
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: 49gFHltwSxYVf3UTsI5WJd2yDC2ImxRewIvnBDnJ0jY=
Subject key identifier: EF:5C:43:74:4E:C7:E5:3F:E8:BB:41:28:7F:DE:FE:C3:89:0D:2F:F2
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 019D28BB3997C16921E8D917D2A014DF6B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: fqe6NyqGeZLZDcQwpvqs6mMdDI0.roa (hash: 2W2OermTlAjnbB1evXIPuqiK3CU6ZGK4qE5cQcpe5Uk=)
2: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: As6tTOmSRp+ujzcOG6oyRS8ey3pFBCPepk7wOgFeAKo=)
3: x0UL_tHjtGxiEevSxlF8WJ92kng.roa (hash: d2i4QuG0v0Jk1Or2egUFmUz1aiUe0+YuRvWeIsg+YUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:39:97:c1:69:21:e8:d9:17:d2:a0:14:df:6b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=ef5c43744ec7e53fe8bb41287fdefec3890d2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:05:40:a2:11:7f:94:4b:66:c0:f1:3d:43:
21:32:7b:ba:db:2e:e7:4a:c8:2d:74:6b:06:65:b7:
39:30:ce:ef:d3:d2:a9:5a:69:3d:3f:38:6b:9d:8d:
00:fb:26:be:33:a5:de:4e:d9:65:6a:a0:2c:19:74:
77:dd:9b:b4:b3:ca:f2:93:ff:54:3d:6c:de:47:3b:
71:f0:f8:cb:41:5f:40:d5:9c:0c:9b:ac:a0:54:be:
03:a2:13:70:7c:92:3a:8c:8f:c1:64:cf:22:f4:a8:
da:ca:d9:00:f2:c1:41:65:9e:eb:15:26:eb:b2:c8:
71:07:2b:80:63:e6:9d:ae:5d:a6:26:78:35:3a:c2:
8e:b0:0c:41:39:7e:ad:3a:a9:6a:26:52:a7:c1:11:
ab:05:f5:a4:01:96:2c:b3:4e:fe:0e:6c:84:10:f8:
9e:33:58:2c:49:0c:d6:fd:88:5b:c7:f8:3d:b5:f4:
fa:08:9e:e1:c8:e8:e5:06:9e:bc:17:b3:7d:ec:d5:
6f:bc:29:d2:d0:a8:b7:ea:36:f8:ab:f5:ae:60:54:
f9:a9:d7:0f:f5:11:5b:a3:c0:01:40:0f:78:9e:32:
a7:70:0d:23:45:5d:57:a0:c3:21:a9:44:2d:71:d7:
1b:cd:10:f1:1f:ac:5a:1b:e5:b7:23:5d:a8:1c:47:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:43:74:4E:C7:E5:3F:E8:BB:41:28:7F:DE:FE:C3:89:0D:2F:F2
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:91:81:75:df:f0:49:d1:b7:5c:b5:f0:c0:9e:7b:29:59:
79:f8:74:c2:99:04:03:2f:d9:16:c5:56:00:fd:f8:1d:b2:cc:
be:91:e0:80:e4:ab:3c:b2:7f:2a:d6:3d:bd:82:d1:8e:14:7b:
75:35:e2:d6:54:7e:4f:66:4b:c9:ac:a7:91:90:f0:3f:3f:4c:
8c:40:a2:3b:49:52:b4:c2:a6:cd:e8:35:84:14:3c:49:c9:06:
9a:b9:79:7c:9f:5d:de:32:fb:4a:4f:8f:57:c5:2e:fd:76:25:
5e:d1:a3:62:49:47:11:35:f8:4c:c4:9b:8a:d7:21:0e:18:fa:
cb:91:68:45:11:93:55:74:fe:ad:9c:3b:f1:85:64:af:23:7c:
0a:b8:6c:ac:ce:bc:5b:25:3b:07:39:28:22:b5:00:1e:1a:5a:
86:cb:a7:68:a0:2f:7a:c2:d6:aa:30:8d:b2:29:b2:d9:96:20:
55:a9:5a:b3:e9:28:0d:c2:dc:c3:1c:76:97:52:4c:5f:f6:d2:
ad:a8:ba:5b:20:6c:29:65:5e:83:51:e9:94:66:20:d5:58:6d:
9c:70:91:a6:8b:0b:a9:80:53:a4:a9:cd:2b:50:2b:26:41:42:
31:40:d8:3e:a1:0d:0e:ba:70:d7:6c:29:fe:93:03:f0:f9:30:
b1:3b:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:34 2026 by rpki-client