Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
File: mPTHV2iFwoKEpNZkCz7alOMAtyw.mft (raw, json)
Hash identifier: NFEsBQVx9uEmKGLTw97+s7C+Y8fNAN4aclYBewAtxRM=
Subject key identifier: CE:CF:E2:9C:DD:74:1B:AD:F6:10:0F:7B:17:2E:F6:C7:E2:20:DA:4E
Authority key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Certificate issuer: /CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Certificate serial: 01A149BCA03F3DEC3A07118C6E315A7335C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
Manifest number: 0124
Signing time: Sat 17 Oct 2026 12:01:00 +0000
Manifest this update: Sat 17 Oct 2026 12:01:00 +0000
Manifest next update: Sun 18 Oct 2026 12:01:00 +0000
Files and hashes: 1: EYQtAfhdmZfDZdsN4DzNwEpURfE.roa (hash: jh9O88OI/DxugLonRxp5PXkbVTMwIQJK6Pvwlc3iuWU=)
2: mPTHV2iFwoKEpNZkCz7alOMAtyw.crl (hash: arnMXS4K2OW8HDDiqKRIXWoHH2c5K27+/n3WSRNaX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bc:a0:3f:3d:ec:3a:07:11:8c:6e:31:5a:73:35:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Validity
Not Before: Oct 17 12:01:00 2026 GMT
Not After : Oct 18 12:01:00 2026 GMT
Subject: CN=cecfe29cdd741badf6100f7b172ef6c7e220da4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:3c:74:64:b2:cd:3e:bf:64:ee:19:64:cf:
59:dc:f2:45:81:bf:a2:d4:be:2d:41:7f:a6:10:83:
cc:0a:6b:40:1c:a9:17:44:06:89:54:1f:d4:37:ff:
eb:ae:41:f1:f8:1a:b4:64:b0:5b:57:16:02:79:7e:
8a:ee:04:60:78:9a:6f:52:64:7a:85:ef:45:b6:be:
d5:28:ea:5c:47:d1:04:29:b8:9a:e8:82:d3:c4:d5:
45:6b:80:7a:a0:23:94:36:b4:13:2e:04:b5:7b:30:
6c:75:01:f9:3c:28:a9:3c:a6:4c:d2:1b:7c:60:dc:
fc:7b:55:13:b0:31:c9:96:87:0d:fd:32:75:71:e8:
6f:fe:59:9a:52:01:5d:e0:a5:52:a2:e8:09:71:7e:
80:78:6e:a7:02:a2:b8:e1:6e:b4:54:eb:0a:e6:55:
05:9a:e5:37:22:91:a6:cc:c6:26:e7:0b:b6:00:6c:
c7:92:a6:ce:32:69:f0:75:1e:8a:a4:40:ac:9a:42:
f8:6b:a1:1b:72:65:05:58:09:71:f1:21:b2:03:92:
c6:4a:53:54:3d:12:90:8e:f0:f4:bb:e4:d9:b2:3d:
d8:11:be:f3:94:a7:49:e8:38:9e:db:21:9a:ff:45:
85:44:03:b0:c7:c1:c9:bd:15:53:57:45:a2:d3:13:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:E2:9C:DD:74:1B:AD:F6:10:0F:7B:17:2E:F6:C7:E2:20:DA:4E
X509v3 Authority Key Identifier:
keyid:98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:95:a5:0c:4c:84:a4:5a:e4:13:db:f9:75:0a:d7:b8:4f:47:
3d:0c:94:06:60:06:cd:7a:31:e5:fc:36:d4:39:b2:a4:7b:5b:
