Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: 7pg/+VWlml35abyGKw8I8zp7s+VT9RYoQkoZ/Xu8WJE=
Subject key identifier: 29:F0:A4:6F:C3:AC:D3:3F:6E:A7:67:03:00:8E:E6:F6:F2:B2:07:DB
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 019D2772653B9ECA9D4FE28C75C73B151888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 147E
Signing time: Thu 26 Mar 2026 00:01:41 +0000
Manifest this update: Thu 26 Mar 2026 00:01:41 +0000
Manifest next update: Fri 27 Mar 2026 00:01:41 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: Zy2NosmaZuqlHPJZHRAgJHojQ1BAtmCLXzEsRBsK8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:65:3b:9e:ca:9d:4f:e2:8c:75:c7:3b:15:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Mar 26 00:01:41 2026 GMT
Not After : Mar 27 00:01:41 2026 GMT
Subject: CN=29f0a46fc3acd33f6ea76703008ee6f6f2b207db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:99:d1:d1:af:11:1b:ad:92:16:84:3b:0c:
4b:f8:46:32:94:02:b6:ba:e2:2a:fd:cb:71:1c:5c:
d8:74:ab:7f:c9:a2:fd:2f:a6:56:fa:cf:9b:a6:a7:
af:32:21:ee:26:fe:bd:41:b7:ed:b0:a5:fd:c0:c2:
d4:94:af:f9:d6:bc:ea:3c:9c:fb:99:dd:18:42:a9:
7c:dc:e5:a2:1f:7f:d0:4d:10:fa:f9:19:53:71:1e:
60:54:02:98:b6:2b:27:1b:c0:bc:33:38:50:e1:c5:
8b:92:cd:dd:80:8d:7c:f2:06:82:26:d6:7f:32:bb:
27:07:a1:8c:f6:6e:15:0f:08:92:39:3b:b7:8a:2e:
d3:98:a5:6b:ce:6d:79:38:7a:5e:a2:5b:8c:e6:dd:
ce:77:6c:ec:13:16:71:4b:ca:3b:f1:4d:70:de:c8:
95:23:de:93:02:d0:20:55:c4:0c:c3:cb:8a:e5:ce:
77:56:84:12:67:c5:de:9f:15:b5:14:4f:34:2b:4e:
8c:f5:9b:51:53:20:ec:12:ed:31:74:d6:d7:18:a6:
42:e8:44:ce:17:a7:db:32:93:94:a1:53:fa:f5:09:
9d:f1:e9:8e:5a:5f:e9:7d:d2:ea:0c:79:5a:1a:e8:
ea:53:dc:97:2d:29:dc:91:01:92:58:c7:33:88:8e:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:A4:6F:C3:AC:D3:3F:6E:A7:67:03:00:8E:E6:F6:F2:B2:07:DB
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:55:6c:b9:85:c4:8b:09:54:c2:ca:a0:c2:6b:97:0a:18:f0:
09:b2:3e:8a:7a:c8:8b:f9:16:af:0e:ed:4d:63:c3:10:4c:9a:
7c:00:b1:2d:d7:19:ad:14:25:3f:16:1f:31:73:e6:c5:2b:61:
75:e8:7c:9d:96:9c:d2:ea:7e:f5:a3:bc:1a:5d:6e:bb:5c:7c:
5d:b3:1e:a5:5e:19:14:c9:73:a6:d0:70:37:65:d4:00:7e:8f:
82:2f:54:34:9d:0a:8c:bf:cc:95:13:4a:8a:43:f0:38:71:f1:
0e:78:e5:18:c2:59:5c:b4:6e:1a:e4:b8:e7:3d:91:35:83:ae:
cb:d1:f1:1a:fc:96:8b:a4:e2:c5:68:58:39:4a:09:29:58:c7:
a9:79:33:cf:03:97:ad:9f:db:ee:bd:cf:33:5b:b1:b2:3a:ee:
15:a8:18:51:cd:58:36:28:ce:04:4b:ea:8c:42:9e:36:cc:dd:
3b:58:c2:68:84:63:0e:20:aa:7f:8d:ea:aa:b9:d6:b8:a3:5a:
76:6f:69:b4:24:4f:a0:86:d8:d5:ed:71:88:f6:3a:36:fb:40:
f9:74:f3:1d:b0:3e:c5:81:0c:2b:bf:96:3a:00:c7:6b:15:e1:
c9:cc:26:d2:86:17:1c:84:a0:63:3b:79:38:04:35:c7:c1:73:
14:ab:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:18 2026 by rpki-client