Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: ubzvxNhva2MtWlizAKPo9hZkaL7k/J9ajzIBfias9y4=
Subject key identifier: 56:3F:D4:3B:4A:8E:8F:7A:06:D4:68:30:5C:BE:24:26:1E:4D:26:CB
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 01A10C26BA58BEA9CBC3D988B7906461D7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 13:00:26 +0000
Manifest this update: Mon 05 Oct 2026 13:00:26 +0000
Manifest next update: Tue 06 Oct 2026 13:00:26 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: +eualQ66flqELYk5WIG0QkX7miShncbqxdrU41VdtRo=)
2: kYVHDkjWpBomTAXvZtm-ybsEw4g.roa (hash: 6LPY5S+V1vJP40u2fVqFKReWSp6f+FzxIr8cYQv0/dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:26:ba:58:be:a9:cb:c3:d9:88:b7:90:64:61:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Oct 5 13:00:26 2026 GMT
Not After : Oct 6 13:00:26 2026 GMT
Subject: CN=563fd43b4a8e8f7a06d468305cbe24261e4d26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:9c:4b:8c:f4:d4:fc:a7:3d:4d:ac:48:ac:
aa:98:18:bd:f4:28:c9:2e:ba:ff:b1:95:52:8f:76:
d0:cf:f1:96:68:84:b8:98:e5:d8:aa:4e:d0:09:c0:
1c:1a:80:5c:6e:fd:22:59:08:ea:77:a1:39:8a:c7:
0d:f1:af:63:48:c1:29:b5:59:44:18:e3:bc:00:7d:
c1:4b:52:8e:b5:0a:b9:59:20:2e:aa:e7:98:e4:a7:
59:b4:68:11:b5:0f:07:3e:aa:7f:32:27:25:b7:5d:
8a:ff:d2:94:1f:ad:4f:a8:a8:50:fa:02:19:cf:f9:
45:3b:e6:14:0c:48:04:89:ee:a3:f3:fc:ee:d9:97:
04:02:a2:30:d8:d7:cf:ec:87:8a:a4:e9:ce:ff:61:
f1:92:c5:3a:3a:dd:9a:63:6b:49:0d:bb:b7:07:e0:
e7:12:28:ba:23:07:5b:90:98:10:ba:26:91:08:ba:
4f:c1:6c:d1:25:52:ba:b8:5c:6e:c7:da:d5:f1:db:
a6:16:e1:d5:0b:b3:35:a3:ed:cb:43:b6:27:73:c2:
6e:63:a0:4c:d4:7d:9a:d8:d4:b1:cd:47:6c:f0:ce:
9b:52:3b:5a:85:57:44:45:eb:37:78:fd:69:ac:87:
ce:5b:1e:e0:7c:fd:4c:59:1a:49:86:51:a4:c3:2c:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:D4:3B:4A:8E:8F:7A:06:D4:68:30:5C:BE:24:26:1E:4D:26:CB
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:6c:aa:1c:e2:aa:1f:23:0e:e6:a5:16:7d:80:08:80:fa:f9:
1c:75:42:a5:7a:1c:7c:a5:79:73:3c:92:92:63:c5:14:92:fc:
4a:f5:f7:9b:78:fe:8f:6e:18:e2:87:a4:46:fe:20:80:de:b8:
17:5a:52:3e:50:6e:1c:7b:e8:cc:26:1a:96:4d:09:9e:54:df:
90:9d:f1:ee:0c:7d:12:f4:3c:41:e7:67:6a:99:6c:b2:04:62:
06:8c:00:25:e6:34:ea:98:66:b7:2a:4c:f0:50:84:5d:d6:37:
c8:7d:ae:af:4a:6b:28:fa:1e:c0:ce:06:eb:8c:82:4b:46:71:
f3:01:56:ae:f5:ae:3a:5b:2f:b5:97:31:86:f6:0e:3c:84:36:
53:15:6e:d8:7a:54:98:80:a2:a0:8a:1e:f9:00:02:51:44:4a:
71:99:cc:f7:b2:cb:52:de:9f:7d:ee:d5:e0:37:4f:f8:43:17:
3b:d5:b6:01:5d:12:08:0f:49:b0:2f:66:1c:b1:f4:2b:ca:ea:
93:3d:f0:30:51:d6:aa:a5:db:84:ef:14:0f:bb:36:b3:2e:1b:
87:9a:13:29:0c:b3:7d:a6:59:23:f6:18:fe:66:42:61:50:65:
e2:83:53:67:f4:56:4e:91:da:7d:73:07:70:28:5b:78:85:50:
a6:88:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:47:54 2026 by rpki-client