Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
File: mPTHV2iFwoKEpNZkCz7alOMAtyw.mft (raw, json)
Hash identifier: iwUfXrAeTFoqw6KRHTsycEQAXIXTFbg1upORFoCA80c=
Subject key identifier: 96:34:E7:62:A7:85:75:62:F4:1D:17:04:12:32:C7:9D:4A:F5:7B:AD
Authority key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Certificate issuer: /CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Certificate serial: 019FAC76272438AB5E838DC7E2A39EA2F324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:52 +0000
Manifest this update: Wed 29 Jul 2026 06:00:52 +0000
Manifest next update: Thu 30 Jul 2026 06:00:52 +0000
Files and hashes: 1: EYQtAfhdmZfDZdsN4DzNwEpURfE.roa (hash: jh9O88OI/DxugLonRxp5PXkbVTMwIQJK6Pvwlc3iuWU=)
2: mPTHV2iFwoKEpNZkCz7alOMAtyw.crl (hash: MK82jw+f2olY9iXKsK954DDqBdW2vYhhbZCAS/4H4EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:27:24:38:ab:5e:83:8d:c7:e2:a3:9e:a2:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Validity
Not Before: Jul 29 06:00:52 2026 GMT
Not After : Jul 30 06:00:52 2026 GMT
Subject: CN=9634e762a7857562f41d17041232c79d4af57bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:18:d3:9a:2e:e7:85:fc:09:48:35:6f:7d:
8d:06:c0:1f:09:72:d9:1c:20:e7:2b:2e:3e:92:ba:
d4:f0:bd:ee:5b:5e:f7:29:2d:2c:e5:ad:66:18:bd:
c0:10:ac:37:76:00:c0:ea:45:5b:b8:24:22:ce:11:
b1:63:2a:7e:c8:b9:ca:30:52:ed:e2:b0:20:3b:fd:
87:93:a5:02:ab:05:9a:de:98:ca:75:71:ab:04:77:
fa:ac:4b:b3:0a:d1:29:b0:31:77:97:d7:48:f5:f7:
76:24:1f:f2:46:40:95:ef:af:86:23:e3:46:e6:0b:
b8:00:1b:33:33:73:29:b6:77:38:47:6f:ed:5e:26:
a1:fe:11:5c:f0:25:61:f0:d6:07:25:a7:41:9b:98:
ab:56:b2:bd:c5:d1:37:ed:8d:10:59:4d:5e:5c:73:
e5:a6:94:9b:6f:af:95:4b:a1:c0:4b:ff:ae:82:26:
bc:12:11:c3:06:c1:bc:ee:10:3a:f0:3d:c6:2b:9a:
c1:c2:cf:35:44:53:89:fe:10:8d:47:a4:7f:fb:ac:
46:fc:e9:c4:24:5d:fb:f8:20:01:8f:7d:d7:54:70:
a2:b1:e8:29:12:bd:03:0a:ac:bf:ac:49:aa:2f:05:
bb:a1:7a:98:a5:a4:6b:43:ac:68:07:c1:f7:fb:91:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:34:E7:62:A7:85:75:62:F4:1D:17:04:12:32:C7:9D:4A:F5:7B:AD
X509v3 Authority Key Identifier:
keyid:98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f1:16:d7:89:d4:dc:cf:0d:54:04:03:72:c7:3b:4e:87:e9:
32:02:24:2b:7e:60:ef:a4:93:2d:f1:b0:81:17:98:95:7c:f2:
51:dd:53:4a:d8:b7:1d:ea:34:fa:25:f8:b2:84:6b:fd:2f:43:
1c:6a:db:ce:4c:29:8a:27:ac:b3:19:c3:59:4e:ff:56:8f:4e:
d4:cf:39:7c:a1:58:70:30:c4:af:29:06:39:e3:72:2f:38:2a:
54:61:54:22:55:32:f1:6c:91:4a:04:80:e8:44:9f:26:72:00:
61:c9:d5:f3:9d:9f:c8:aa:81:0c:8b:19:7f:1d:d3:f6:94:22:
8f:43:90:46:d2:26:09:72:8a:c0:3b:b4:fe:4a:67:cf:a9:fa:
68:69:c8:d7:42:08:53:a6:eb:52:77:e5:a5:f9:87:64:27:39:
21:bb:05:02:e5:6d:72:8f:1d:6a:37:8b:a6:5e:c8:e7:06:fe:
7c:32:17:8e:83:4f:c3:56:72:a9:63:06:8e:be:77:c4:c6:96:
47:72:cc:44:2c:65:b4:ef:a7:7e:bc:9a:1c:e0:34:26:26:51:
cf:05:92:e4:2f:7b:7e:bc:bc:5e:16:7e:ee:64:cc:3e:6e:ea:
28:a3:c1:3f:30:f8:40:5a:57:d6:2c:a6:00:e0:57:b1:db:9d:
53:a1:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:20:36 2026 by rpki-client