr03CnestQUi67hsAehkIo+d
+U2MGZ27CbuiUtWJOvsP3Bj+AohqrWNZOQS688JaRTCKw21Xz6LIX2+KKL2Ccxep
vw8tmUM8OWyPLVm95bis9KAxSBkqH5hsos4bUVOvbBLHI4Ln5pmGRtC5vgDneHvz
t6tGmMx2XJ0bNzkMQLKQCotT8ScOK3pFpae5hR4NCq3lvT+MtmY+Y2jO+2aLAjKe
knYFcJi3AKHdu3zS/PZk8IplYgfd8FkaPjjW3fkFln5FYAxElIznaIw6K0Aa6DcX
stQ6q2mOy3CnjQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:18 2026 by rpki-client