Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: qh+++uPPmxefKproLkft+DYl7Cs/YvaHj7NLSE6Jf1Y=
Subject key identifier: 43:FD:98:41:7C:F5:B7:2A:FF:45:0D:B8:59:A0:67:81:3F:6F:5A:55
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 01A0DF862B601E89F3BC994A904CB7AECD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 115A
Signing time: Sat 26 Sep 2026 21:01:47 +0000
Manifest this update: Sat 26 Sep 2026 21:01:47 +0000
Manifest next update: Sun 27 Sep 2026 21:01:47 +0000
Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: pqPFcFznvfP680Rmw15s7SrupE1EoO3fK5PyugYRNcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:2b:60:1e:89:f3:bc:99:4a:90:4c:b7:ae:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Sep 26 21:01:47 2026 GMT
Not After : Sep 27 21:01:47 2026 GMT
Subject: CN=43fd98417cf5b72aff450db859a067813f6f5a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:bd:09:5e:8b:20:b5:7a:02:61:21:c8:13:
36:81:31:a5:b9:47:c1:97:e2:2f:86:00:fb:1b:a7:
c1:51:57:97:8a:80:35:af:e1:8c:cb:5c:63:5b:bd:
5c:c7:eb:cd:c3:fc:5d:4e:24:9a:fb:94:12:4f:f7:
ac:62:e0:42:56:31:6e:0d:f5:fd:be:69:6b:70:1c:
08:4c:4d:d4:ea:2c:30:b7:aa:dc:be:38:c9:d4:52:
cb:90:21:ae:e6:97:51:7a:8e:40:1e:2a:06:01:6a:
29:db:76:4f:c3:4f:72:c6:e5:af:8b:d6:86:c3:ee:
41:c9:7c:f1:c9:26:8c:e1:62:81:c2:b8:82:4c:c8:
ff:89:37:4b:6a:24:7d:9c:0c:d8:17:73:eb:a1:7e:
30:1e:17:34:96:82:8a:fc:44:4d:c4:c5:c9:a8:8e:
82:fa:81:b9:7b:4c:c9:4d:07:ef:06:2d:01:9a:96:
46:56:0a:90:fe:78:8b:50:1c:10:86:96:db:d7:1c:
c0:c5:d7:f4:15:07:e5:41:6d:2a:40:46:9b:88:0f:
55:d1:75:20:cb:05:90:7c:14:ba:28:1c:ed:31:8c:
f9:c0:bb:1e:98:1e:53:a7:35:15:cc:67:d0:9b:35:
af:c8:8d:6b:4b:48:89:26:97:15:72:74:ba:d7:3b:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FD:98:41:7C:F5:B7:2A:FF:45:0D:B8:59:A0:67:81:3F:6F:5A:55
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:9e:5d:21:43:d9:47:1b:33:59:5d:5f:7b:3a:31:29:56:be:
f9:c7:61:c7:c3:e6:e0:37:41:37:e4:67:18:44:73:d1:00:e7:
84:4e:d3:7f:94:a6:a9:77:78:db:f2:12:5f:01:ed:61:91:43:
a4:c3:3b:75:ae:9a:f8:cc:d2:47:20:68:0c:24:d2:64:97:f9:
4e:d0:65:1d:55:36:82:be:57:ea:62:bf:d4:8e:70:2d:6f:52:
53:96:c6:91:d6:ca:25:81:73:b2:94:e3:24:a6:ed:b9:55:48:
31:3e:64:57:85:1f:42:8e:87:60:0f:89:62:a3:18:b1:e8:e4:
05:08:ca:76:68:2d:7f:03:86:e0:d7:40:2b:95:37:c4:95:d4:
ee:22:ae:1d:b8:fb:21:66:58:06:2c:72:8a:cf:62:25:5c:24:
e4:be:26:c7:67:cd:f6:36:56:6d:a6:9d:d1:8a:23:15:bb:4f:
77:28:b4:c9:da:de:30:7c:60:00:c5:90:76:ea:22:56:89:14:
96:bf:63:78:73:33:4d:a1:37:f0:78:c2:8b:27:e1:6f:9d:78:
2c:f3:b3:16:14:36:13:65:17:d3:79:f1:6f:3f:ee:58:56:d6:
a8:35:4e:a6:04:96:c5:f2:ed:fb:0c:13:c9:ed:50:2e:80:b0:
03:43:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:58:27 2026 by rpki-client