e9:b3:21:9d:7a:ac:16:17:4b:72:64:19:20:33:09:e1:a3:2e:
24:97:cb:1d:ba:f0:53:fc:a6:b9:8a:7d:c6:e5:a3:50:0f:1d:
44:ec:54:ec:b7:4a:0b:ac:74:aa:4a:7c:4a:12:b7:68:9e:35:
b5:62:0b:ae:6b:8f:42:93:3b:4e:6e:51:87:1b:0b:1f:e6:90:
07:d8:24:5e:ad:91:4f:02:b3:3c:1f:e5:94:c6:27:29:41:6d:
de:87:a2:e3:f4:a1:0c:d2:0f:38:f7:c3:6b:24:01:2a:21:68:
1d:18:81:d8:ea:50:8e:d6:aa:0e:ed:00:71:25:bb:9d:33:35:
c4:f6:df:29:92:61:2c:25:cc:c8:6d:53:d3:ad:07:9a:57:a5:
c3:40:e2:49:02:7e:ae:36:54:9b:9b:a3:ff:fb:a1:8e:39:14:
8a:1b:9f:b9:bb:fc:5c:d7:44:fd:9a:59:f9:bb:da:b5:18:cf:
0c:39:ed:b6:c4:67:c0:e6:43:a4:54:76:95:cf:9e:ae:b5:6f:
0d:8e:0b:2c:a1:fb:df:40:8a:5a:c5:f9:f0:4a:32:b8:67:76:
17:30:b8:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJvKA/Pew6BxGMbjFaczXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZjRjNzU3Njg4NWMyODI4NGE0ZDY2NDBiM2VkYTk0ZTMw
MGI3MmMwHhcNMjYxMDE3MTIwMTAwWhcNMjYxMDE4MTIwMTAwWjAzMTEwLwYDVQQD
EyhjZWNmZTI5Y2RkNzQxYmFkZjYxMDBmN2IxNzJlZjZjN2UyMjBkYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Zs8dGSyzT6/ZO4ZZM9Z3PJFgb+i
1L4tQX+mEIPMCmtAHKkXRAaJVB/UN//rrkHx+Bq0ZLBbVxYCeX6K7gRgeJpvUmR6
he9Ftr7VKOpcR9EEKbia6ILTxNVFa4B6oCOUNrQTLgS1ezBsdQH5PCipPKZM0ht8
YNz8e1UTsDHJlocN/TJ1cehv/lmaUgFd4KVSougJcX6AeG6nAqK44W60VOsK5lUF
muU3IpGmzMYm5wu2AGzHkqbOMmnwdR6KpECsmkL4a6EbcmUFWAlx8SGyA5LGSlNU
PRKQjvD0u+TZsj3YEb7zlKdJ6Die2yGa/0WFRAOwx8HJvRVTV0Wi0xPoIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7P4pzddBut9hAPexcu9sfiINpOMB8GA1UdIwQY
MBaAFJj0x1dohcKChKTWZAs+2pTjALcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVBUSFYyaUZ3b0tFcE5aa0N6N2FsT01BdHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt
NGZmOTBkMzc4NjQyLzEvbVBUSFYyaUZ3b0tFcE5aa0N6N2FsT01BdHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy
LzEvbVBUSFYyaUZ3b0tFcE5aa0N6N2FsT01BdHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJWlDEyE
pFrkE9v5dQrXuE9HPQyUBmAGzXox5fw21DmypHtb6bMhnXqsFhdLcmQZIDMJ4aMu
JJfLHbrwU/ymuYp9xuWjUA8dROxU7LdKC6x0qkp8ShK3aJ41tWILrmuPQpM7Tm5R
hxsLH+aQB9gkXq2RTwKzPB/llMYnKUFt3oei4/ShDNIPOPfDayQBKiFoHRiB2OpQ
jtaqDu0AcSW7nTM1xPbfKZJhLCXMyG1T060Hmlelw0DiSQJ+rjZUm5uj//uhjjkU
ihufubv8XNdE/ZpZ+bvatRjPDDnttsRnwOZDpFR2lc+errVvDY4LLKH730CKWsX5
8EoyuGd2FzC4iQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:36 2026 by rpki-client