Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
File: mBFkq3lqrTz68oOQ9k3ew92W0pA.mft (raw, json)
Hash identifier: GO/Q8BMCpcXHjeFsxVLjvnlHUOZlbM0VUZxZIwTe51g=
Subject key identifier: B3:C8:6B:A2:47:18:DF:D1:67:14:AE:95:5C:AE:E3:BD:96:D6:4F:60
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 019F935BBDC5F10474A5678D604EE2723413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
Manifest number: 45
Signing time: Fri 24 Jul 2026 09:01:30 +0000
Manifest this update: Fri 24 Jul 2026 09:01:30 +0000
Manifest next update: Sat 25 Jul 2026 09:01:30 +0000
Files and hashes: 1: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (hash: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=)
2: mBFkq3lqrTz68oOQ9k3ew92W0pA.crl (hash: av0hoUfQWHq2+Scyn7XICOJ0KUqB6hjrqCiOJqd14Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:bd:c5:f1:04:74:a5:67:8d:60:4e:e2:72:34:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Jul 24 09:01:30 2026 GMT
Not After : Jul 25 09:01:30 2026 GMT
Subject: CN=b3c86ba24718dfd16714ae955caee3bd96d64f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:eb:ae:15:37:17:4b:06:bb:32:85:f7:f3:
ff:35:76:07:b5:e8:68:3b:f0:d7:84:2b:5d:10:ef:
cc:d0:fd:4e:03:b9:f9:b3:71:01:6f:08:74:93:55:
f5:32:3b:1f:7d:e2:04:d4:da:49:ab:a9:3e:80:ee:
c2:12:80:92:0d:9d:22:01:3b:4c:56:55:a6:e6:1b:
c3:e9:3d:b9:96:79:97:0a:3b:5c:de:95:59:12:c3:
f8:b8:42:db:c7:25:76:18:92:ea:ae:a9:77:e1:75:
49:bc:65:9e:ec:e8:59:59:48:af:42:a4:8b:38:d8:
71:30:b3:39:d1:9c:d1:fb:b3:ee:ac:7a:2f:41:0b:
1d:85:63:39:1b:f7:9f:b1:1f:a0:a8:58:8d:a6:46:
0b:7a:b7:74:c4:2a:be:3f:3f:fd:31:01:65:d1:33:
eb:f5:e8:8b:46:f3:27:09:98:77:3e:1f:65:09:2a:
35:12:37:3a:37:ff:19:4d:3a:47:0e:8f:8c:4f:40:
4a:2e:23:c6:bf:dd:dc:0b:88:f2:52:3d:d8:fc:07:
2d:d5:f6:78:42:db:c3:09:22:8a:08:45:90:a5:aa:
35:d1:f2:ec:3c:26:9e:f0:b7:59:9e:ed:cf:21:ae:
21:a6:2e:ff:44:33:ae:75:86:94:2d:ae:96:53:c4:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:6B:A2:47:18:DF:D1:67:14:AE:95:5C:AE:E3:BD:96:D6:4F:60
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:d6:f8:e2:70:fd:c3:ac:33:4c:c8:0e:dd:e5:7e:dc:ad:
85:c8:50:77:37:ef:67:50:e8:a0:9f:23:29:b1:bc:09:c0:1f:
27:e1:4c:07:b4:40:9c:c2:95:01:ed:10:5a:a4:f7:e4:4b:d4:
e5:b0:69:f8:1f:8e:a6:62:b3:2b:6c:00:c1:4c:db:9d:2f:f8:
37:23:80:46:1f:ab:99:29:7e:6c:73:28:ef:ba:b5:46:33:07:
f2:97:fd:c5:aa:76:33:1f:86:e2:87:e9:46:11:4c:68:36:3d:
ad:1c:2c:91:d4:91:da:8c:3a:30:0b:cf:2b:4f:14:e9:0f:fe:
7e:82:9b:62:a5:df:0e:a5:82:30:86:6d:c3:d2:eb:c0:92:4c:
5f:0d:6b:8e:0d:27:cc:e4:3c:35:66:f8:21:b1:59:24:5d:13:
b6:0f:fc:30:75:ae:d2:25:ea:bd:86:f0:50:88:9a:84:f2:8f:
a5:8a:cd:db:d2:69:a5:06:0a:ae:cb:5c:43:6b:6e:07:91:a4:
5b:c6:e8:c1:72:25:0f:3f:0d:7e:41:5b:92:ff:86:6b:0e:3f:
3f:f9:cf:fc:0c:46:61:68:41:58:a1:14:22:cc:31:37:9d:4b:
ed:98:25:ab:ab:b8:67:30:b0:84:7b:a4:e5:e6:6c:6d:9c:b7:
29:81:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:53 2026 by rpki-client