Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
File: menPNJG22eJ1TLU4hFwHPKUnhco.mft (raw, json)
Hash identifier: MSpCRo7FVFQTgn2fzIp6FE7MtuCy9UJQx43FQnOCHMM=
Subject key identifier: 31:19:77:E4:4C:28:EE:0A:22:FC:24:29:DB:0B:FF:1E:48:94:97:5C
Authority key identifier: 99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
Certificate issuer: /CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Certificate serial: 019F29253A09F0FDCBB067510F69C3013523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
Manifest number: 0A
Signing time: Fri 03 Jul 2026 18:02:13 +0000
Manifest this update: Fri 03 Jul 2026 18:02:13 +0000
Manifest next update: Sat 04 Jul 2026 18:02:13 +0000
Files and hashes: 1: menPNJG22eJ1TLU4hFwHPKUnhco.crl (hash: X1IIqeWzYHEYUW2peoR7dur62ai5VU7rGSDgNN4mWFA=)
2: zj7l-XB4ir-Br4qiRjHhOvxnx2E.roa (hash: hJIkYZoYjwX+UQUpvmn9CWFY8wR0zPivjXLUKJl5hsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:25:3a:09:f0:fd:cb:b0:67:51:0f:69:c3:01:35:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Validity
Not Before: Jul 3 18:02:13 2026 GMT
Not After : Jul 4 18:02:13 2026 GMT
Subject: CN=311977e44c28ee0a22fc2429db0bff1e4894975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:18:6b:ff:c8:39:f7:da:f9:79:52:2b:da:
3f:d2:d5:61:9e:b1:db:4e:ab:57:b4:34:12:de:27:
2b:d9:be:06:d8:d0:f5:fc:25:c4:df:fe:59:47:88:
ec:6b:68:b1:f9:79:fc:13:38:e9:f7:0c:ec:b3:d3:
45:0b:e4:f9:22:29:f5:ac:82:10:68:ab:3f:a8:fc:
a5:ec:bf:f2:86:c5:7b:3b:10:fb:96:a0:27:78:39:
29:78:5c:db:6b:5e:51:9b:9f:96:b6:e4:e9:97:7f:
41:7c:f3:0a:d5:71:51:7c:d8:46:70:04:3a:60:95:
2b:76:bb:e3:3d:54:0c:89:7c:19:1e:43:a8:57:80:
3b:3e:06:d5:b3:74:bd:74:38:e0:50:e5:7d:c4:32:
eb:1c:b0:9b:db:ba:66:b4:89:81:1d:e4:f7:fa:98:
8d:2f:b8:5c:6a:f3:ad:57:79:9d:6c:b9:fa:f8:d5:
b1:24:08:f1:5b:25:38:ef:b5:f6:bb:f9:6c:c6:57:
10:f5:0a:a9:c2:ee:60:55:63:51:ff:7c:ef:26:3f:
18:fe:4a:1c:09:7e:3b:c6:8c:e1:fd:a7:03:07:0a:
c2:c1:55:28:64:93:54:27:fa:08:67:c3:f5:83:2b:
27:20:22:f6:00:96:2d:82:c3:bd:73:e5:f6:5e:dc:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:77:E4:4C:28:EE:0A:22:FC:24:29:DB:0B:FF:1E:48:94:97:5C
X509v3 Authority Key Identifier:
keyid:99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:2b:1a:e3:3c:9f:60:62:db:37:56:81:c2:03:e6:f9:72:
dd:ee:1d:e8:83:70:c9:3a:30:45:5f:74:9c:4a:28:95:4c:7d:
f7:51:1c:56:17:d3:70:dd:32:b4:88:91:53:45:5c:8d:f3:2e:
31:f9:eb:c1:31:f9:a8:05:1a:54:16:ad:8f:ac:bd:68:b7:e4:
6a:f5:60:f9:a0:68:5a:35:bf:e3:90:85:56:56:f1:55:ee:c3:
22:0e:b3:b1:11:af:90:0f:2a:05:3e:ac:ca:ab:b3:b8:dc:21:
6f:0f:45:a6:70:84:6a:b0:e3:1a:ff:cd:34:d1:9c:5d:3a:32:
f1:9b:2d:3a:dc:7c:68:bc:ac:c7:4d:80:46:80:37:fb:4d:a0:
12:4a:28:4e:d6:0d:60:6b:af:bf:dc:b0:65:f8:66:c2:29:bd:
c9:f5:82:d2:25:d8:28:64:c2:33:8e:dd:f2:48:7f:a2:17:a7:
f1:a9:88:3c:fa:e8:3a:3c:96:78:e1:1a:1c:a3:1e:e9:9c:17:
a1:05:3f:8d:b3:f5:8f:c4:2a:03:9a:09:fe:c6:39:b4:7a:e8:
97:5e:36:1b:e2:d6:a2:32:63:38:f8:06:a0:0d:b5:5b:1b:2b:
ed:75:3c:20:46:b9:b5:96:bb:87:9a:04:72:4c:0d:c2:21:17:
ad:d0:cc:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8pJToJ8P3LsGdRD2nDATUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTljZjM0OTFiNmQ5ZTI3NTRjYjUzODg0NWMwNzNjYTUy
Nzg1Y2EwHhcNMjYwNzAzMTgwMjEzWhcNMjYwNzA0MTgwMjEzWjAzMTEwLwYDVQQD
EygzMTE5NzdlNDRjMjhlZTBhMjJmYzI0MjlkYjBiZmYxZTQ4OTQ5NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArboYa//IOffa+XlSK9o/0tVhnrHb
TqtXtDQS3icr2b4G2ND1/CXE3/5ZR4jsa2ix+Xn8Ezjp9wzss9NFC+T5Iin1rIIQ
aKs/qPyl7L/yhsV7OxD7lqAneDkpeFzba15Rm5+WtuTpl39BfPMK1XFRfNhGcAQ6
YJUrdrvjPVQMiXwZHkOoV4A7PgbVs3S9dDjgUOV9xDLrHLCb27pmtImBHeT3+piN
L7hcavOtV3mdbLn6+NWxJAjxWyU477X2u/lsxlcQ9Qqpwu5gVWNR/3zvJj8Y/koc
CX47xozh/acDBwrCwVUoZJNUJ/oIZ8P1gysnICL2AJYtgsO9c+X2XtxEdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEZd+RMKO4KIvwkKdsL/x5IlJdcMB8GA1UdIwQY
MBaAFJnpzzSRttnidUy1OIRcBzylJ4XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYt
YjZkNjRhMDAzZDllLzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYtYjZkNjRhMDAzZDll
LzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS88rGuM8
n2Bi2zdWgcID5vly3e4d6INwyTowRV90nEoolUx991EcVhfTcN0ytIiRU0VcjfMu
MfnrwTH5qAUaVBatj6y9aLfkavVg+aBoWjW/45CFVlbxVe7DIg6zsRGvkA8qBT6s
yquzuNwhbw9FpnCEarDjGv/NNNGcXToy8ZstOtx8aLysx02ARoA3+02gEkooTtYN
YGuvv9ywZfhmwim9yfWC0iXYKGTCM47d8kh/ohen8amIPProOjyWeOEaHKMe6ZwX
oQU/jbP1j8QqA5oJ/sY5tHrol142G+LWojJjOPgGoA21Wxsr7XU8IEa5tZa7h5oE
ckwNwiEXrdDM7A==
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:52:37 2026 by rpki-client