
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier: WCBxrocqDN0QnZmv8TMpj/jWa+J3VRaKF5Lge2AZ5xI=
Subject key identifier: CE:1D:30:B7:11:3D:FD:5A:05:A5:D2:81:D9:39:07:EB:96:6A:CC:D9
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 01A0EB53B5A56B887345D912697E0A27FEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number: 1A83
Signing time: Tue 29 Sep 2026 04:02:06 +0000
Manifest this update: Tue 29 Sep 2026 04:02:06 +0000
Manifest next update: Wed 30 Sep 2026 04:02:06 +0000
Files and hashes: 1: CPc2gfzPMA_XTIsk9darqj9agOE.roa (hash: FRHMaRmA9uDv2TIcCe9NPlv52iXAmlEGwMB4VcyHg7s=)
2: JOp-tx-YUBEPF_3-VsIHevvanSc.roa (hash: 6cD/pjo1d/sDsw6tGOIEud52crieFifk4nobcONjU7o=)
3: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: xrXjbix1nGVPJTQiQDlX0/HnwnUerAhJYguPjX41s2I=)
4: SX64PbBkJEyQEeAGXENs-B0zaos.roa (hash: 1hSHdHWGYi7oxB0lfudb/GJDIaboMyNblxMXh7JhotM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:b5:a5:6b:88:73:45:d9:12:69:7e:0a:27:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Sep 29 04:02:06 2026 GMT
Not After : Sep 30 04:02:06 2026 GMT
Subject: CN=ce1d30b7113dfd5a05a5d281d93907eb966accd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:35:22:94:04:e9:72:af:0d:d3:10:99:75:
83:f0:90:19:c6:f5:5f:98:34:49:3d:bf:df:1d:43:
39:14:d3:32:cd:e9:fb:00:79:74:a7:ba:4f:55:51:
1a:e8:55:e0:42:c7:b6:37:5b:d7:1a:e1:a3:5b:f9:
f2:38:8f:25:6b:eb:5f:10:71:80:44:9f:47:2c:0d:
15:4c:a4:62:d9:3b:1b:8e:45:38:ac:b3:a0:2d:87:
e0:45:3c:9b:bd:22:8e:b9:8a:41:50:28:e7:87:3e:
fb:6d:d5:05:0e:eb:b5:c6:5b:3e:59:b2:b2:8b:72:
25:4c:03:18:ae:9e:9a:9f:cf:4d:90:7d:73:6f:7b:
13:e8:7b:fa:26:63:a3:36:7a:11:ef:05:5f:f0:01:
04:7b:a9:12:21:a3:b2:c7:c9:36:90:61:5b:3d:18:
3e:e4:f4:73:a5:c7:1e:16:f2:ab:05:15:64:ed:13:
b6:75:5c:18:a8:59:07:5a:f9:d3:96:8d:2d:6a:3b:
93:cc:71:a5:9d:7d:e1:db:99:2d:d9:08:eb:c2:1a:
b0:10:03:65:a1:b5:df:39:64:9c:8e:9e:83:be:b9:
35:e5:02:86:31:cb:e3:bf:30:64:6b:69:a0:4a:f2:
2f:43:62:0f:a9:4c:79:32:20:62:c6:ae:01:61:46:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:30:B7:11:3D:FD:5A:05:A5:D2:81:D9:39:07:EB:96:6A:CC:D9
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:60:d9:fb:f8:97:e9:fa:01:d8:26:09:ec:30:04:76:73:7c:
b1:4e:d2:76:81:6e:7e:a8:24:41:c3:0b:10:80:ff:2d:00:a0:
60:94:11:21:ea:26:a1:11:2d:fc:a0:0a:8b:7a:ea:28:70:8e:
da:a4:93:58:c0:43:68:ff:bf:1f:d1:20:f5:3d:97:e9:04:26:
19:7e:24:2a:08:92:9d:a1:7a:d1:10:18:e7:d3:89:43:9b:88:
1e:e3:08:de:0e:a1:dc:98:6e:5b:f7:09:1c:e1:11:6f:a1:6f:
58:a2:8d:bc:87:80:7a:f9:92:d7:a0:a2:be:be:a7:93:4b:a3:
e6:18:3c:93:8c:12:38:31:a1:1d:2b:33:57:fc:3e:de:df:73:
e9:2e:22:24:b9:0d:99:90:0d:e9:d3:9d:db:5b:42:85:a4:da:
3c:0a:c6:a1:30:17:d9:fd:b8:8a:38:48:d5:d8:7a:dd:5d:22:
dc:06:fc:af:89:23:db:dd:cb:eb:a7:47:90:ab:26:24:33:e1:
b4:58:c9:c0:59:15:64:c0:c3:a6:8d:cd:89:d7:28:ed:9f:4c:
ab:81:84:b6:03:64:48:07:aa:9a:ea:b2:a4:1b:4d:c3:6b:2d:
f5:9d:1c:ff:92:0c:ed:7f:e8:48:0c:27:e3:1f:2b:c1:d0:0a:
24:cb:47:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrU7Wla4hzRdkSaX4KJ/77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTNiZGY0ZGM3NDM1ZmFmNTFiYTkzNGQ2NTU3MGY3MWMy
MTczMWEwHhcNMjYwOTI5MDQwMjA2WhcNMjYwOTMwMDQwMjA2WjAzMTEwLwYDVQQD
EyhjZTFkMzBiNzExM2RmZDVhMDVhNWQyODFkOTM5MDdlYjk2NmFjY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCs1IpQE6XKvDdMQmXWD8JAZxvVf
mDRJPb/fHUM5FNMyzen7AHl0p7pPVVEa6FXgQse2N1vXGuGjW/nyOI8la+tfEHGA
RJ9HLA0VTKRi2TsbjkU4rLOgLYfgRTybvSKOuYpBUCjnhz77bdUFDuu1xls+WbKy
i3IlTAMYrp6an89NkH1zb3sT6Hv6JmOjNnoR7wVf8AEEe6kSIaOyx8k2kGFbPRg+
5PRzpcceFvKrBRVk7RO2dVwYqFkHWvnTlo0tajuTzHGlnX3h25kt2QjrwhqwEANl
obXfOWScjp6Dvrk15QKGMcvjvzBka2mgSvIvQ2IPqUx5MiBixq4BYUaWcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4dMLcRPf1aBaXSgdk5B+uWaszZMB8GA1UdIwQY
MBaAFEQTvfTcdDX69RupNNZVcPccIXMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTkt
YmM5ZWNjMmFkYjQzLzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80N2FhMmYtNmI2Zi00ZWY1LTliOTktYmM5ZWNjMmFkYjQz
LzEvUkJPOTlOeDBOZnIxRzZrMDFsVnc5eHdoY3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemDZ+/iX
6foB2CYJ7DAEdnN8sU7SdoFufqgkQcMLEID/LQCgYJQRIeomoREt/KAKi3rqKHCO
2qSTWMBDaP+/H9Eg9T2X6QQmGX4kKgiSnaF60RAY59OJQ5uIHuMI3g6h3JhuW/cJ
HOERb6FvWKKNvIeAevmS16Civr6nk0uj5hg8k4wSODGhHSszV/w+3t9z6S4iJLkN
mZAN6dOd21tChaTaPArGoTAX2f24ijhI1dh63V0i3Ab8r4kj293L66dHkKsmJDPh
tFjJwFkVZMDDpo3Nidco7Z9Mq4GEtgNkSAeqmuqypBtNw2st9Z0c/5IM7X/oSAwn
4x8rwdAKJMtH8g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:11:28 2026 by rpki-client