Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
File: mPTHV2iFwoKEpNZkCz7alOMAtyw.mft (raw, json)
Hash identifier: FoXS7QAHJPItIcsaHvTrSajI8BwBj49zkwMAZ0zQfig=
Subject key identifier: D7:74:23:7B:9D:D9:68:2F:AA:DD:60:99:42:BB:1E:48:58:95:00:0B
Authority key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Certificate issuer: /CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Certificate serial: 01A0C8588492FD5D7675364733917D7B4708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:39 +0000
Manifest this update: Tue 22 Sep 2026 09:00:39 +0000
Manifest next update: Wed 23 Sep 2026 09:00:39 +0000
Files and hashes: 1: EYQtAfhdmZfDZdsN4DzNwEpURfE.roa (hash: jh9O88OI/DxugLonRxp5PXkbVTMwIQJK6Pvwlc3iuWU=)
2: mPTHV2iFwoKEpNZkCz7alOMAtyw.crl (hash: b94gef493Qz1alCazglaRF0hyCuI4gKvvovbj5lBruw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:84:92:fd:5d:76:75:36:47:33:91:7d:7b:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Validity
Not Before: Sep 22 09:00:39 2026 GMT
Not After : Sep 23 09:00:39 2026 GMT
Subject: CN=d774237b9dd9682faadd609942bb1e485895000b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:b0:ea:25:0d:db:25:3e:47:60:1d:cc:da:
39:82:a6:f6:c5:be:b1:f4:8f:e3:94:61:d5:65:a1:
9e:21:d1:e2:3d:41:50:2a:b1:be:cd:aa:27:e3:5d:
f6:d6:66:c9:44:a4:2e:16:58:d1:ac:4d:8f:0a:12:
ce:3f:81:e9:b7:bc:a4:92:60:cd:7a:dc:26:88:5e:
10:92:96:5d:24:0e:e2:f4:fd:f5:02:0d:0b:6b:aa:
d6:ad:21:c0:ac:9c:7c:d5:1f:6e:cf:04:ed:1c:94:
32:9a:a8:d0:1b:64:79:69:ec:3c:aa:aa:26:61:51:
4e:63:81:7c:f2:2a:b2:42:8f:3e:b4:71:c7:da:f2:
dc:13:43:54:d5:61:19:e7:ec:a2:05:5e:6e:57:78:
16:59:1d:bc:9b:da:18:cf:ee:b9:a9:cb:95:ff:e0:
bc:c8:06:ec:10:5c:3e:38:7f:76:3a:92:28:c0:9e:
83:7b:29:bf:e3:6c:46:0e:5c:cf:bd:e7:f0:7a:d2:
a4:3e:33:74:25:5c:96:ab:01:c3:0b:de:3f:a8:7a:
18:cb:ec:be:54:64:83:1b:c5:d6:3b:c8:75:18:ad:
a8:ae:9d:37:88:e2:25:f6:78:08:5d:0d:21:a7:aa:
58:09:c5:f7:f1:fd:ea:e0:56:e1:81:0f:5d:fb:06:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:23:7B:9D:D9:68:2F:AA:DD:60:99:42:BB:1E:48:58:95:00:0B
X509v3 Authority Key Identifier:
keyid:98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:e4:67:e5:d3:b2:62:88:59:50:c0:7a:a3:60:d8:17:26:
7e:30:a9:ee:e4:3d:75:03:69:a5:65:39:4d:62:07:05:81:24:
94:d5:24:92:e2:dc:1c:e5:ee:46:e9:06:98:2f:97:98:90:70:
9e:5e:de:e4:ce:98:a4:fa:99:76:d2:96:3e:4c:eb:93:e0:fe:
93:4f:a8:06:37:ac:28:ac:a5:a4:c0:b2:96:38:4b:3a:b5:4e:
83:50:62:5c:97:47:04:61:f9:9d:32:2f:88:db:f8:39:11:b1:
ad:03:4f:76:31:08:ca:c9:ad:9a:a4:bb:3a:34:5f:24:ee:af:
d5:b7:4a:e9:0f:1e:0e:71:2e:89:09:17:ad:65:ee:bd:bf:1d:
aa:e5:dd:f1:4a:1f:f5:ed:85:ed:0f:66:8a:7f:de:96:12:35:
6e:bc:59:fe:2e:40:f9:c8:17:74:a8:ec:54:f3:ee:1c:65:46:
20:91:8b:b5:93:fa:d8:9a:7f:74:10:36:19:e6:62:13:01:2c:
6b:20:79:8a:c8:11:c9:5f:90:88:9a:07:67:fc:e5:86:4d:39:
9e:45:63:e9:67:00:9f:4e:de:5a:b7:0d:44:bb:33:b0:d8:7e:
39:a2:41:ec:d6:95:64:63:02:97:30:b8:76:0c:5c:f0:f3:9b:
d6:21:24:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWISS/V12dTZHM5F9e0cIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZjRjNzU3Njg4NWMyODI4NGE0ZDY2NDBiM2VkYTk0ZTMw
MGI3MmMwHhcNMjYwOTIyMDkwMDM5WhcNMjYwOTIzMDkwMDM5WjAzMTEwLwYDVQQD
EyhkNzc0MjM3YjlkZDk2ODJmYWFkZDYwOTk0MmJiMWU0ODU4OTUwMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAWw6iUN2yU+R2AdzNo5gqb2xb6x
9I/jlGHVZaGeIdHiPUFQKrG+zaon41321mbJRKQuFljRrE2PChLOP4Hpt7ykkmDN
etwmiF4QkpZdJA7i9P31Ag0La6rWrSHArJx81R9uzwTtHJQymqjQG2R5aew8qqom
YVFOY4F88iqyQo8+tHHH2vLcE0NU1WEZ5+yiBV5uV3gWWR28m9oYz+65qcuV/+C8
yAbsEFw+OH92OpIowJ6Deym/42xGDlzPvefwetKkPjN0JVyWqwHDC94/qHoYy+y+
VGSDG8XWO8h1GK2orp03iOIl9ngIXQ0hp6pYCcX38f3q4FbhgQ9d+wZDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd0I3ud2Wgvqt1gmUK7HkhYlQALMB8GA1UdIwQY
MBaAFJj0x1dohcKChKTWZAs+2pTjALcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVBUSFYyaUZ3b0tFcE5aa0N6N2FsT01BdHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt
NGZmOTBkMzc4NjQyLzEvbVBUSFYyaUZ3b0tFcE5aa0N6N2FsT01BdHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy
LzEvbVBUSFYyaUZ3b0tFcE5aa0N6N2FsT01BdHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLzkZ+XT
smKIWVDAeqNg2BcmfjCp7uQ9dQNppWU5TWIHBYEklNUkkuLcHOXuRukGmC+XmJBw
nl7e5M6YpPqZdtKWPkzrk+D+k0+oBjesKKylpMCyljhLOrVOg1BiXJdHBGH5nTIv
iNv4ORGxrQNPdjEIysmtmqS7OjRfJO6v1bdK6Q8eDnEuiQkXrWXuvb8dquXd8Uof
9e2F7Q9min/elhI1brxZ/i5A+cgXdKjsVPPuHGVGIJGLtZP62Jp/dBA2GeZiEwEs
ayB5isgRyV+QiJoHZ/zlhk05nkVj6WcAn07eWrcNRLszsNh+OaJB7NaVZGMClzC4
dgxc8POb1iEkHw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:08 2026 by rpki-client