Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: A1AI9/UZ3CZRKwcRQHEYURSaxFg3rkp9ti2xY3rnPYc=
Subject key identifier: 48:C8:F6:42:39:48:C2:14:88:72:EE:9C:75:78:92:D1:B2:78:36:14
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 019D9962684E307FD11D822ED849FC371DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 04CF
Signing time: Fri 17 Apr 2026 03:00:56 +0000
Manifest this update: Fri 17 Apr 2026 03:00:56 +0000
Manifest next update: Sat 18 Apr 2026 03:00:56 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: +3Em2we/IseNuS6xU2POtLptCdSjKoR56fuM4tlnD6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:68:4e:30:7f:d1:1d:82:2e:d8:49:fc:37:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Apr 17 03:00:56 2026 GMT
Not After : Apr 18 03:00:56 2026 GMT
Subject: CN=48c8f6423948c2148872ee9c757892d1b2783614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:43:f5:6e:29:07:a0:16:24:69:2a:91:33:
b0:e5:4a:5c:4f:cf:34:a5:e4:d7:37:e5:1c:3e:05:
3e:7c:b4:3e:f3:08:da:4b:cb:0c:c5:96:7a:c7:a6:
31:ab:93:83:c7:f6:59:c9:70:80:a3:5d:9b:2a:0e:
e2:4b:9a:45:e7:d9:f9:b2:17:9d:2e:1c:b0:9d:fa:
b3:bf:c5:ff:e8:54:e9:39:e0:08:8c:7e:6f:fd:8e:
a9:35:99:a0:7b:52:77:08:5e:70:cd:16:d7:75:0a:
87:a4:2a:08:66:8a:4f:04:b9:e1:c6:ae:47:2c:fd:
27:8f:75:89:b0:06:e0:67:44:60:ca:97:78:8e:35:
ed:ea:37:dd:35:30:fd:f7:f2:bc:f1:0a:bd:6f:37:
e9:56:4e:9d:3f:de:71:57:e5:d9:93:8c:cc:cf:51:
82:e7:d0:00:76:77:70:1d:74:76:a4:2c:f4:d3:96:
ab:33:54:57:9c:9a:1c:1b:67:4c:3f:ce:68:c0:73:
9d:54:2f:af:1b:3d:1a:c5:02:3d:38:58:d3:bb:25:
f0:13:6c:c6:52:df:ee:d4:8e:5c:30:e0:72:c9:33:
94:4c:83:45:75:fb:f1:8e:23:c0:b1:b6:a4:9b:cc:
02:47:0e:35:7d:53:08:14:2a:0b:1e:e4:a9:9f:83:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:F6:42:39:48:C2:14:88:72:EE:9C:75:78:92:D1:B2:78:36:14
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f1:ea:d9:42:b4:bf:a9:43:c7:e9:fa:8c:2b:f7:29:ec:f1:
37:fe:d2:4e:e2:34:c0:98:c5:bc:4a:df:ff:72:fc:e2:99:0b:
43:9b:59:47:b5:35:ad:9c:a3:dd:51:be:09:5f:e6:1f:c6:b2:
1f:66:46:02:c5:cf:06:10:84:93:f6:a7:bb:07:5f:77:54:3b:
70:65:6e:d4:6c:60:46:0a:b5:45:40:b0:e1:1f:30:29:c3:f7:
fc:b1:ba:b0:17:c2:d9:f1:b3:58:fa:b1:d8:7a:f5:7b:1d:5f:
a0:56:5e:53:59:09:4b:5e:a0:99:51:9a:15:a3:40:c8:40:0c:
30:51:b0:78:4e:00:b6:24:ad:38:06:ca:37:e8:ba:de:f4:ce:
d8:51:c5:14:74:2e:8b:22:ba:cd:e5:9e:35:c8:48:e8:02:b2:
c4:20:33:6d:12:e9:a2:f7:ad:d0:95:6c:1f:9c:97:98:9b:f1:
25:a6:25:6c:d4:c0:72:f6:6b:46:94:6e:56:f4:41:63:8c:43:
c2:a0:96:53:60:70:2d:ec:94:c3:09:ef:f9:10:39:61:c1:d7:
f2:33:3e:9c:35:ca:4d:a0:d2:d5:2f:f7:de:f5:d4:41:60:00:
33:aa:a2:df:7a:9b:5f:e0:89:67:7c:83:e0:50:e4:e2:e3:3a:
40:f5:f1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYmhOMH/RHYIu2En8Nx3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5
N2ZiNjQwHhcNMjYwNDE3MDMwMDU2WhcNMjYwNDE4MDMwMDU2WjAzMTEwLwYDVQQD
Eyg0OGM4ZjY0MjM5NDhjMjE0ODg3MmVlOWM3NTc4OTJkMWIyNzgzNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA5D9W4pB6AWJGkqkTOw5UpcT880
peTXN+UcPgU+fLQ+8wjaS8sMxZZ6x6Yxq5ODx/ZZyXCAo12bKg7iS5pF59n5shed
Lhywnfqzv8X/6FTpOeAIjH5v/Y6pNZmge1J3CF5wzRbXdQqHpCoIZopPBLnhxq5H
LP0nj3WJsAbgZ0Rgypd4jjXt6jfdNTD99/K88Qq9bzfpVk6dP95xV+XZk4zMz1GC
59AAdndwHXR2pCz005arM1RXnJocG2dMP85owHOdVC+vGz0axQI9OFjTuyXwE2zG
Ut/u1I5cMOByyTOUTINFdfvxjiPAsbakm8wCRw41fVMIFCoLHuSpn4N7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjI9kI5SMIUiHLunHV4ktGyeDYUMB8GA1UdIwQY
MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt
MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm
LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfHq2UK0
v6lDx+n6jCv3KezxN/7STuI0wJjFvErf/3L84pkLQ5tZR7U1rZyj3VG+CV/mH8ay
H2ZGAsXPBhCEk/anuwdfd1Q7cGVu1GxgRgq1RUCw4R8wKcP3/LG6sBfC2fGzWPqx
2Hr1ex1foFZeU1kJS16gmVGaFaNAyEAMMFGweE4AtiStOAbKN+i63vTO2FHFFHQu
iyK6zeWeNchI6AKyxCAzbRLpovet0JVsH5yXmJvxJaYlbNTAcvZrRpRuVvRBY4xD
wqCWU2BwLeyUwwnv+RA5YcHX8jM+nDXKTaDS1S/33vXUQWAAM6qi33qbX+CJZ3yD
4FDk4uM6QPXxfg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:57 2026 by rpki-client