Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
File: menPNJG22eJ1TLU4hFwHPKUnhco.mft (raw, json)
Hash identifier: kALCLk3ieym0JAMDrU0KdMX812lpXOvTZJkJr2920wk=
Subject key identifier: 66:E1:D2:63:53:7E:3A:0C:2E:E5:6C:88:7D:43:3B:A5:92:67:10:AD
Authority key identifier: 99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
Certificate issuer: /CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Certificate serial: 01A0E73F1E5D0E7421875866C40DD4AA3B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:08 +0000
Manifest this update: Mon 28 Sep 2026 09:01:08 +0000
Manifest next update: Tue 29 Sep 2026 09:01:08 +0000
Files and hashes: 1: menPNJG22eJ1TLU4hFwHPKUnhco.crl (hash: YQWYQsXMLlAVf+76r0n86ycaVe+D0UXh7tu9a3iMOV0=)
2: zj7l-XB4ir-Br4qiRjHhOvxnx2E.roa (hash: hJIkYZoYjwX+UQUpvmn9CWFY8wR0zPivjXLUKJl5hsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:1e:5d:0e:74:21:87:58:66:c4:0d:d4:aa:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Validity
Not Before: Sep 28 09:01:08 2026 GMT
Not After : Sep 29 09:01:08 2026 GMT
Subject: CN=66e1d263537e3a0c2ee56c887d433ba5926710ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:89:54:51:3e:45:dd:57:0f:7a:b7:74:6e:
0a:be:85:c1:d9:b9:1f:49:c4:3a:fb:05:f5:25:fa:
fa:56:18:9e:14:e7:38:b6:78:84:3e:80:b1:24:91:
08:d4:f9:7b:4b:20:19:53:4f:0d:a4:05:95:c1:8c:
ed:06:41:7d:66:19:17:11:cf:b8:7c:b3:70:0f:21:
d6:70:a5:fe:56:89:84:2d:9b:35:af:89:c3:f9:0a:
bf:9a:93:f9:e4:09:d5:7e:da:72:43:0d:55:04:6a:
9d:b1:cf:10:6a:3a:05:79:a1:98:31:f7:39:f5:13:
e9:d9:28:ac:66:1d:c4:85:67:ca:bb:02:b6:0e:96:
7c:07:b6:4d:22:5a:f1:50:7d:ef:49:ad:19:5f:3e:
c4:4c:3c:ac:16:52:97:ac:da:a2:f6:fb:ac:71:af:
a2:10:03:ed:7e:e0:38:0e:f3:28:0a:46:9a:4d:a4:
8c:aa:c5:da:95:6d:19:77:22:49:ad:7d:2e:cd:ca:
37:09:2a:2c:17:40:3c:68:e6:9a:7d:50:70:91:74:
34:15:e7:95:5d:3e:d8:ca:cf:dd:17:47:f2:f8:b8:
4b:44:e5:3b:38:dd:49:8c:f1:38:48:d3:de:da:5d:
0e:7c:fe:e9:fc:32:bc:0d:f9:79:af:98:fc:5b:4b:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:D2:63:53:7E:3A:0C:2E:E5:6C:88:7D:43:3B:A5:92:67:10:AD
X509v3 Authority Key Identifier:
keyid:99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:66:c4:dd:e6:dc:ea:17:fd:9a:fb:10:18:66:4b:ac:59:a2:
24:e8:23:cd:d9:6c:3d:bf:a0:be:1b:d8:d5:3f:4d:2b:8c:62:
a2:44:36:0e:ce:90:d5:62:df:c2:f5:a7:28:1f:25:56:43:70:
16:53:62:dd:86:88:02:a3:f8:12:e5:fb:f1:78:bb:61:8e:07:
ba:40:64:fe:45:3e:69:7b:c6:5a:7c:ad:5e:28:ec:c3:c8:ae:
8f:fc:43:5f:70:d8:65:38:69:50:19:59:a8:db:8b:20:c7:11:
52:c4:b3:eb:12:4d:a1:b3:86:66:d2:2a:29:ae:bf:6c:a6:48:
7a:30:93:17:13:fd:12:ae:82:ed:b7:f9:f6:64:38:59:de:40:
b9:e0:4a:1e:4b:5b:3c:73:4c:c4:50:0f:4e:59:f5:ac:20:11:
39:02:14:95:0e:46:d2:b3:38:5a:96:d7:cf:85:a5:fd:c3:c5:
34:dc:ae:cd:15:0d:9f:64:b4:7a:59:e8:75:dc:f0:e4:26:7d:
f0:17:34:8a:46:83:c3:e1:33:87:33:db:16:fd:d9:87:6c:dc:
d6:1b:06:15:a9:f9:d0:5a:fe:a3:1b:5f:80:82:f5:05:c4:77:
b0:8c:cd:a1:bd:a4:e0:97:4c:14:5d:b7:a4:28:c6:90:03:f5:
2e:e8:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:47 2026 by rpki-client