Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: 3sXKOLn93s8W5+tXINpdO3qOl9SDPGOWthgqHUBaSvc=
Subject key identifier: 9A:7F:83:B5:42:66:75:99:50:26:FE:72:38:08:05:0C:0C:18:64:13
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 01A0D682D497D4DFEE25ACB9489257550A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 0680
Signing time: Fri 25 Sep 2026 03:01:33 +0000
Manifest this update: Fri 25 Sep 2026 03:01:33 +0000
Manifest next update: Sat 26 Sep 2026 03:01:33 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: 6hBw47H4aTVzWzby2zhj8C1ydpr742OK3xzUzqgbR7Q=)
2: YuNY9pCJ37EFdyTyyQ6e2KA15E0.asa (hash: srGpwdvJeLpVUuR/dZ5IRJXeVqATKKEFySC416oLi7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:d4:97:d4:df:ee:25:ac:b9:48:92:57:55:0a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Sep 25 03:01:33 2026 GMT
Not After : Sep 26 03:01:33 2026 GMT
Subject: CN=9a7f83b5426675995026fe723808050c0c186413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:72:6e:e7:f0:03:e0:55:6f:b3:1d:37:c1:
72:4d:57:fa:16:8d:a4:78:da:74:1d:69:b7:80:24:
a9:d1:7c:36:d4:58:83:bf:66:3a:b2:06:18:18:44:
4a:69:f5:60:38:51:0a:86:8f:90:2a:6b:1b:e3:52:
19:49:46:a1:1e:a0:5b:f8:0f:fe:23:3f:fa:34:56:
6c:6e:73:f3:75:91:69:2f:5d:0a:18:41:c3:e3:25:
fd:68:25:91:26:0d:70:69:ca:09:56:8a:c4:18:c6:
34:f9:1a:bd:a7:cc:32:1e:4e:47:e7:50:91:0a:2f:
93:f7:87:ee:06:85:15:a6:74:68:81:8c:78:c9:85:
c9:5d:07:73:c8:9e:7e:b7:be:59:85:ca:40:c5:1e:
fe:3c:d4:44:ce:d6:36:42:b9:0f:74:47:16:b4:af:
6e:0e:9a:b1:01:36:59:e0:4d:67:ea:b9:fb:03:ca:
9b:ad:1b:e3:b3:12:e6:96:64:2b:63:9e:bb:e0:a1:
d5:29:f2:15:96:b4:9a:20:19:f4:6f:ae:26:8a:a1:
1a:e4:9e:a5:20:e0:d0:d0:29:42:23:2b:a2:0b:5a:
bb:8a:83:ab:52:0e:57:d5:86:b2:b4:9a:c4:a1:75:
63:33:59:b9:c0:09:b4:79:1c:2c:3d:11:19:00:57:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:83:B5:42:66:75:99:50:26:FE:72:38:08:05:0C:0C:18:64:13
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:9c:03:cf:f8:24:da:22:8c:2f:9c:09:70:4d:48:cb:d1:
65:9c:b6:2e:7f:c6:03:40:43:5c:5c:ce:13:72:5d:c4:c9:fa:
c7:8c:60:2c:f0:f4:9d:3a:b4:ce:65:0d:83:9e:90:f2:0d:f9:
a2:05:8d:e0:5b:76:a5:e7:54:ba:4e:55:af:b7:ef:08:fb:b4:
be:48:99:14:d2:89:8e:4b:fa:34:98:5b:77:86:df:32:4b:10:
1e:2f:46:1c:b8:bc:d5:74:a8:16:93:be:a6:39:57:a9:29:8e:
42:1b:b8:d5:91:b2:f0:2f:25:35:08:5e:35:f4:e6:68:54:b5:
e0:5d:d4:9a:fe:aa:74:8b:c8:0f:69:7b:cc:c3:a1:33:ec:78:
e2:b5:1f:06:39:7f:90:76:a1:a7:99:a0:6e:1d:ca:ea:81:97:
46:de:f8:ce:17:41:91:a3:26:02:08:49:87:38:cc:2f:7c:28:
0b:2d:9b:c6:b2:a2:bf:f1:e5:a3:cb:0b:a0:d9:f2:e2:d9:9a:
2e:78:48:a9:eb:87:06:1a:de:20:7f:09:7d:07:16:5c:3b:06:
64:51:89:58:94:4f:77:11:df:fa:4a:ca:a0:2c:93:32:c4:a8:
c0:bb:26:3c:c7:2c:3c:ea:35:51:eb:52:37:5e:1b:c7:0f:79:
ab:36:22:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWgtSX1N/uJay5SJJXVQqSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5
N2ZiNjQwHhcNMjYwOTI1MDMwMTMzWhcNMjYwOTI2MDMwMTMzWjAzMTEwLwYDVQQD
Eyg5YTdmODNiNTQyNjY3NTk5NTAyNmZlNzIzODA4MDUwYzBjMTg2NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ZybufwA+BVb7MdN8FyTVf6Fo2k
eNp0HWm3gCSp0Xw21FiDv2Y6sgYYGERKafVgOFEKho+QKmsb41IZSUahHqBb+A/+
Iz/6NFZsbnPzdZFpL10KGEHD4yX9aCWRJg1wacoJVorEGMY0+Rq9p8wyHk5H51CR
Ci+T94fuBoUVpnRogYx4yYXJXQdzyJ5+t75ZhcpAxR7+PNREztY2QrkPdEcWtK9u
DpqxATZZ4E1n6rn7A8qbrRvjsxLmlmQrY5674KHVKfIVlrSaIBn0b64miqEa5J6l
IODQ0ClCIyuiC1q7ioOrUg5X1YaytJrEoXVjM1m5wAm0eRwsPREZAFekdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp/g7VCZnWZUCb+cjgIBQwMGGQTMB8GA1UdIwQY
MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt
MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm
LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrWcA8/4
JNoijC+cCXBNSMvRZZy2Ln/GA0BDXFzOE3JdxMn6x4xgLPD0nTq0zmUNg56Q8g35
ogWN4Ft2pedUuk5Vr7fvCPu0vkiZFNKJjkv6NJhbd4bfMksQHi9GHLi81XSoFpO+
pjlXqSmOQhu41ZGy8C8lNQheNfTmaFS14F3Umv6qdIvID2l7zMOhM+x44rUfBjl/
kHahp5mgbh3K6oGXRt74zhdBkaMmAghJhzjML3woCy2bxrKiv/Hlo8sLoNny4tma
LnhIqeuHBhreIH8JfQcWXDsGZFGJWJRPdxHf+krKoCyTMsSowLsmPMcsPOo1UetS
N14bxw95qzYiPw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:53:51 2026 by rpki-client