Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: P1vsMEH8ALFG4Tmh0movEDijKICGUUj+1nz9DRwknRg=
Subject key identifier: 5E:9C:F2:C8:10:9B:4A:60:78:D9:C3:26:82:37:4C:D1:9F:BE:05:7D
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 019CABD8E3B6CF4E12F8D9A4FD8613B35DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 0454
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: oF7SE8lTp3gnMRP3EYBllCDMCcM42E8olI84RXP2eRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e3:b6:cf:4e:12:f8:d9:a4:fd:86:13:b3:5d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=5e9cf2c8109b4a6078d9c32682374cd19fbe057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:1a:3b:31:c6:59:d5:6f:4c:db:c8:c9:c8:
d8:13:80:d1:94:e0:de:59:8f:32:e8:c2:bd:b8:cf:
40:c6:85:64:0f:bc:1d:e6:63:ef:42:f7:24:86:55:
95:eb:f6:5d:df:96:20:d5:80:d3:dc:c6:31:29:a8:
1d:6e:1e:b0:a9:01:bd:93:41:0b:99:1c:f9:e3:94:
d1:8c:11:63:da:a0:88:a7:be:fb:25:4a:ee:59:1a:
1f:cb:f4:a9:78:aa:43:0e:d6:e4:2d:8b:7f:8d:0d:
b1:c5:29:91:45:2b:5d:4f:8b:1b:aa:3e:9c:a0:af:
a2:ff:3a:69:9c:28:da:dd:72:e0:87:f5:68:17:b1:
af:04:ca:7e:58:5e:99:de:c4:68:0c:bd:7b:5b:07:
67:79:0e:e8:25:29:7c:dc:8d:97:9a:26:ea:5c:d4:
f3:44:70:4c:7a:a2:3c:a2:20:37:5e:3e:e7:d8:58:
08:32:aa:b3:b9:c9:dc:bb:5b:9c:5a:de:45:9c:da:
51:be:24:ef:9f:6a:2a:ae:c1:56:e7:e4:74:90:d7:
3c:5a:98:dc:47:c1:65:52:71:75:23:21:6e:db:ee:
bb:60:33:15:22:20:1f:27:a4:ff:33:d8:f8:75:c7:
59:c9:4f:ee:cc:ac:27:aa:43:8a:f3:8c:d0:22:5d:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9C:F2:C8:10:9B:4A:60:78:D9:C3:26:82:37:4C:D1:9F:BE:05:7D
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:bb:c4:a4:ab:02:11:38:2a:aa:e2:f4:15:cb:ff:a2:14:
15:83:65:99:ff:70:72:d2:7f:d4:e5:80:bf:4a:d5:e1:96:10:
e4:a3:fd:35:b9:b2:6d:7e:e1:a2:41:14:64:4c:06:b6:f3:fd:
19:58:6c:d0:74:84:99:66:8d:45:56:d5:00:eb:df:00:d4:6a:
2d:8f:57:d6:08:7a:5b:84:d7:cc:f6:19:64:1a:12:99:d6:b0:
bc:3f:b6:c1:8c:f3:59:ef:a4:a1:02:87:e1:79:e6:7b:68:88:
32:aa:d0:f7:37:c1:d2:31:c1:2f:84:54:4c:85:43:1f:1e:8c:
cf:b3:07:3b:e9:6a:5f:49:22:44:89:9d:a1:3f:c9:3c:51:48:
fe:9a:ae:dd:23:d9:ca:3f:14:e8:09:f0:33:ed:19:6a:e7:f4:
59:cc:62:70:bf:a6:23:17:eb:96:d2:1d:26:01:c8:5e:f5:af:
0c:42:1a:78:8d:43:f6:9d:f2:c0:de:1a:36:d5:29:33:90:a8:
b2:ea:da:8d:10:80:4b:cd:ea:dd:6e:fe:0a:d5:dc:e0:70:fd:
7d:61:4f:84:0e:45:fd:9d:6f:6a:60:ac:7b:a5:05:d9:b0:24:
90:cb:2e:68:6f:48:ef:b5:ae:25:01:60:11:9e:73:31:b5:2e:
78:04:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:01 2026 by rpki-client