Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File: mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier: 2dX62Btc58hDUjgGRGL9qtOudizGvicGr5KTWMS8daU=
Subject key identifier: 15:C8:BB:35:25:4E:25:FA:DA:A7:14:4B:3A:7D:03:CC:44:7E:87:E5
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 019D29CE85A0889D4ED0A512A9F3ACC1FA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number: 0E5D
Signing time: Thu 26 Mar 2026 11:01:33 +0000
Manifest this update: Thu 26 Mar 2026 11:01:33 +0000
Manifest next update: Fri 27 Mar 2026 11:01:33 +0000
Files and hashes: 1: ateB1eMixo1Q5bIvGLLCwGfK3Yk.roa (hash: hmzWGsdutZHKJhCIH0ky2UAWl4Fsdp5ElC7q6jHDT04=)
2: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: xNm9pK9vaIhz4l/1rxG09e9YhFowR+UqT6TtjuSQ7H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:85:a0:88:9d:4e:d0:a5:12:a9:f3:ac:c1:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: Mar 26 11:01:33 2026 GMT
Not After : Mar 27 11:01:33 2026 GMT
Subject: CN=15c8bb35254e25fadaa7144b3a7d03cc447e87e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:d8:9e:da:b9:3d:85:01:93:ed:72:2b:02:
2d:3c:0a:07:56:94:ba:27:9c:9a:1b:77:57:ae:c6:
5f:2b:84:f8:1e:c5:87:d0:4c:52:f4:8e:a9:81:ae:
ab:d3:dc:e6:79:09:8c:5a:0b:ac:87:8d:15:44:7d:
7f:bd:70:ef:b5:29:cb:8b:0c:3c:dc:08:ee:f6:45:
b0:a8:90:d6:ec:40:fc:94:87:58:48:80:1b:20:b9:
96:3f:fe:08:4f:08:0c:dc:13:d0:e7:c5:ed:12:88:
df:b3:60:ae:af:1d:80:ba:8b:7a:e5:ed:b9:3d:dd:
91:72:44:7a:59:a3:02:ed:4b:cb:94:9d:06:66:13:
04:15:ad:3d:b9:5d:d9:57:f8:84:b4:80:56:cb:82:
d0:4a:4f:0e:93:5a:d5:4d:6a:86:2a:f8:05:3f:c5:
fa:1d:d5:e3:ed:3b:f5:5e:a7:86:a6:fd:d0:30:95:
ec:78:9a:f2:eb:d2:e2:32:7a:20:f7:6a:ce:a4:f6:
5a:25:15:aa:0b:ae:85:e7:9f:f7:f9:3b:20:39:89:
17:fa:c7:44:49:1d:db:25:7d:fd:61:cb:82:da:b2:
65:58:a4:6b:03:19:75:29:2f:7b:30:ed:25:d8:ca:
0f:d0:a9:a9:7f:b6:5a:a3:3e:dc:f3:54:91:cb:c8:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:BB:35:25:4E:25:FA:DA:A7:14:4B:3A:7D:03:CC:44:7E:87:E5
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a8:4d:e0:e8:b1:af:b6:b5:0b:5a:ee:c5:ce:6f:d6:8d:3c:
bf:62:46:a7:37:61:0d:37:1a:22:3a:2e:3b:6b:c2:89:c1:56:
be:fc:da:17:0e:88:44:10:28:cf:b2:e5:43:e1:3d:f8:f1:fa:
e4:43:4b:c8:90:f5:87:7b:80:62:02:36:2e:32:6d:e6:c3:1e:
9a:b3:a7:62:ad:95:1f:7a:bc:a4:3b:7a:f0:72:06:4b:3b:10:
ae:fc:80:2e:d7:de:16:42:d8:59:1e:27:0f:d2:8b:fd:95:02:
a2:65:ce:89:3b:ca:58:1b:f7:13:67:8c:47:b1:6e:4f:c0:52:
cb:19:97:55:4a:df:b5:47:46:4a:98:9c:06:98:c2:ce:51:fa:
ef:82:70:d9:21:5c:3a:df:39:f2:d4:d5:34:f6:99:c4:64:d0:
60:68:96:6b:a2:76:c1:4f:53:79:02:3f:72:82:ab:ad:ca:83:
12:00:99:b4:96:52:63:6f:9a:b8:16:6e:6d:d5:e3:1f:b8:c5:
0d:e2:b8:21:35:8c:50:b9:db:38:8c:93:0f:55:98:be:f0:9a:
ab:44:bb:7f:d2:ae:13:09:77:41:7c:20:2d:20:9f:f5:dc:ec:
63:ef:27:ca:c8:58:84:77:ab:70:71:64:ef:34:ce:fb:90:0a:
da:57:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:46:08 2026 by rpki-client