Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: 1m8kpHAPip7me13rouekt4Dz8uSyCwDR4gVFfv5x50g=
Subject key identifier: 40:F9:07:FF:63:C1:00:66:8E:AA:A2:D1:F4:B6:70:D0:72:43:75:F1
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019D273B06235A2E7111433411CBBF59BC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0DE1
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: U6d5jA1FBO4X6vusoQ+/oDRtGGTOyoO+XwCqTBm6eiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:06:23:5a:2e:71:11:43:34:11:cb:bf:59:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=40f907ff63c100668eaaa2d1f4b670d0724375f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:2b:a1:de:69:ab:f7:86:71:1b:b8:e2:e9:
ec:68:86:c4:e7:56:b7:15:4b:c1:b2:60:84:74:a2:
d5:9d:a3:74:39:25:5d:cd:60:5b:90:44:16:e6:3d:
df:0d:0f:f0:eb:44:8e:47:62:de:93:78:0f:c4:c1:
5b:8d:fc:2e:63:86:d4:11:e9:1f:b1:9c:28:b2:7e:
00:d2:d9:77:b0:ff:7f:61:f0:32:36:46:9e:e7:a7:
6f:f8:1a:05:0b:b2:ae:0b:3d:cb:0a:79:e6:e5:03:
23:19:c9:62:7d:ac:f7:ea:6c:45:32:17:d2:71:d2:
db:91:16:09:ee:45:69:8e:85:6d:1f:60:5b:b6:0e:
73:28:5d:d6:ff:7b:04:8e:50:c0:b3:78:78:89:58:
d1:83:c1:8b:15:bd:9e:ae:03:1d:3b:13:53:4b:b3:
8c:3f:3c:d6:4c:fa:a7:ec:55:9b:e8:13:4a:10:19:
97:11:30:0e:32:d3:bc:20:e2:df:a7:0d:3d:72:b6:
33:93:8e:13:e4:dc:af:e1:01:38:67:cf:da:04:65:
3e:62:1a:c9:84:d3:eb:a7:14:d6:ef:6d:ab:30:f9:
2f:ed:b0:f2:8f:68:d6:0d:05:8e:a1:d4:fc:47:48:
0c:02:f7:5a:55:1d:30:08:8f:8a:9b:32:d8:d1:fa:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:07:FF:63:C1:00:66:8E:AA:A2:D1:F4:B6:70:D0:72:43:75:F1
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:25:ee:de:4e:b3:d3:e1:fe:40:9f:e2:8c:4b:99:70:3c:d1:
9d:b2:18:70:0e:b9:25:4e:a1:1d:76:9d:cf:18:74:3f:af:3e:
b3:13:6c:e7:04:6a:80:8d:f8:a4:81:a8:2c:f1:04:2d:34:41:
e8:63:e4:a4:87:52:76:46:bb:83:a3:49:2d:2a:96:14:26:de:
fe:9c:60:c6:21:90:b1:0d:68:c0:62:1a:b1:e0:4d:5c:9e:a9:
96:ec:84:3a:b0:25:ac:27:3f:fc:6a:96:1c:8a:b4:44:45:b3:
d9:80:bd:10:62:cf:10:2f:07:77:de:7c:69:6c:5a:7f:2d:c7:
80:7f:bc:4e:7e:4c:a6:54:70:37:4f:58:eb:37:61:7f:93:0c:
1b:e1:aa:9f:60:33:3f:d7:ca:34:d7:9a:58:17:1f:8b:f4:8a:
38:cc:03:16:a5:20:53:f1:57:84:7b:45:3e:9c:f9:55:fe:24:
0d:87:6f:bd:33:99:8a:62:23:7b:8d:fc:34:bc:5a:eb:41:d7:
b7:ce:d4:25:b6:2a:16:fd:cf:d4:e1:6b:48:52:97:5f:b9:59:
4d:0b:16:b2:38:1b:09:67:d1:ed:c6:02:14:bf:37:c4:bd:22:
10:90:ee:42:4f:1d:6a:91:ac:20:6d:df:40:33:69:ae:dc:72:
3b:21:15:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOwYjWi5xEUM0Ecu/Wbw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjYwMzI1MjMwMTEyWhcNMjYwMzI2MjMwMTEyWjAzMTEwLwYDVQQD
Eyg0MGY5MDdmZjYzYzEwMDY2OGVhYWEyZDFmNGI2NzBkMDcyNDM3NWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgcrod5pq/eGcRu44unsaIbE51a3
FUvBsmCEdKLVnaN0OSVdzWBbkEQW5j3fDQ/w60SOR2Lek3gPxMFbjfwuY4bUEekf
sZwosn4A0tl3sP9/YfAyNkae56dv+BoFC7KuCz3LCnnm5QMjGclifaz36mxFMhfS
cdLbkRYJ7kVpjoVtH2Bbtg5zKF3W/3sEjlDAs3h4iVjRg8GLFb2ergMdOxNTS7OM
PzzWTPqn7FWb6BNKEBmXETAOMtO8IOLfpw09crYzk44T5Nyv4QE4Z8/aBGU+YhrJ
hNPrpxTW722rMPkv7bDyj2jWDQWOodT8R0gMAvdaVR0wCI+KmzLY0fp/uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED5B/9jwQBmjqqi0fS2cNByQ3XxMB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyXu3k6z
0+H+QJ/ijEuZcDzRnbIYcA65JU6hHXadzxh0P68+sxNs5wRqgI34pIGoLPEELTRB
6GPkpIdSdka7g6NJLSqWFCbe/pxgxiGQsQ1owGIaseBNXJ6pluyEOrAlrCc//GqW
HIq0REWz2YC9EGLPEC8Hd958aWxafy3HgH+8Tn5MplRwN09Y6zdhf5MMG+Gqn2Az
P9fKNNeaWBcfi/SKOMwDFqUgU/FXhHtFPpz5Vf4kDYdvvTOZimIje438NLxa60HX
t87UJbYqFv3P1OFrSFKXX7lZTQsWsjgbCWfR7cYCFL83xL0iEJDuQk8dapGsIG3f
QDNprtxyOyEVJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:32 2026 by rpki-client