Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: nl8HKjcBBURRpW6j6qQPcH1uItyl+1lcICPxl8FFgGk=
Subject key identifier: 0F:D7:18:90:C3:EA:CF:47:15:46:B3:11:62:52:5E:C7:F6:03:84:77
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 01A0C8FD620D56FE5AB44787149D3693DE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 0679
Signing time: Tue 22 Sep 2026 12:00:43 +0000
Manifest this update: Tue 22 Sep 2026 12:00:43 +0000
Manifest next update: Wed 23 Sep 2026 12:00:43 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: qAKBYqhdSykEeRpnyLwYHeYSBrSWkIQEC5pGrnbx4W8=)
2: YuNY9pCJ37EFdyTyyQ6e2KA15E0.asa (hash: srGpwdvJeLpVUuR/dZ5IRJXeVqATKKEFySC416oLi7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:62:0d:56:fe:5a:b4:47:87:14:9d:36:93:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Sep 22 12:00:43 2026 GMT
Not After : Sep 23 12:00:43 2026 GMT
Subject: CN=0fd71890c3eacf471546b31162525ec7f6038477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:2a:92:6b:4a:b1:92:69:c4:ab:93:5d:52:
86:be:ff:92:33:c5:a2:90:ab:33:f8:96:38:5d:8c:
ad:a4:4a:8b:e3:4b:3d:44:54:d6:eb:ab:c7:44:b2:
0a:6c:55:67:b9:66:66:35:26:bc:55:6e:5d:0a:b8:
19:26:a6:b5:10:1f:21:5a:fe:47:68:51:f3:d4:05:
9e:79:fe:97:0f:df:45:11:cb:9c:51:60:9c:e2:09:
38:32:1d:f0:f2:4f:7a:cc:b1:b6:84:d5:49:ed:9f:
04:3c:7a:21:df:92:fd:ce:42:66:93:42:81:17:3a:
a9:c0:2f:82:e2:0c:13:09:b1:f5:89:48:68:6a:8f:
a5:e0:34:24:34:3e:2c:46:f3:61:cb:a6:f8:49:fe:
60:5c:33:b9:b6:b9:19:f1:08:e1:d2:1b:62:95:39:
a2:72:13:f7:9c:1a:9e:58:e6:10:83:79:43:c5:a9:
5b:40:35:a5:36:2e:25:07:da:49:fc:b5:33:62:d6:
5b:fe:e5:49:44:c4:f3:27:b6:9b:f6:d7:7a:0a:79:
56:be:e1:d4:e4:ef:06:02:0e:dd:4e:bb:12:b2:c4:
ed:ae:1c:af:a6:07:f2:c3:3a:50:9c:89:aa:50:67:
05:5b:2d:65:5d:45:65:39:b0:f5:7d:f1:b1:b7:95:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:18:90:C3:EA:CF:47:15:46:B3:11:62:52:5E:C7:F6:03:84:77
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e2:e2:d8:f1:e8:2a:1f:91:89:82:f0:92:68:07:c2:68:eb:
95:0d:d8:7b:69:4a:39:ee:87:23:53:38:20:cb:c7:bb:40:df:
b7:43:bc:09:35:12:04:8b:60:17:2b:ce:3c:03:71:4d:73:7e:
36:45:36:0c:1f:95:91:10:bd:e9:63:52:95:b3:87:3b:2e:12:
fb:f2:76:57:89:0f:98:cb:64:76:be:46:99:6f:07:c4:cf:c5:
41:fb:c3:fa:c9:c5:0c:0b:f9:7f:83:74:36:0e:25:ce:08:38:
dc:b5:2f:62:0c:8b:16:1c:d7:9a:83:56:ad:76:b8:97:03:6e:
dc:2b:da:0c:4a:e0:6a:f0:b1:82:d5:80:aa:ac:94:d7:93:ef:
8d:1a:a0:51:a5:a1:bc:9b:8c:c4:66:90:2a:e8:4d:c0:42:ed:
11:74:10:18:44:18:47:94:52:d0:c3:01:aa:74:9e:d6:60:f8:
02:17:3a:73:1c:a0:5b:0b:d5:23:a6:4f:02:da:e6:1f:8f:de:
47:98:2a:d4:0c:a3:70:f6:31:1a:32:a5:13:75:af:44:b8:5b:
41:99:60:db:ac:4d:ca:6a:49:fb:a7:79:58:36:fc:75:75:32:
57:ac:e2:e2:70:ad:d1:e6:63:76:71:27:51:fd:dd:c0:38:1a:
ca:d4:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:39 2026 by rpki-client