Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
File: menPNJG22eJ1TLU4hFwHPKUnhco.mft (raw, json)
Hash identifier: QcnkdeqIQaXOtAWxaItyTroh4Gsm/MmEZSMvb+StIAg=
Subject key identifier: 0C:75:8F:73:3C:F5:98:2E:A6:65:5B:4C:65:20:44:8C:22:99:FF:75
Authority key identifier: 99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
Certificate issuer: /CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Certificate serial: 019F935AB92A47BE32AB5AB60E73C1768F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:24 +0000
Manifest this update: Fri 24 Jul 2026 09:00:24 +0000
Manifest next update: Sat 25 Jul 2026 09:00:24 +0000
Files and hashes: 1: menPNJG22eJ1TLU4hFwHPKUnhco.crl (hash: zwxMnDjcOBPihJUZmrfXCforETvDGvpJ3xNaO0nGiV0=)
2: zj7l-XB4ir-Br4qiRjHhOvxnx2E.roa (hash: hJIkYZoYjwX+UQUpvmn9CWFY8wR0zPivjXLUKJl5hsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:b9:2a:47:be:32:ab:5a:b6:0e:73:c1:76:8f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Validity
Not Before: Jul 24 09:00:24 2026 GMT
Not After : Jul 25 09:00:24 2026 GMT
Subject: CN=0c758f733cf5982ea6655b4c6520448c2299ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:de:e7:90:49:02:38:79:fe:38:af:bb:c3:
8e:46:0d:cb:0c:2a:70:1b:c5:fe:fe:c7:34:4b:fa:
b0:d5:11:2e:89:ec:32:f6:35:90:9d:f4:af:ad:32:
e1:92:07:35:43:a2:4b:27:d4:1f:06:13:78:8e:0c:
86:cd:33:75:7e:69:85:23:0a:ce:77:54:fc:d9:a2:
c2:78:27:15:74:c0:c0:93:c5:ff:24:2a:2d:4f:1b:
1a:c8:8b:08:d6:c9:d3:3d:3d:f8:f8:1f:3c:2e:4a:
b9:90:1f:bb:9c:29:6e:04:96:7c:14:ac:69:f2:6e:
33:81:c6:39:94:8f:83:cc:25:81:16:7e:89:d0:18:
59:97:a0:14:24:1c:58:39:50:59:57:f7:ff:0f:92:
0d:cf:4a:d5:35:86:33:3e:50:01:e2:c0:c8:bb:21:
57:f6:50:02:02:01:e9:bc:b7:b6:5b:4d:73:7e:24:
e6:0a:b3:65:7c:6b:e5:2f:b2:cc:c5:76:61:99:03:
23:ac:9c:29:34:db:61:bf:84:5d:bb:c5:2c:d6:1a:
6d:0f:96:5b:7e:b1:1a:6a:aa:98:cc:a9:4b:c6:0d:
ca:99:6b:60:ee:80:47:3e:78:99:18:07:2a:79:a7:
ed:d6:c5:ec:83:23:7b:f0:65:3c:7f:fe:8c:5b:f3:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:75:8F:73:3C:F5:98:2E:A6:65:5B:4C:65:20:44:8C:22:99:FF:75
X509v3 Authority Key Identifier:
keyid:99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:38:4e:8d:b3:0a:06:1f:ab:6c:3f:58:14:1a:36:f1:7b:9b:
f0:02:02:da:5e:c8:10:43:a3:7b:8d:87:97:95:9e:58:4e:f1:
58:bb:95:20:f2:8a:ed:df:48:f8:f5:50:b0:40:7f:99:a4:00:
88:3a:6a:f2:01:8a:11:63:6d:75:2b:6d:c6:0f:99:a7:d3:13:
65:d0:da:12:02:57:72:e1:7b:74:1d:53:c6:9b:c2:41:e7:e0:
e5:f3:9b:1e:cb:c3:fb:2a:39:58:11:ee:38:f5:7b:ef:79:5d:
c3:0a:b0:f6:62:75:aa:fa:2b:b7:29:06:3a:a6:c5:cd:40:8f:
80:33:e0:02:75:4b:d5:e5:d1:4d:64:b4:fb:41:f0:b8:2c:98:
92:e7:da:fe:29:87:6f:fc:1f:33:a9:ba:e1:93:95:c6:53:ec:
1e:38:4c:49:f3:0d:9b:43:32:c8:eb:c5:2a:ea:1b:bf:16:74:
3f:2e:58:56:df:7d:af:f5:e3:15:d5:6f:dd:78:71:a8:59:cc:
cc:75:60:14:45:d0:0d:0c:b8:8e:e2:c8:d4:9a:25:ce:5f:93:
a7:67:e3:a3:6b:98:ff:0a:76:c0:e4:ee:64:d3:14:cd:b3:fe:
9c:a4:3e:a2:04:0d:40:7a:d5:f6:89:4c:85:e2:84:7f:20:45:
e2:06:a3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWrkqR74yq1q2DnPBdo8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTljZjM0OTFiNmQ5ZTI3NTRjYjUzODg0NWMwNzNjYTUy
Nzg1Y2EwHhcNMjYwNzI0MDkwMDI0WhcNMjYwNzI1MDkwMDI0WjAzMTEwLwYDVQQD
EygwYzc1OGY3MzNjZjU5ODJlYTY2NTViNGM2NTIwNDQ4YzIyOTlmZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRDe55BJAjh5/jivu8OORg3LDCpw
G8X+/sc0S/qw1REuiewy9jWQnfSvrTLhkgc1Q6JLJ9QfBhN4jgyGzTN1fmmFIwrO
d1T82aLCeCcVdMDAk8X/JCotTxsayIsI1snTPT34+B88Lkq5kB+7nCluBJZ8FKxp
8m4zgcY5lI+DzCWBFn6J0BhZl6AUJBxYOVBZV/f/D5INz0rVNYYzPlAB4sDIuyFX
9lACAgHpvLe2W01zfiTmCrNlfGvlL7LMxXZhmQMjrJwpNNthv4Rdu8Us1hptD5Zb
frEaaqqYzKlLxg3KmWtg7oBHPniZGAcqeaft1sXsgyN78GU8f/6MW/NQEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx1j3M89ZgupmVbTGUgRIwimf91MB8GA1UdIwQY
MBaAFJnpzzSRttnidUy1OIRcBzylJ4XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYt
YjZkNjRhMDAzZDllLzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYtYjZkNjRhMDAzZDll
LzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDhOjbMK
Bh+rbD9YFBo28Xub8AIC2l7IEEOje42Hl5WeWE7xWLuVIPKK7d9I+PVQsEB/maQA
iDpq8gGKEWNtdSttxg+Zp9MTZdDaEgJXcuF7dB1TxpvCQefg5fObHsvD+yo5WBHu
OPV773ldwwqw9mJ1qvortykGOqbFzUCPgDPgAnVL1eXRTWS0+0HwuCyYkufa/imH
b/wfM6m64ZOVxlPsHjhMSfMNm0MyyOvFKuobvxZ0Py5YVt99r/XjFdVv3XhxqFnM
zHVgFEXQDQy4juLI1Jolzl+Tp2fjo2uY/wp2wOTuZNMUzbP+nKQ+ogQNQHrV9olM
heKEfyBF4gajGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:25 2026 by rpki-client