Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: w9F0IwoEQIVJ07lJLn+a9E9KKmr6Ny8MkKZRwQCLvWQ=
Subject key identifier: 9C:B6:BB:83:06:07:C0:BE:86:C2:63:85:A0:3A:B0:9D:EA:AF:C6:29
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019F9248825B088B4F6B9D11732CF88E1C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0B23
Signing time: Fri 24 Jul 2026 04:00:53 +0000
Manifest this update: Fri 24 Jul 2026 04:00:53 +0000
Manifest next update: Sat 25 Jul 2026 04:00:53 +0000
Files and hashes: 1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: I01U5bEGLEwC4ztfylfB0CwH/7CVuYjSNukHCH27x30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:82:5b:08:8b:4f:6b:9d:11:73:2c:f8:8e:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Jul 24 04:00:53 2026 GMT
Not After : Jul 25 04:00:53 2026 GMT
Subject: CN=9cb6bb830607c0be86c26385a03ab09deaafc629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:45:69:75:74:1c:5c:cc:f9:ac:5a:5e:7b:
ad:07:68:a8:0d:2d:e3:fe:58:20:d0:cd:3d:77:07:
6b:24:f7:d8:18:7b:9e:42:82:b0:75:31:8d:6c:af:
e6:d7:e8:48:a6:23:cd:11:08:98:52:56:34:32:13:
92:eb:9a:5d:5f:d7:56:c6:b7:4e:d4:fc:6b:2f:25:
79:d4:99:5d:47:e1:f2:e4:d7:c4:71:21:0d:95:a3:
e1:78:4b:cc:40:c5:17:ce:dd:9d:fd:c9:aa:82:75:
87:b6:1d:3d:e8:83:13:90:47:84:6f:87:30:65:68:
dd:36:cc:0b:3a:88:1d:e6:c5:e7:89:68:70:ac:39:
b2:4c:e0:72:aa:50:ef:d4:2c:8e:e9:5f:9b:81:b9:
45:50:65:dd:00:90:44:04:85:58:d8:dd:f5:ca:78:
b0:99:65:52:15:b0:aa:81:00:bb:8c:cb:51:85:4a:
0f:89:f8:51:45:82:32:4d:b2:3f:8f:0a:6b:f4:90:
c6:18:d6:05:d9:d5:b5:03:06:cf:d2:b3:1d:fa:d2:
4d:8d:b5:24:21:b5:98:fd:74:99:26:b4:34:58:6c:
54:f8:22:6e:2e:64:7d:f0:d8:a0:f6:26:6c:5b:e1:
22:1e:46:25:55:bd:0f:d0:90:df:b9:bd:f4:b2:80:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B6:BB:83:06:07:C0:BE:86:C2:63:85:A0:3A:B0:9D:EA:AF:C6:29
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ef:58:ad:11:e5:b2:03:96:4c:f0:2e:40:82:50:ad:03:24:
ad:8d:c5:23:69:21:8c:41:2c:c8:8d:28:f1:25:3c:cb:a8:70:
c0:ab:77:d1:1c:b5:6e:32:f9:06:5d:d2:6c:29:e9:58:5b:5a:
5c:26:70:1d:d4:b7:13:38:d3:a0:b2:bb:15:cd:72:7a:42:7d:
2d:c5:84:97:87:b2:ac:fe:07:e7:db:a1:fb:ad:f3:e4:22:ff:
db:17:91:23:06:4b:99:d0:66:1e:f4:71:f9:a8:7a:14:8e:a6:
31:49:b2:c7:0d:c2:fe:86:52:6f:d6:ce:33:a8:13:89:8f:37:
9b:af:01:8f:bd:c9:84:15:e7:e0:70:a0:a9:39:ba:e4:66:5a:
80:20:8f:a5:6c:d7:eb:c4:e9:5e:59:94:25:79:17:98:c1:15:
a1:55:4b:c7:ab:be:38:a5:72:e8:30:84:15:64:75:41:a7:bf:
db:40:f5:02:9f:bb:30:39:e0:d4:57:68:a2:e2:c6:24:38:11:
86:2d:f2:e2:91:7f:72:f1:61:e1:78:60:20:4e:9d:2e:55:a8:
dd:05:36:af:94:82:76:d4:4b:56:cd:f5:d7:4b:06:be:ee:8a:
fe:9b:12:dc:c6:61:39:41:bf:60:a8:db:a2:ea:c5:24:f2:dd:
56:59:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:03 2026 by rpki-client