Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
File: mPTHV2iFwoKEpNZkCz7alOMAtyw.mft (raw, json)
Hash identifier: oEHumZ1yinVaUj3Vj36kst//+ZLeCJ9DvEvJE+E2r7A=
Subject key identifier: CA:CF:D0:80:B4:8A:00:AD:41:F1:D5:3A:1E:84:01:6E:1F:53:7B:AF
Authority key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Certificate issuer: /CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Certificate serial: 01A0EB1C619F7D2EB29466E45B50E27B1890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:40 +0000
Manifest this update: Tue 29 Sep 2026 03:01:40 +0000
Manifest next update: Wed 30 Sep 2026 03:01:40 +0000
Files and hashes: 1: EYQtAfhdmZfDZdsN4DzNwEpURfE.roa (hash: jh9O88OI/DxugLonRxp5PXkbVTMwIQJK6Pvwlc3iuWU=)
2: mPTHV2iFwoKEpNZkCz7alOMAtyw.crl (hash: WNWXhm3rqNznCnatsQ4LjIr8oez9ad2Yo5TwdNO7JCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:61:9f:7d:2e:b2:94:66:e4:5b:50:e2:7b:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Validity
Not Before: Sep 29 03:01:40 2026 GMT
Not After : Sep 30 03:01:40 2026 GMT
Subject: CN=cacfd080b48a00ad41f1d53a1e84016e1f537baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:97:ab:0a:1c:95:59:92:74:d5:39:de:8a:
9b:2c:d3:fb:cd:f1:73:88:02:32:a6:f1:7c:33:e4:
74:bf:1e:72:3b:12:cf:c3:1e:91:a4:96:3b:dd:6d:
2e:1f:51:aa:56:f7:a3:5e:58:bf:5d:84:97:6d:55:
6d:00:08:27:67:0c:56:95:ee:e1:42:10:5d:81:c2:
ad:fb:de:69:81:6a:35:f4:ee:c0:c9:f1:20:83:55:
df:ea:5a:a3:f0:24:78:3e:c8:39:83:2c:2f:2b:ce:
83:33:2d:1d:6d:83:dd:8d:52:54:93:81:9a:a9:51:
c7:86:7d:00:9b:ba:01:5c:d6:36:1d:67:cd:bc:d8:
ec:88:9c:62:15:1a:50:a0:13:de:3a:da:7f:e9:c0:
7e:3d:61:5a:77:d0:ea:77:d8:5d:55:ba:94:40:50:
1c:43:74:db:1f:7a:78:ab:26:a0:ec:1f:6a:42:7a:
a6:b8:5a:10:22:ec:8d:0f:74:5c:c3:b3:33:0c:22:
e3:09:c2:63:8a:55:4d:bc:d6:c9:a7:24:01:59:21:
98:a5:65:6e:56:22:bd:d1:3c:9e:58:a8:e5:02:07:
89:96:64:10:1b:a7:b5:78:db:b4:f7:0a:70:87:9a:
92:ba:cd:18:cc:88:e5:bd:89:09:12:e6:c1:98:36:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:D0:80:B4:8A:00:AD:41:F1:D5:3A:1E:84:01:6E:1F:53:7B:AF
X509v3 Authority Key Identifier:
keyid:98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:96:32:4b:df:0f:d7:45:38:69:2a:85:d1:9f:77:4f:5b:
32:10:ca:05:25:e9:1c:5c:1b:89:cd:47:a7:11:30:ff:0a:87:
b3:d4:c0:ba:56:c4:90:9c:fd:51:29:9d:9d:9d:69:5b:88:aa:
f3:62:eb:c4:d7:63:c2:dc:a7:72:bb:fe:f7:ef:d2:d7:5d:17:
69:9f:9d:2d:86:ed:6b:a6:b8:7c:65:79:68:3b:26:40:2e:68:
6e:0d:7d:4b:cf:a6:fb:41:6d:c8:5d:11:ef:6a:d7:6b:8f:1c:
de:e8:8a:e8:8b:a3:5f:59:03:c7:fa:bf:13:3e:ec:30:c0:07:
14:42:d2:bd:0c:b8:ab:2c:49:45:83:28:f9:fd:ae:0c:fb:91:
63:91:a2:0a:69:ba:74:fd:6b:30:8e:c9:f9:77:c9:2f:dd:3f:
fe:3c:fe:91:77:89:a7:4a:af:35:6d:e4:47:0e:e5:06:d5:ed:
71:18:b6:fa:3e:ff:d5:0d:c5:8f:3b:6a:0b:4f:89:2c:cf:f5:
d9:97:f5:2e:0c:60:fa:01:9b:5a:e3:96:c6:6a:93:5d:bc:9e:
0d:0f:cf:67:f7:28:22:a3:fa:70:78:7d:28:e0:11:5b:7b:34:
dd:98:18:ad:5b:8d:8a:4b:dc:92:e0:a4:a6:59:b0:dc:b1:fd:
ce:ac:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:14:10 2026 by rpki-client