Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: ykFFVehkoB7JKs/+7zZqXSw4Kyaww2F/g3gRQI05xbk=
Subject key identifier: 75:59:24:47:AA:84:32:21:1B:87:93:92:47:06:FA:34:9F:47:A4:86
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019DECDB43F1B6E86288F074FC5D9BD3DB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0662
Signing time: Sun 03 May 2026 08:01:25 +0000
Manifest this update: Sun 03 May 2026 08:01:25 +0000
Manifest next update: Mon 04 May 2026 08:01:25 +0000
Files and hashes: 1: FBxiREsktkVFp8venH-s08qeoPQ.roa (hash: ibnO/dj3ZhDaLeFXf0GojpXiulWnjeB2LQmvljQymA0=)
2: WvhwqSTk9fYsIwVWoqZqzKg6HQ0.roa (hash: GwslgAUxIHInMefcYidsp1yt/WAtqY5sHB1EhJWpZT8=)
3: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: yOSYeD+I0iaPqP6hGm5bBkIzQIGhffLLwsyYacLUmGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:43:f1:b6:e8:62:88:f0:74:fc:5d:9b:d3:db:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: May 3 08:01:25 2026 GMT
Not After : May 4 08:01:25 2026 GMT
Subject: CN=75592447aa8432211b8793924706fa349f47a486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:de:4e:1b:bf:59:b7:c1:a9:8d:7d:54:c1:
fa:e2:16:8c:01:86:7a:c3:c9:3e:17:40:88:3c:9b:
55:a0:b9:c4:4c:66:79:01:a5:22:e4:a1:d5:82:b0:
66:b0:af:07:81:ee:6a:8a:df:db:2b:6f:14:00:90:
1b:f6:b3:4b:2f:c8:cc:16:86:03:c5:64:20:91:f3:
ff:d8:95:27:89:bd:a6:01:d3:55:0a:5d:6b:e2:51:
63:86:66:5c:16:6b:9b:6c:5c:4c:33:af:b1:c4:dd:
34:86:eb:73:1a:b5:68:a7:d1:0d:3d:92:00:09:0d:
82:7d:bf:46:9d:66:cd:6d:8c:13:3a:b1:1f:66:2e:
bc:3b:db:ae:82:db:0c:bd:01:74:cc:52:f6:5a:ea:
4a:28:0c:0c:55:98:3f:e3:15:1a:fc:40:c6:b4:a3:
7c:c2:a1:05:4f:85:67:ab:42:20:ff:ad:a4:dd:5f:
f7:9f:af:4b:85:81:ea:6d:33:9a:4a:f2:35:da:80:
c5:e2:e9:1a:0f:a0:fa:9d:b7:05:e8:b3:b8:f7:cc:
60:fc:eb:c7:ed:2b:92:92:6d:85:d6:1a:c5:1f:e3:
4c:11:1d:ce:42:bd:13:3b:05:96:26:06:ff:1e:d0:
3b:85:c7:f1:1d:95:e6:a7:f0:8d:ed:38:a5:d1:23:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:24:47:AA:84:32:21:1B:87:93:92:47:06:FA:34:9F:47:A4:86
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:f9:f7:85:4b:6b:9f:b0:92:bf:9f:c2:c9:71:44:b9:ee:
fb:f1:e1:44:4a:2e:47:2c:8f:14:b6:f6:90:54:d1:d6:a6:1a:
d3:b7:ec:a8:78:64:0b:63:52:a2:20:66:1c:c7:e8:07:98:b4:
5b:ec:31:67:2d:0a:cd:cd:24:76:55:ec:cb:19:6b:0e:d2:84:
39:2b:2f:5b:f8:2b:8f:a0:39:1e:19:a5:bf:74:b3:f2:b8:9a:
7a:42:58:63:47:80:00:4a:0a:d2:16:ef:71:0d:31:80:58:10:
8c:0b:9a:4b:5b:e0:41:ba:56:e1:a0:1b:f3:cc:ba:53:69:b6:
45:20:7a:bc:7f:40:1b:de:17:fe:94:fc:ee:73:33:67:03:d1:
5d:01:92:b9:e5:d5:64:9e:d7:f6:e9:d5:46:fd:34:2e:f1:a2:
62:cb:d2:da:a8:2d:26:67:cd:0b:42:ca:20:81:2a:80:2b:dc:
b6:90:e0:70:4f:c9:8c:e7:e2:13:e2:7a:ef:17:3c:e7:79:30:
cf:9c:dd:b3:49:74:77:ca:11:c2:91:5d:4a:02:ec:1d:60:84:
3f:6a:0e:b1:89:70:dd:65:a8:9d:73:ca:c1:6a:6c:04:2b:76:
84:c5:f1:ef:3a:66:4f:fc:fa:38:94:8f:8a:3d:08:b3:e4:69:
ae:c8:ea:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3s20PxtuhiiPB0/F2b09t+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI1ODJjMWNkMTg4MWYyZDQ2ZDBhNzAzODJjYWI2OTIy
NWYxYTkwHhcNMjYwNTAzMDgwMTI1WhcNMjYwNTA0MDgwMTI1WjAzMTEwLwYDVQQD
Eyg3NTU5MjQ0N2FhODQzMjIxMWI4NzkzOTI0NzA2ZmEzNDlmNDdhNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxzeThu/WbfBqY19VMH64haMAYZ6
w8k+F0CIPJtVoLnETGZ5AaUi5KHVgrBmsK8Hge5qit/bK28UAJAb9rNLL8jMFoYD
xWQgkfP/2JUnib2mAdNVCl1r4lFjhmZcFmubbFxMM6+xxN00hutzGrVop9ENPZIA
CQ2Cfb9GnWbNbYwTOrEfZi68O9uugtsMvQF0zFL2WupKKAwMVZg/4xUa/EDGtKN8
wqEFT4Vnq0Ig/62k3V/3n69LhYHqbTOaSvI12oDF4ukaD6D6nbcF6LO498xg/OvH
7SuSkm2F1hrFH+NMER3OQr0TOwWWJgb/HtA7hcfxHZXmp/CN7Til0SOsrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVZJEeqhDIhG4eTkkcG+jSfR6SGMB8GA1UdIwQY
MBaAFJj7WCwc0YgfLUbQpwOCyraSJfGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzct
M2JjNDQxMDFlYzAwLzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzctM2JjNDQxMDFlYzAw
LzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS/594VL
a5+wkr+fwslxRLnu+/HhREouRyyPFLb2kFTR1qYa07fsqHhkC2NSoiBmHMfoB5i0
W+wxZy0Kzc0kdlXsyxlrDtKEOSsvW/grj6A5Hhmlv3Sz8riaekJYY0eAAEoK0hbv
cQ0xgFgQjAuaS1vgQbpW4aAb88y6U2m2RSB6vH9AG94X/pT87nMzZwPRXQGSueXV
ZJ7X9unVRv00LvGiYsvS2qgtJmfNC0LKIIEqgCvctpDgcE/JjOfiE+J67xc853kw
z5zds0l0d8oRwpFdSgLsHWCEP2oOsYlw3WWonXPKwWpsBCt2hMXx7zpmT/z6OJSP
ij0Is+RprsjqfQ==
-----END CERTIFICATE-----
Generated at Sun May 3 16:14:16 2026 by rpki-client