Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
File: mBiOFp92WtIVgq7onkQrqtaMWnA.mft (raw, json)
Hash identifier: 4lHBSKxEp+S42WtlBx0Qber3fvggJK64vi7rZwXmxh4=
Subject key identifier: AB:63:E5:C4:8A:14:DF:00:CE:18:9C:4C:FD:43:60:95:01:95:99:EC
Authority key identifier: 98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
Certificate issuer: /CN=98188e169f765ad21582aee89e442baad68c5a70
Certificate serial: 019D33E3E14D9D3CDA1388BEFA34D8965F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
Manifest number: 37
Signing time: Sat 28 Mar 2026 10:01:05 +0000
Manifest this update: Sat 28 Mar 2026 10:01:05 +0000
Manifest next update: Sun 29 Mar 2026 10:01:05 +0000
Files and hashes: 1: CtVoaMBCLdM9BHt25HaZqMyTPK4.roa (hash: 5PXDA9U5fF7S6/XA+XWt3mI39Li4EcITN+bSwQsIUZc=)
2: mBiOFp92WtIVgq7onkQrqtaMWnA.crl (hash: 9U41BTirMFRPHhpZD+hblGJDiZPxQoLjqEl16t/W8cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:e1:4d:9d:3c:da:13:88:be:fa:34:d8:96:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98188e169f765ad21582aee89e442baad68c5a70
Validity
Not Before: Mar 28 10:01:05 2026 GMT
Not After : Mar 29 10:01:05 2026 GMT
Subject: CN=ab63e5c48a14df00ce189c4cfd436095019599ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:4f:78:bb:28:8d:4f:ed:0a:42:2c:b1:86:
c7:cf:f2:68:8c:94:7d:b6:c5:95:3a:51:f4:1e:11:
5a:e8:2e:a6:87:33:65:24:da:a4:a6:d6:f8:dd:56:
6f:f4:5c:76:03:bf:b6:49:08:ca:fa:3b:cd:39:dd:
e1:f9:10:a0:b0:3d:56:c1:8d:4e:ff:36:aa:3d:4a:
7c:ca:75:8b:19:1d:87:a3:2d:70:a1:8c:d1:b7:ff:
81:1c:d3:22:0f:2d:c3:b1:b2:ee:22:65:1d:40:92:
ce:56:fd:50:95:e9:ae:0e:e5:9f:d3:86:77:5e:52:
95:31:65:b1:7a:32:2f:2f:e1:bb:14:ce:9f:26:5f:
72:c7:77:06:d5:c9:d9:dc:eb:9f:de:6c:50:ae:d3:
69:1a:4c:d5:ff:58:1d:c8:35:f7:9c:5c:48:72:d5:
eb:0c:f0:63:ef:f7:71:aa:9e:92:f2:14:04:26:78:
37:a1:7d:34:6e:c7:d0:e5:a6:54:6b:9c:7c:5a:06:
bf:dd:d6:7d:b4:dd:f4:67:fc:e1:d2:fb:12:07:e3:
f8:95:f4:b6:c8:bb:15:05:3b:59:fd:d4:04:41:93:
bb:cb:50:cb:21:9a:52:08:9d:78:fa:2a:8e:b2:0a:
53:8e:d2:73:d7:f2:2d:75:6b:64:a4:77:bf:ab:72:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:E5:C4:8A:14:DF:00:CE:18:9C:4C:FD:43:60:95:01:95:99:EC
X509v3 Authority Key Identifier:
keyid:98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4c:a8:18:06:f5:c7:58:bc:e5:20:30:44:fc:76:23:c4:5f:
e4:6f:3e:93:a8:fb:af:d8:7b:23:17:6a:cc:c9:54:ef:1c:aa:
90:4d:68:dc:e8:40:8f:45:8e:8d:4b:44:b6:af:8e:fe:3b:31:
1d:6a:15:96:b0:09:33:c9:a6:6d:b4:a0:9e:a4:c5:b5:19:9b:
87:61:6f:9f:9b:ab:10:7e:d1:1c:44:56:45:1e:43:68:71:42:
46:d9:78:32:d0:be:e2:97:0b:ca:a6:8e:15:5f:70:60:21:2b:
24:c4:4d:c2:60:eb:de:9e:1b:3e:ce:bf:37:1d:b9:1b:1f:d3:
f7:dc:cc:c6:67:0d:a2:9c:ba:72:96:9c:1d:26:2f:bc:2b:e4:
b3:bd:9f:87:8c:39:b2:2a:3d:52:eb:5c:8d:e4:3b:d6:51:9b:
26:ce:6e:3a:2f:54:5d:3e:eb:ed:fd:c7:40:47:81:37:5d:d1:
b8:01:9a:36:5a:e5:49:c8:ff:6e:37:bc:a1:53:2c:9c:dc:4d:
ce:cb:cf:ee:b8:c5:3f:a0:ca:56:21:2a:ed:d2:9f:e0:ff:0a:
65:e2:a9:45:f7:b8:af:27:8b:50:d3:7a:ab:75:ef:32:14:17:
b1:d6:3a:f9:67:6f:de:3b:cf:f7:8d:e7:1c:54:60:ea:74:56:
53:f2:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:32 2026 by rpki-client