Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: P52eFoXCxWySZxFpb8mMHViXSQOiBAeUWwyZrCbazbs=
Subject key identifier: 04:A6:2F:13:2F:C0:4E:88:EA:2F:F4:39:59:A6:39:19:69:13:2E:4D
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019D284DBE2F04130AF6FD3D3E62AD81DFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 09E3
Signing time: Thu 26 Mar 2026 04:01:16 +0000
Manifest this update: Thu 26 Mar 2026 04:01:16 +0000
Manifest next update: Fri 27 Mar 2026 04:01:16 +0000
Files and hashes: 1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: IlVkxFzgaDcZdJ70CewbvNY/sf3aowTIVuFOyIhccuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:be:2f:04:13:0a:f6:fd:3d:3e:62:ad:81:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Mar 26 04:01:16 2026 GMT
Not After : Mar 27 04:01:16 2026 GMT
Subject: CN=04a62f132fc04e88ea2ff43959a6391969132e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:77:d2:5b:d4:2f:7f:51:ec:9a:18:43:24:
a5:ec:23:da:24:be:8b:c3:19:17:df:71:e3:54:bf:
fa:d7:42:55:76:e4:99:d7:c2:42:3a:94:d7:f0:96:
ce:46:53:22:93:0b:d9:f2:7b:33:c0:11:4c:a1:a7:
dd:64:34:3b:21:09:81:e4:09:47:6d:3e:fc:f6:90:
d2:7d:6b:ce:e8:b3:c0:a2:53:74:bc:c0:64:0b:37:
48:27:d5:22:6e:ba:a4:11:81:96:5b:13:1c:b2:cf:
58:03:d4:cf:76:59:2c:23:e3:a9:4b:34:24:1d:85:
d0:de:49:9f:4b:9a:8f:8a:c3:05:4d:77:fa:4f:d3:
99:e1:fc:9c:3c:b6:cc:90:02:38:fe:93:6a:cc:22:
aa:50:0d:6e:9c:4c:ea:1a:66:86:db:4a:06:7f:5f:
b6:ab:51:8c:0a:df:e0:87:3c:5f:79:e1:29:e5:50:
c3:66:51:b9:b6:5d:9e:75:3e:97:35:d3:5a:0e:6f:
36:36:ee:ed:52:ee:5e:45:36:18:8c:c1:13:6e:81:
89:0d:38:92:60:aa:ee:f2:98:e1:5b:df:ac:f9:01:
76:6f:f5:14:e9:ac:dd:53:59:ef:bb:07:12:f4:03:
80:9a:83:88:38:d8:91:d1:92:6c:ae:4b:fd:48:c6:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:2F:13:2F:C0:4E:88:EA:2F:F4:39:59:A6:39:19:69:13:2E:4D
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:9f:5c:3d:22:13:a3:c9:a7:11:2c:f5:5d:10:3d:8d:e4:
6e:b3:2f:96:4d:05:0f:eb:8e:87:95:11:57:a4:63:06:c4:84:
24:3b:11:2e:b5:1d:c8:e9:70:d9:f2:8f:41:8d:bd:55:13:54:
94:9f:52:a4:e3:b9:66:bb:ee:ff:f9:95:65:f0:31:c8:b2:71:
50:f7:eb:c8:13:84:1d:b9:ec:0c:22:5a:5d:80:57:0d:32:5d:
b9:f5:ec:06:d6:0f:10:90:7a:a1:a2:8e:ea:e8:76:53:c4:45:
63:2c:fb:7d:b4:74:07:ed:f7:27:37:30:7e:fd:e2:2f:67:4b:
34:1e:30:47:83:3f:b5:68:ac:37:a0:66:ed:e9:af:93:86:d8:
3d:16:d0:50:ca:ad:f6:f1:eb:b3:f2:ae:39:88:72:0f:fb:94:
17:94:14:3a:7e:e7:d3:e1:e0:83:1d:ac:6e:b4:4a:bd:86:0b:
36:f4:bd:e3:e8:83:6b:be:09:78:c7:37:de:2e:6e:f9:74:48:
c1:53:4a:2f:e3:1b:48:41:0a:ea:2e:75:38:d1:f3:74:66:5a:
74:73:ea:03:82:fd:af:f9:a9:7e:9a:9e:7b:5f:0f:b1:59:0c:
75:c1:04:ef:b3:07:25:8e:51:33:e4:13:89:2b:ee:8f:5b:b9:
69:83:a2:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTb4vBBMK9v09PmKtgd/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjYwMzI2MDQwMTE2WhcNMjYwMzI3MDQwMTE2WjAzMTEwLwYDVQQD
EygwNGE2MmYxMzJmYzA0ZTg4ZWEyZmY0Mzk1OWE2MzkxOTY5MTMyZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI130lvUL39R7JoYQySl7CPaJL6L
wxkX33HjVL/610JVduSZ18JCOpTX8JbORlMikwvZ8nszwBFMoafdZDQ7IQmB5AlH
bT789pDSfWvO6LPAolN0vMBkCzdIJ9UibrqkEYGWWxMcss9YA9TPdlksI+OpSzQk
HYXQ3kmfS5qPisMFTXf6T9OZ4fycPLbMkAI4/pNqzCKqUA1unEzqGmaG20oGf1+2
q1GMCt/ghzxfeeEp5VDDZlG5tl2edT6XNdNaDm82Nu7tUu5eRTYYjMETboGJDTiS
YKru8pjhW9+s+QF2b/UU6azdU1nvuwcS9AOAmoOIONiR0ZJsrkv9SMbxZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASmLxMvwE6I6i/0OVmmORlpEy5NMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrefXD0i
E6PJpxEs9V0QPY3kbrMvlk0FD+uOh5URV6RjBsSEJDsRLrUdyOlw2fKPQY29VRNU
lJ9SpOO5Zrvu//mVZfAxyLJxUPfryBOEHbnsDCJaXYBXDTJdufXsBtYPEJB6oaKO
6uh2U8RFYyz7fbR0B+33Jzcwfv3iL2dLNB4wR4M/tWisN6Bm7emvk4bYPRbQUMqt
9vHrs/KuOYhyD/uUF5QUOn7n0+Hggx2sbrRKvYYLNvS94+iDa74JeMc33i5u+XRI
wVNKL+MbSEEK6i51ONHzdGZadHPqA4L9r/mpfpqee18PsVkMdcEE77MHJY5RM+QT
iSvuj1u5aYOiyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:23 2026 by rpki-client