Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
File: menPNJG22eJ1TLU4hFwHPKUnhco.mft (raw, json)
Hash identifier: u+1ACwTHltex9jRF43uhTvrTLgGWluEA3cSDyDRebRc=
Subject key identifier: 21:32:9B:0A:08:C1:A8:C9:14:EE:BD:BF:C2:BE:DD:0B:A7:CD:93:F1
Authority key identifier: 99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
Certificate issuer: /CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Certificate serial: 01A19EB51252CBA3E680F3E8562CC1DF56F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
Manifest number: 0150
Signing time: Tue 03 Nov 2026 00:00:29 +0000
Manifest this update: Tue 03 Nov 2026 00:00:29 +0000
Manifest next update: Wed 04 Nov 2026 00:00:29 +0000
Files and hashes: 1: menPNJG22eJ1TLU4hFwHPKUnhco.crl (hash: 7GUlyr3WZcei/eWe3I136X/R5jolro2qgHZNuBH/Ao8=)
2: zj7l-XB4ir-Br4qiRjHhOvxnx2E.roa (hash: hJIkYZoYjwX+UQUpvmn9CWFY8wR0zPivjXLUKJl5hsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:b5:12:52:cb:a3:e6:80:f3:e8:56:2c:c1:df:56:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Validity
Not Before: Nov 3 00:00:29 2026 GMT
Not After : Nov 4 00:00:29 2026 GMT
Subject: CN=21329b0a08c1a8c914eebdbfc2bedd0ba7cd93f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:df:b7:ee:c2:93:f2:29:f3:42:07:a9:ab:e9:
ce:35:81:80:1e:b4:96:b4:cc:c2:48:10:81:56:76:
26:79:16:0f:74:0f:b4:1d:b9:25:fb:f3:94:94:40:
9c:3d:c0:b6:99:76:80:8c:3e:b9:12:3c:d5:7e:78:
cf:72:e8:03:ab:2c:72:56:4d:df:f3:6e:01:82:de:
e3:b5:ac:71:45:40:05:a6:65:85:e8:a9:37:7d:d6:
5a:5e:f0:0a:86:9e:21:ba:31:66:83:dd:f6:2a:87:
b8:ff:ed:99:71:fd:a2:c2:83:1d:28:4d:83:f2:a0:
c6:61:01:66:92:f1:1a:34:f8:d3:9d:1b:d7:7a:75:
b7:29:ed:46:c0:17:4c:da:fe:e6:a8:d2:08:a7:63:
a8:30:79:c7:e2:17:5e:b1:66:ba:13:8a:11:72:f2:
09:42:35:96:5a:c9:60:b6:9b:3b:43:c5:5a:f5:0f:
42:40:84:77:7e:85:12:5c:a0:84:e6:33:10:b1:ec:
8e:a8:02:d1:6e:a5:4b:b2:78:5c:dc:73:11:13:ee:
f6:1c:7e:fe:06:0d:b5:22:b9:6b:b5:d6:53:cc:7b:
54:02:a5:fd:ca:ca:eb:39:50:44:a8:26:c3:84:5b:
00:47:43:af:90:96:8e:aa:99:53:32:83:b2:49:b6:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:9B:0A:08:C1:A8:C9:14:EE:BD:BF:C2:BE:DD:0B:A7:CD:93:F1
X509v3 Authority Key Identifier:
keyid:99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6e:40:46:8c:11:4e:9f:ce:89:19:0e:fa:2d:d2:4c:c0:2b:
b8:49:ca:50:1d:be:44:68:10:d9:90:e4:cf:30:33:33:5e:40:
ce:c4:35:d2:fb:a0:f9:21:5f:89:9d:ca:65:60:ca:b0:7c:8c:
25:12:18:e2:78:75:20:fc:4b:3a:64:13:0e:d9:d8:98:2c:9a:
25:41:b1:5b:96:b1:21:36:66:5d:47:d4:e8:cb:0f:b6:e3:79:
52:72:9d:00:69:f2:93:06:ef:13:21:5f:27:d5:a3:56:13:97:
73:ac:d3:b0:4e:bc:65:43:37:cc:1e:a5:59:ce:6d:65:05:2c:
0d:c7:f6:5a:e2:e7:c5:be:58:a6:6b:ba:ec:5d:5f:de:00:2d:
e2:d2:2b:99:16:83:88:fc:95:db:f6:05:5d:6b:3f:4d:ba:3c:
66:8c:5f:41:f0:91:1b:f5:7b:1b:e4:c0:6f:79:38:3e:49:41:
98:ca:5e:d0:d6:01:15:48:b5:f9:29:26:3b:13:8e:59:8b:53:
0c:cd:e4:58:2e:f6:d4:db:63:df:3e:c3:98:e6:92:bb:c8:64:
e4:3d:23:b0:99:72:4f:b1:13:46:a0:19:83:ac:b9:74:b0:3c:
66:af:67:db:1e:e1:1f:dd:5c:30:69:1a:0a:76:fe:4c:2e:ff:
3c:c4:02:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGetRJSy6PmgPPoVizB31b4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTljZjM0OTFiNmQ5ZTI3NTRjYjUzODg0NWMwNzNjYTUy
Nzg1Y2EwHhcNMjYxMTAzMDAwMDI5WhcNMjYxMTA0MDAwMDI5WjAzMTEwLwYDVQQD
EygyMTMyOWIwYTA4YzFhOGM5MTRlZWJkYmZjMmJlZGQwYmE3Y2Q5M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99+37sKT8inzQgepq+nONYGAHrSW
tMzCSBCBVnYmeRYPdA+0Hbkl+/OUlECcPcC2mXaAjD65EjzVfnjPcugDqyxyVk3f
824Bgt7jtaxxRUAFpmWF6Kk3fdZaXvAKhp4hujFmg932Koe4/+2Zcf2iwoMdKE2D
8qDGYQFmkvEaNPjTnRvXenW3Ke1GwBdM2v7mqNIIp2OoMHnH4hdesWa6E4oRcvIJ
QjWWWslgtps7Q8Va9Q9CQIR3foUSXKCE5jMQseyOqALRbqVLsnhc3HMRE+72HH7+
Bg21IrlrtdZTzHtUAqX9ysrrOVBEqCbDhFsAR0OvkJaOqplTMoOySbaScwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEymwoIwajJFO69v8K+3QunzZPxMB8GA1UdIwQY
MBaAFJnpzzSRttnidUy1OIRcBzylJ4XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYt
YjZkNjRhMDAzZDllLzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYtYjZkNjRhMDAzZDll
LzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ25ARowR
Tp/OiRkO+i3STMAruEnKUB2+RGgQ2ZDkzzAzM15AzsQ10vug+SFfiZ3KZWDKsHyM
JRIY4nh1IPxLOmQTDtnYmCyaJUGxW5axITZmXUfU6MsPtuN5UnKdAGnykwbvEyFf
J9WjVhOXc6zTsE68ZUM3zB6lWc5tZQUsDcf2WuLnxb5Ypmu67F1f3gAt4tIrmRaD
iPyV2/YFXWs/Tbo8ZoxfQfCRG/V7G+TAb3k4PklBmMpe0NYBFUi1+SkmOxOOWYtT
DM3kWC721Ntj3z7DmOaSu8hk5D0jsJlyT7ETRqAZg6y5dLA8Zq9n2x7hH91cMGka
Cnb+TC7/PMQCKw==
-----END CERTIFICATE-----
Generated at Tue Nov 3 12:08:13 2026 by rpki-client