Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: 5tzVn1kfDTKlGgJzmCt82FGgQVYgtVZG4jiO4vlR+jg=
Subject key identifier: 60:AC:AF:27:6F:5C:EC:2A:F3:E5:EB:31:C5:15:70:73:32:54:2E:95
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 01A0DF4E945A68776EED1F631BD27B44E6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0FCE
Signing time: Sat 26 Sep 2026 20:01:03 +0000
Manifest this update: Sat 26 Sep 2026 20:01:03 +0000
Manifest next update: Sun 27 Sep 2026 20:01:03 +0000
Files and hashes: 1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: zRf3DNL2f78nwraKvBPLa5+RWIJUd7CzZ/ZynFwAhRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:94:5a:68:77:6e:ed:1f:63:1b:d2:7b:44:e6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Sep 26 20:01:03 2026 GMT
Not After : Sep 27 20:01:03 2026 GMT
Subject: CN=60acaf276f5cec2af3e5eb31c515707332542e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:e0:74:ff:ca:d4:40:c3:4a:a9:cc:21:1d:
e1:f9:c7:3c:2f:74:44:72:2b:7b:1e:08:33:c6:d5:
95:49:fe:f7:f9:4a:42:dc:37:52:a6:36:ff:60:db:
2a:d7:f0:88:1f:22:31:24:d4:66:85:16:3d:b6:db:
43:96:44:f8:84:a8:f4:2d:21:1d:5d:22:55:4c:42:
62:71:d0:66:50:b9:d9:52:30:ce:59:8d:f5:10:57:
45:d8:9b:73:30:7f:22:a3:1b:d0:9f:85:3b:6b:df:
0e:45:87:68:72:53:7a:35:35:82:2a:e6:03:08:e6:
15:5c:46:ca:c4:87:cd:49:cf:8b:de:53:bd:4d:cf:
01:2f:17:ea:40:ef:7a:2b:59:39:24:5e:52:e8:89:
db:8e:4d:7f:18:61:e5:4c:b9:5d:08:c2:16:64:b1:
c0:fb:ec:97:22:fb:d5:59:66:24:27:63:b8:d1:86:
7d:b7:5f:37:d8:9a:fc:f6:98:0f:db:dd:25:e1:3b:
e3:ec:d6:3f:87:69:af:8a:af:61:e6:57:3b:81:50:
ea:db:e2:20:1e:4c:a5:f2:c3:f0:ce:03:dc:62:fe:
fa:29:d4:7f:75:3c:06:bf:47:58:98:94:2e:60:7b:
a2:db:99:b7:ed:94:c4:ce:dd:68:84:d2:de:bd:a3:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:AF:27:6F:5C:EC:2A:F3:E5:EB:31:C5:15:70:73:32:54:2E:95
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:72:fa:05:d5:58:6d:7f:80:28:ed:52:93:0d:49:28:d7:
b1:9e:50:a7:45:a7:4f:b8:0b:69:33:04:2e:0e:2b:93:b4:bd:
f8:66:a7:e0:f9:1e:f8:20:b6:07:0a:ad:e6:d1:26:30:47:96:
84:f7:3c:c0:21:7a:4d:3b:07:a2:70:97:4f:8b:cb:83:6c:9f:
d5:9b:f1:39:d6:24:c0:46:37:0c:fc:c4:ef:95:6c:06:e3:9c:
de:84:2b:df:98:90:06:cd:2b:61:69:8d:0f:75:65:40:16:3f:
42:12:49:ee:ef:ad:4d:b7:9e:5c:0e:31:30:ba:4f:11:31:74:
9a:ac:2c:d6:5c:59:91:4e:21:34:45:46:33:f3:91:0c:7c:d8:
38:05:db:42:cf:a6:c6:85:1a:a5:d3:3f:ca:7f:ff:88:39:0f:
d8:f9:9f:d8:35:d9:ba:ef:31:51:3d:2f:14:5c:41:62:50:b4:
dd:db:25:78:1a:3e:da:5d:95:56:e5:f9:93:b7:56:dc:96:d8:
8c:9d:4e:2e:8c:10:b7:bb:ce:24:59:05:2d:1d:24:c1:df:d6:
09:2c:61:e7:ca:af:09:73:15:55:5e:22:e2:92:29:bf:20:e7:
fc:a6:26:1c:a2:9f:30:ee:39:cf:1c:4d:d6:6f:ef:00:96:1e:
77:ba:7d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfTpRaaHdu7R9jG9J7ROb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjYwOTI2MjAwMTAzWhcNMjYwOTI3MjAwMTAzWjAzMTEwLwYDVQQD
Eyg2MGFjYWYyNzZmNWNlYzJhZjNlNWViMzFjNTE1NzA3MzMyNTQyZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiDgdP/K1EDDSqnMIR3h+cc8L3RE
cit7HggzxtWVSf73+UpC3DdSpjb/YNsq1/CIHyIxJNRmhRY9tttDlkT4hKj0LSEd
XSJVTEJicdBmULnZUjDOWY31EFdF2JtzMH8ioxvQn4U7a98ORYdoclN6NTWCKuYD
COYVXEbKxIfNSc+L3lO9Tc8BLxfqQO96K1k5JF5S6Inbjk1/GGHlTLldCMIWZLHA
++yXIvvVWWYkJ2O40YZ9t1832Jr89pgP290l4Tvj7NY/h2mviq9h5lc7gVDq2+Ig
Hkyl8sPwzgPcYv76KdR/dTwGv0dYmJQuYHui25m37ZTEzt1ohNLevaNdFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCsrydvXOwq8+XrMcUVcHMyVC6VMB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMK5y+gXV
WG1/gCjtUpMNSSjXsZ5Qp0WnT7gLaTMELg4rk7S9+Gan4Pke+CC2Bwqt5tEmMEeW
hPc8wCF6TTsHonCXT4vLg2yf1ZvxOdYkwEY3DPzE75VsBuOc3oQr35iQBs0rYWmN
D3VlQBY/QhJJ7u+tTbeeXA4xMLpPETF0mqws1lxZkU4hNEVGM/ORDHzYOAXbQs+m
xoUapdM/yn//iDkP2Pmf2DXZuu8xUT0vFFxBYlC03dsleBo+2l2VVuX5k7dW3JbY
jJ1OLowQt7vOJFkFLR0kwd/WCSxh58qvCXMVVV4i4pIpvyDn/KYmHKKfMO45zxxN
1m/vAJYed7p9Wg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:19:48 2026 by rpki-client