Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: cOKR7NddBsDrv98Cse38uEjcwx4JWqNWq4CWFE4S1+k=
Subject key identifier: 83:00:AC:65:15:AA:7E:24:85:C8:B3:2F:63:C6:34:F6:83:AF:2F:CA
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019D97E25F0313539CD7561FC6F12E4D6303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0636
Signing time: Thu 16 Apr 2026 20:01:28 +0000
Manifest this update: Thu 16 Apr 2026 20:01:28 +0000
Manifest next update: Fri 17 Apr 2026 20:01:28 +0000
Files and hashes: 1: FBxiREsktkVFp8venH-s08qeoPQ.roa (hash: ibnO/dj3ZhDaLeFXf0GojpXiulWnjeB2LQmvljQymA0=)
2: WvhwqSTk9fYsIwVWoqZqzKg6HQ0.roa (hash: GwslgAUxIHInMefcYidsp1yt/WAtqY5sHB1EhJWpZT8=)
3: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: NZnwBOF3P8/dZ2N5RdBmqGsFLPiQ8Le6LS1OitOKzcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:5f:03:13:53:9c:d7:56:1f:c6:f1:2e:4d:63:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Apr 16 20:01:28 2026 GMT
Not After : Apr 17 20:01:28 2026 GMT
Subject: CN=8300ac6515aa7e2485c8b32f63c634f683af2fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:73:c0:20:28:8e:e2:4d:60:c5:88:3f:5e:
a9:fe:0c:ed:c1:6a:0c:8f:e2:82:58:21:ad:76:6d:
c4:1a:cd:18:d8:e3:62:77:1c:9c:3b:9c:2e:71:bc:
eb:c5:b9:57:56:93:27:65:17:26:45:a4:7d:0d:38:
27:d5:9b:ba:cc:cd:4d:c5:7c:c2:c7:35:e5:3a:93:
17:6b:15:73:f5:77:e4:81:58:d2:26:d2:e8:91:be:
b8:3c:66:16:4a:32:ae:f3:a6:d3:9b:37:d6:13:a0:
fd:22:e9:cf:fb:d1:ce:de:53:d4:09:03:bc:fe:7f:
dc:c7:a1:df:42:0b:39:8e:c0:0c:aa:c2:27:d2:13:
c6:a0:64:86:c2:12:85:11:7a:f7:f8:1e:54:29:32:
87:f5:b9:ae:84:89:59:06:6a:5a:67:01:a0:5d:e4:
98:20:b9:c2:27:0b:57:4a:2f:60:c0:7a:db:77:4c:
72:cc:9c:99:fa:58:09:ad:d1:2b:20:1c:62:5e:7d:
59:90:d6:f9:c0:a6:cc:98:09:9c:00:f8:68:0b:a2:
22:d5:85:00:1a:40:18:62:bb:9f:d9:55:0b:b2:b3:
92:45:d7:bc:57:02:f9:ce:f7:8d:b9:a7:d9:53:29:
36:35:99:39:76:7b:17:24:62:c2:98:dd:a8:aa:dd:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:AC:65:15:AA:7E:24:85:C8:B3:2F:63:C6:34:F6:83:AF:2F:CA
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a9:e0:a3:65:19:e0:85:8b:e4:26:3a:f5:c5:b4:d2:c8:8e:
cd:b5:5c:62:40:60:b2:d4:8f:44:ee:7a:be:d6:90:14:14:bb:
a8:23:63:69:47:bb:26:48:18:32:4a:af:08:81:91:67:0a:cd:
3f:38:b0:19:ac:e8:c4:49:10:35:1c:04:e1:b8:51:ec:13:2e:
88:25:b2:5d:86:5d:c4:58:06:fc:4c:92:9c:1a:b9:00:d0:35:
4d:dc:4b:61:4f:54:84:aa:f9:db:60:23:3e:16:55:6f:da:d6:
49:4a:6a:8d:34:80:ed:38:ef:f2:de:57:b5:e1:59:f7:db:87:
c2:77:7f:38:00:88:92:e9:78:20:fc:c0:9b:c6:02:cd:00:eb:
41:fb:1c:52:77:a7:ab:fc:07:cd:35:d7:2b:40:48:af:a3:e1:
fd:39:2b:f2:fd:f0:f5:87:fd:9e:ef:36:a7:86:5c:b8:4d:8e:
d8:70:94:f5:cc:10:93:3d:65:39:a2:c9:ee:ab:48:5c:c5:c4:
96:ab:fd:a4:98:74:cf:a3:49:92:60:dd:22:78:a0:ce:8e:24:
e5:a3:a9:de:b9:b4:6d:e7:1f:33:5a:09:cf:6e:a2:35:6e:f0:
7b:44:a4:8b:6d:30:c6:83:0f:37:4f:68:18:c8:1f:ab:6e:d1:
e8:ab:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:14 2026 by rpki-client