Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
File: menPNJG22eJ1TLU4hFwHPKUnhco.mft (raw, json)
Hash identifier: FQvvGB2K5pFWmh310Lb+NCNbOD8crx5sMoPS0SpJcg4=
Subject key identifier: 81:49:1C:65:04:BA:1B:A4:B8:9A:18:60:CE:F1:51:E2:D7:22:FF:2C
Authority key identifier: 99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
Certificate issuer: /CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Certificate serial: 01A1931ED9BFE854185B957498A0128F0D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
Manifest number: 014A
Signing time: Sat 31 Oct 2026 18:00:34 +0000
Manifest this update: Sat 31 Oct 2026 18:00:34 +0000
Manifest next update: Sun 01 Nov 2026 18:00:34 +0000
Files and hashes: 1: menPNJG22eJ1TLU4hFwHPKUnhco.crl (hash: OoTkQfbwq/Rqt8mPS9MOYIHV1kaQd7JTI0KIV26jApM=)
2: zj7l-XB4ir-Br4qiRjHhOvxnx2E.roa (hash: hJIkYZoYjwX+UQUpvmn9CWFY8wR0zPivjXLUKJl5hsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1e:d9:bf:e8:54:18:5b:95:74:98:a0:12:8f:0d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Validity
Not Before: Oct 31 18:00:34 2026 GMT
Not After : Nov 1 18:00:34 2026 GMT
Subject: CN=81491c6504ba1ba4b89a1860cef151e2d722ff2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:f6:d3:98:e1:82:6b:9b:8e:78:4e:f2:49:
fa:3b:88:6e:94:5b:0f:f5:0f:85:36:8c:36:3e:8b:
5c:b2:d5:7f:3f:50:28:05:e7:57:8b:54:5b:c6:1e:
70:88:a6:d3:93:7e:2c:72:bb:c8:be:6c:1e:84:d1:
08:08:8c:a6:20:3b:7c:9e:27:2e:7d:c3:54:5b:e7:
b8:a5:4a:a6:e0:b9:d8:0d:f3:de:08:8a:30:f8:38:
7c:66:bd:16:71:fc:31:36:b5:87:5d:d5:9d:8d:99:
7d:1c:df:d2:1e:49:c2:9c:dc:f1:d1:c2:ec:fb:c1:
63:fa:c9:98:bf:d6:a5:57:0d:52:69:31:6e:0d:38:
ec:da:a0:b3:16:7d:49:b5:2b:87:e7:d5:30:67:1e:
ac:6d:d5:4b:76:73:5b:56:a3:00:ba:00:b4:5a:57:
cd:91:d3:e1:f6:f7:2a:8d:1c:27:db:b7:0d:39:f5:
5a:b0:a2:f1:db:42:80:1d:be:a4:f5:40:0b:f6:f5:
92:f0:cd:f2:d6:cb:9e:a7:66:6e:b8:63:11:d9:e4:
59:97:5f:9d:c9:55:75:55:d1:8d:dc:e5:58:23:3a:
98:aa:f8:6a:64:c7:4a:0c:95:aa:a4:02:01:64:74:
f3:ec:f7:6f:e6:fb:43:3e:65:82:1f:c0:e4:39:23:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:1C:65:04:BA:1B:A4:B8:9A:18:60:CE:F1:51:E2:D7:22:FF:2C
X509v3 Authority Key Identifier:
keyid:99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9b:7e:2f:4f:4c:fe:1c:4f:5b:bb:f8:b2:aa:46:28:b1:3c:
c9:b0:14:ea:67:48:60:d8:3f:6b:d2:5a:47:2a:91:18:bb:b0:
54:e0:17:31:e2:ac:01:e8:07:45:90:3d:ca:46:5b:11:48:1a:
ee:ab:3c:67:47:8c:35:c8:0b:97:e6:83:c9:63:2b:db:a6:4d:
c7:e3:23:b8:ae:cb:b7:c1:b8:97:26:6a:be:d8:65:12:cf:6a:
ad:54:62:13:07:c1:73:83:46:be:90:4a:69:a3:b8:46:c6:f5:
7b:af:ac:cf:8f:84:e6:fe:df:e0:4e:5a:d0:34:a5:73:e0:0c:
ca:48:d3:91:6f:fc:6c:85:92:8e:8a:cf:9a:82:5f:ce:e1:f2:
50:a0:bf:c0:61:bb:47:0d:b6:30:7b:d5:3e:4c:3a:a0:95:35:
00:0a:fb:be:ce:c8:e8:e0:aa:dd:6b:c3:90:39:14:a9:c3:0d:
64:5b:8b:2e:65:44:1f:ad:4f:87:1b:e3:d6:2a:39:47:ba:2f:
5e:93:28:6e:48:71:7e:91:2b:6d:61:e1:ba:36:05:84:61:d8:
a5:6e:7f:cd:68:78:20:2a:1d:dc:6b:58:78:85:52:8b:61:c0:
76:90:c7:91:9c:a3:d1:55:fb:22:5c:ad:2b:1f:0d:cd:71:94:
9b:22:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:51:57 2026 by rpki-client