Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: OkeMoGQOFzr67/N6IZdOsldIS2ZfyvzjdwW7kvKQiFs=
Subject key identifier: D4:E8:E6:41:46:F5:42:EF:51:3C:29:96:30:20:99:16:F9:DA:BF:9C
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019F9700C4A3B93F367D19E039186D8AEF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0F24
Signing time: Sat 25 Jul 2026 02:00:37 +0000
Manifest this update: Sat 25 Jul 2026 02:00:37 +0000
Manifest next update: Sun 26 Jul 2026 02:00:37 +0000
Files and hashes: 1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: iaJuF20FOkVntFfJ/oKtQPHhyzJRmW781WuWs2NSWew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:00:c4:a3:b9:3f:36:7d:19:e0:39:18:6d:8a:ef:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Jul 25 02:00:37 2026 GMT
Not After : Jul 26 02:00:37 2026 GMT
Subject: CN=d4e8e64146f542ef513c299630209916f9dabf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:42:bd:a7:88:20:b4:c1:2b:fe:09:d4:16:
be:a5:70:9e:d8:65:33:60:67:e7:12:38:e8:47:1d:
1f:19:e4:af:ae:1f:2d:b5:27:ef:b8:8b:67:11:62:
c2:c0:da:26:c2:87:24:16:06:10:d4:4a:f5:13:6e:
d1:a0:74:33:a0:c4:39:b8:60:c8:fe:8f:e6:5c:96:
7a:99:15:aa:7e:4b:69:4a:f5:20:6f:dd:42:da:92:
83:58:5a:60:f2:d4:1a:2e:f8:93:de:a0:0c:2e:e1:
52:60:82:be:92:fe:0a:2c:73:8e:72:fd:5f:ff:d4:
e1:86:b5:50:c3:84:54:29:a6:bb:a9:97:16:77:8b:
1f:ec:a3:62:ca:98:7e:a2:57:3a:01:be:46:ed:18:
45:b3:43:95:2b:42:66:70:a0:a9:92:2a:ff:23:24:
29:31:2a:75:16:17:0a:d1:04:89:f6:f2:76:f7:49:
1b:22:bd:f3:4f:bd:07:88:10:35:00:f1:38:c0:f9:
e2:61:ab:f9:fd:9d:6b:82:ae:f9:21:76:81:62:19:
8d:0b:05:80:58:ce:5e:99:84:a8:f1:be:36:d9:a8:
b4:c1:3c:b0:c4:eb:0e:96:94:7f:99:2f:13:d6:38:
a8:36:0e:49:1f:ef:9d:8c:91:38:12:53:e7:b5:bf:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:E6:41:46:F5:42:EF:51:3C:29:96:30:20:99:16:F9:DA:BF:9C
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:51:4a:d5:b4:1d:b4:6d:5c:4f:21:39:ce:d1:56:ed:1e:b1:
ac:40:b6:a2:9d:5e:71:43:2a:ce:9b:90:5e:32:e5:42:ad:3a:
4d:66:38:ec:8a:24:8b:3b:83:99:26:3b:5d:19:7a:ed:f0:37:
73:58:8e:bd:71:50:18:41:43:17:04:ac:a3:8b:cb:ea:e3:11:
e1:74:e8:a3:56:23:20:3b:4f:fb:16:8b:20:d0:9a:d8:71:b0:
cd:a3:e0:4b:7a:28:ad:19:0f:28:a5:9a:d8:cb:65:81:46:3c:
6a:4d:33:20:85:a3:66:c4:32:c6:bf:dc:74:9c:0b:6f:54:62:
df:62:7d:9a:24:31:4a:a3:40:08:04:e0:3a:4f:fe:21:c9:9a:
9c:f2:53:8d:a0:1a:98:75:53:20:39:62:12:09:f4:9f:eb:a0:
55:28:48:81:ee:d0:b7:bf:77:a1:17:dc:8d:8a:7c:40:84:7d:
86:cd:7c:cc:2f:8d:3c:60:60:74:f4:68:80:97:1a:fb:3e:42:
a5:c1:52:4f:27:23:7c:43:29:4c:89:a4:c8:cf:55:19:30:2d:
cf:5e:b2:7c:3e:a9:ab:5b:b6:e4:68:7a:f9:66:75:f9:13:57:
c0:fd:55:25:f3:47:46:85:f0:ae:72:6e:58:fb:e6:3f:1b:25:
4a:90:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:12:24 2026 by rpki-client