Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
File: mPTHV2iFwoKEpNZkCz7alOMAtyw.mft (raw, json)
Hash identifier: QvgxFwde0mMdk051CH4LQC9Sa2ft9jPM/8SbfzG/6kQ=
Subject key identifier: 14:CF:A1:DE:CF:5D:FA:1B:0D:20:61:CD:24:B2:0E:20:F4:D5:51:65
Authority key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Certificate issuer: /CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Certificate serial: 01A14F87C816FA5A8247BB39F429A6DE9EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
Manifest number: 0127
Signing time: Sun 18 Oct 2026 15:01:00 +0000
Manifest this update: Sun 18 Oct 2026 15:01:00 +0000
Manifest next update: Mon 19 Oct 2026 15:01:00 +0000
Files and hashes: 1: EYQtAfhdmZfDZdsN4DzNwEpURfE.roa (hash: jh9O88OI/DxugLonRxp5PXkbVTMwIQJK6Pvwlc3iuWU=)
2: mPTHV2iFwoKEpNZkCz7alOMAtyw.crl (hash: wjhW/NkWibaKmn4Z2ie8kyq8rgH/NLrie4ffBCW25PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:87:c8:16:fa:5a:82:47:bb:39:f4:29:a6:de:9e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Validity
Not Before: Oct 18 15:01:00 2026 GMT
Not After : Oct 19 15:01:00 2026 GMT
Subject: CN=14cfa1decf5dfa1b0d2061cd24b20e20f4d55165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:c7:09:0d:4a:3d:6e:bd:36:30:1b:f1:69:
8e:a1:25:47:4b:f6:b9:5c:6a:93:87:d6:05:c3:f2:
7c:a9:75:a8:41:5c:a0:38:79:a4:ed:16:49:30:38:
44:28:92:24:c1:f1:14:ed:cf:a0:9f:35:d0:56:da:
8b:e6:b7:1d:c0:10:a0:e9:34:73:df:65:7c:ae:bc:
d0:33:57:61:60:10:b0:06:5f:61:81:3b:8b:45:92:
e2:33:b3:5d:6f:82:1d:89:82:d1:8f:f4:af:f0:b8:
ca:03:a8:80:64:31:d4:e8:1a:d0:54:27:bc:05:52:
5e:e3:ca:f8:cb:31:bf:ab:c0:33:80:33:06:df:bd:
85:77:66:af:47:eb:5e:4d:ef:e9:ff:ad:5b:9a:9a:
86:8e:45:08:4b:74:f5:61:0c:80:30:39:69:ae:4e:
d0:db:62:ba:e4:c0:b2:98:91:a4:82:c1:da:a9:ff:
4c:d5:88:2e:e4:4d:82:a7:49:0b:74:c9:df:65:d9:
2b:c5:ab:7c:52:3e:e7:56:dd:ec:84:e5:f4:d2:fe:
2e:54:af:66:d6:2a:30:9c:c5:da:07:bf:22:7d:8a:
28:1a:65:ed:7e:db:36:36:49:55:9a:a7:ed:07:70:
89:de:a1:07:a1:21:f0:a8:97:31:90:8c:07:8f:83:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CF:A1:DE:CF:5D:FA:1B:0D:20:61:CD:24:B2:0E:20:F4:D5:51:65
X509v3 Authority Key Identifier:
keyid:98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5e:48:70:2c:f5:c4:d8:20:13:73:37:4a:a0:e7:cf:6b:e2:
a6:5b:a4:a5:fc:31:4d:bc:4f:3e:01:c6:1c:fb:5a:3d:02:c7:
f6:4c:1c:2f:cb:75:ac:54:9a:cc:b3:35:14:7e:3f:b5:6c:32:
3c:d5:18:61:56:04:6f:59:6c:dc:2a:5d:92:e1:12:53:49:4e:
8b:e6:66:af:8a:f7:fb:72:9e:0e:ea:2d:94:45:c0:bf:21:71:
a7:5c:54:e9:ee:35:c6:38:d7:ae:2c:95:91:a8:1c:cc:60:b4:
a6:bc:aa:39:81:4b:22:1b:c2:7a:69:21:c7:24:30:be:e9:54:
d6:fd:b5:57:9e:40:f4:e6:33:7f:3a:42:17:49:68:9d:f2:4e:
d4:0a:99:b0:94:0e:29:18:b3:db:dc:08:a4:13:5b:b6:6c:0f:
6d:79:ec:21:db:9f:ec:72:74:01:da:ac:3f:c5:4d:24:69:ba:
c1:a6:65:71:05:24:1c:cf:57:eb:04:2b:39:11:b6:26:03:a7:
28:b1:f0:8d:05:ed:b3:e6:8f:de:0f:b5:57:f7:c7:be:69:a7:
6b:df:d1:cf:28:6b:9a:e5:f1:60:22:3f:60:7c:3e:4e:79:70:
7a:27:7c:a4:e7:ee:b3:f4:db:83:7c:34:16:00:80:c0:fc:f4:
28:f1:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:15:28 2026 by rpki-client