
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
File: mPTHV2iFwoKEpNZkCz7alOMAtyw.mft (raw, json)
Hash identifier: 8sbdSOKuxYXsqCIyjQ++0C5zuwnKRafESJPFPc9d71s=
Subject key identifier: DB:5D:E4:E7:4B:EF:2B:FE:F4:9A:40:E8:6C:54:42:81:51:7C:05:A9
Authority key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Certificate issuer: /CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Certificate serial: 019F916CE9A4F898075177C666FBFCC960BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:01 +0000
Manifest this update: Fri 24 Jul 2026 00:01:01 +0000
Manifest next update: Sat 25 Jul 2026 00:01:01 +0000
Files and hashes: 1: EYQtAfhdmZfDZdsN4DzNwEpURfE.roa (hash: jh9O88OI/DxugLonRxp5PXkbVTMwIQJK6Pvwlc3iuWU=)
2: mPTHV2iFwoKEpNZkCz7alOMAtyw.crl (hash: ilt7Vtetwq9Nzr2hkLNP4CHK5An9uSQQ6RHa7vWc1Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:e9:a4:f8:98:07:51:77:c6:66:fb:fc:c9:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Validity
Not Before: Jul 24 00:01:01 2026 GMT
Not After : Jul 25 00:01:01 2026 GMT
Subject: CN=db5de4e74bef2bfef49a40e86c544281517c05a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:c9:de:37:6f:61:c1:4a:32:11:6d:af:1e:
23:1f:fc:63:f4:b6:10:78:b9:7b:21:5d:55:f1:c6:
0c:9b:8d:2a:4e:66:fb:ae:6e:be:6d:06:b1:fc:7f:
3f:4a:e5:b0:ca:60:a7:2c:64:e0:b3:5e:ac:03:ea:
18:4d:2b:a2:92:32:ac:f1:b3:4a:22:9d:fc:9e:d7:
43:02:1c:92:c8:36:25:95:fe:50:19:7c:03:ca:87:
f5:86:f5:26:b3:ea:bd:2d:fb:97:03:dd:c6:5e:30:
4d:96:13:d6:ab:eb:3b:99:a4:9f:46:9b:20:be:5e:
04:87:34:5f:ed:87:a9:b6:72:e8:b6:fa:50:1f:53:
b5:75:71:9d:57:46:44:10:e0:96:f8:ef:82:2c:dc:
3b:d7:42:1a:42:2b:f4:43:b9:b5:34:06:f2:39:a8:
97:7c:e4:4e:c6:a6:db:67:26:51:c9:f1:e9:c5:86:
51:26:58:29:98:bc:69:1f:16:b6:c2:d2:86:26:61:
d4:95:6b:d1:dd:19:67:fa:0e:37:43:21:04:37:82:
9f:e6:13:a9:c9:0a:e5:7e:d6:16:92:47:0e:5f:dd:
c0:50:e6:ee:37:40:db:bc:8e:fc:ed:fd:d6:a0:32:
6e:d4:8d:9b:eb:fe:7a:e0:ab:d8:90:8c:12:f9:f7:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:E4:E7:4B:EF:2B:FE:F4:9A:40:E8:6C:54:42:81:51:7C:05:A9
X509v3 Authority Key Identifier:
keyid:98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5e:90:83:c2:df:a2:33:ee:c8:e9:b4:71:ab:e0:9f:e2:56:
7d:e3:8c:03:1d:ee:81:b3:0a:b0:2b:95:24:da:5b:d5:7f:aa:
81:52:43:e4:e6:30:12:40:f6:b5:96:80:b3:63:72:56:f1:f6:
64:bc:a3:9a:78:3d:ec:38:de:0d:59:d5:a2:37:00:8b:cb:a8:
45:44:91:dc:05:82:c9:9b:aa:93:21:24:82:7d:75:f5:ae:b1:
6c:45:2a:68:01:1c:59:ab:25:34:9f:aa:ab:fc:3a:0c:ab:48:
65:25:d4:09:fd:ae:60:71:3c:73:66:58:e4:e2:99:37:bd:34:
11:92:5d:a0:dc:b3:b0:62:5f:0a:b1:9e:fe:bf:f3:b1:2e:37:
98:b4:dd:4e:5b:3a:a0:63:e0:a2:4e:93:f4:65:4f:31:37:72:
db:6e:3f:3e:d2:48:f7:c3:6b:b5:bc:f1:61:c9:87:9f:aa:c1:
5b:6d:be:03:bd:cc:47:e5:24:3a:5d:61:e2:48:e7:19:5d:0f:
b4:53:29:42:e6:00:e8:6b:73:b8:59:be:83:8e:7b:db:96:bf:
41:e5:a9:b3:81:d0:cf:d9:05:e8:2a:51:ce:7b:61:ee:9c:bb:
9e:e5:d4:0f:04:a9:eb:a5:9a:bd:2f:18:7a:83:f1:cd:31:fd:
11:d9:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:06 2026 by rpki-client