Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
File: mBFkq3lqrTz68oOQ9k3ew92W0pA.mft (raw, json)
Hash identifier: RbzPHA47TKP26ictQ+wQlfZOKacnlGTCoEIiFR3zxzQ=
Subject key identifier: 2C:D6:37:EA:37:B7:01:8D:94:42:D0:E7:42:42:6A:F7:2B:DA:5F:87
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 019FAA8762523FFA75F707228E9347C5A0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
Manifest number: 51
Signing time: Tue 28 Jul 2026 21:00:27 +0000
Manifest this update: Tue 28 Jul 2026 21:00:27 +0000
Manifest next update: Wed 29 Jul 2026 21:00:27 +0000
Files and hashes: 1: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (hash: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=)
2: mBFkq3lqrTz68oOQ9k3ew92W0pA.crl (hash: vYlkGSI0spo5ReQ8SMAKFpcUOnnZdhlzPxHBxEtFTFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:62:52:3f:fa:75:f7:07:22:8e:93:47:c5:a0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Jul 28 21:00:27 2026 GMT
Not After : Jul 29 21:00:27 2026 GMT
Subject: CN=2cd637ea37b7018d9442d0e742426af72bda5f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:67:c1:01:c1:4e:7c:0e:cc:c8:9b:72:16:
57:dc:22:ab:69:a3:fb:fe:5f:6b:43:c9:d9:55:72:
60:c4:f1:02:69:7f:ea:88:79:9c:b1:24:8a:93:5e:
e1:5f:b6:b6:9c:e1:8e:be:e8:95:4a:27:a3:c7:76:
a2:58:72:85:c5:cc:85:84:15:30:fa:90:bc:cc:58:
eb:85:0c:e4:94:01:8e:45:41:d7:70:44:a4:99:41:
c2:36:a1:29:e8:57:a0:cf:16:df:33:64:cc:e3:01:
96:af:f1:86:25:ce:7b:33:3c:70:c5:37:95:01:a3:
a5:d9:a3:0d:64:17:71:06:b5:17:ac:0a:1a:cd:e8:
3c:eb:b5:22:dc:4a:ec:58:6a:1c:01:d8:8b:6b:0e:
d2:38:86:98:1e:52:5d:b1:4c:51:be:12:1e:e2:82:
d2:15:bd:35:91:6e:39:4c:e1:19:a1:87:1b:43:93:
b7:d0:2c:51:ff:b2:85:e4:b6:84:58:53:4d:ce:5a:
33:3f:b5:1d:b4:a2:f1:f4:98:f6:e8:b4:57:6c:30:
f8:25:12:56:1d:66:82:d8:80:61:92:45:1c:eb:8c:
b7:b4:cb:a6:1a:04:ed:25:49:33:a1:07:87:af:08:
ed:21:5e:3e:0a:4f:1c:dc:1c:cb:01:81:0b:b0:c5:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D6:37:EA:37:B7:01:8D:94:42:D0:E7:42:42:6A:F7:2B:DA:5F:87
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:48:3e:dc:15:a0:f5:e5:4c:7a:2b:c3:49:aa:65:60:d6:
fa:47:03:d1:e1:29:14:d1:46:a5:c0:e1:f1:37:9b:96:af:06:
bf:8f:08:f0:ae:4b:59:12:f3:0d:4a:2d:c8:fc:34:1d:0f:b6:
36:5d:7f:5f:bd:87:ac:ca:fc:a9:6c:cc:a9:6a:50:a3:7b:d8:
9e:0a:bb:36:9b:fc:e4:ea:3f:2d:84:71:cc:e6:69:4a:3b:40:
19:a3:79:ee:48:31:d1:21:f0:f2:ae:1e:22:83:63:f8:ca:08:
38:c4:2b:2a:8c:61:8b:fc:66:41:97:6b:d8:c6:6f:b9:2e:6a:
20:79:a9:66:3e:61:98:0d:f4:5e:8b:46:f5:00:61:3f:62:69:
24:9e:0f:16:16:cd:57:d8:90:a7:11:a0:03:56:a5:2f:6e:44:
b1:ee:a8:6c:3c:5f:f1:54:85:36:32:36:70:4d:ce:fd:55:fc:
6c:74:53:5e:ef:6d:07:1d:b9:8e:11:98:ab:38:e9:1c:63:fd:
c7:fd:1a:22:f5:37:3f:92:d6:0a:d8:75:17:50:60:dd:4c:46:
a5:3c:18:94:86:f6:6c:e2:50:49:d0:60:a6:40:6f:c4:36:e5:
92:f4:0b:2e:ec:40:d6:d4:6e:f6:16:49:df:fb:0d:39:6c:dc:
64:c9:8b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh2JSP/p19wcijpNHxaDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE2NGFiNzk2YWFkM2NmYWYyODM5MGY2NGRkZWMzZGQ5
NmQyOTAwHhcNMjYwNzI4MjEwMDI3WhcNMjYwNzI5MjEwMDI3WjAzMTEwLwYDVQQD
EygyY2Q2MzdlYTM3YjcwMThkOTQ0MmQwZTc0MjQyNmFmNzJiZGE1Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qtnwQHBTnwOzMibchZX3CKraaP7
/l9rQ8nZVXJgxPECaX/qiHmcsSSKk17hX7a2nOGOvuiVSiejx3aiWHKFxcyFhBUw
+pC8zFjrhQzklAGORUHXcESkmUHCNqEp6FegzxbfM2TM4wGWr/GGJc57MzxwxTeV
AaOl2aMNZBdxBrUXrAoazeg867Ui3ErsWGocAdiLaw7SOIaYHlJdsUxRvhIe4oLS
Fb01kW45TOEZoYcbQ5O30CxR/7KF5LaEWFNNzlozP7UdtKLx9Jj26LRXbDD4JRJW
HWaC2IBhkkUc64y3tMumGgTtJUkzoQeHrwjtIV4+Ck8c3BzLAYELsMXVgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzWN+o3twGNlELQ50JCavcr2l+HMB8GA1UdIwQY
MBaAFJgRZKt5aq08+vKDkPZN3sPdltKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJGa3EzbHFyVHo2OG9PUTlrM2V3OTJXMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jYzAzNjQtZGExYi00M2IzLTg2NWUt
ZmRlYTJmY2VhMTQ0LzEvbUJGa3EzbHFyVHo2OG9PUTlrM2V3OTJXMHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jYzAzNjQtZGExYi00M2IzLTg2NWUtZmRlYTJmY2VhMTQ0
LzEvbUJGa3EzbHFyVHo2OG9PUTlrM2V3OTJXMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAdIPtwV
oPXlTHorw0mqZWDW+kcD0eEpFNFGpcDh8Teblq8Gv48I8K5LWRLzDUotyPw0HQ+2
Nl1/X72HrMr8qWzMqWpQo3vYngq7Npv85Oo/LYRxzOZpSjtAGaN57kgx0SHw8q4e
IoNj+MoIOMQrKoxhi/xmQZdr2MZvuS5qIHmpZj5hmA30XotG9QBhP2JpJJ4PFhbN
V9iQpxGgA1alL25Ese6obDxf8VSFNjI2cE3O/VX8bHRTXu9tBx25jhGYqzjpHGP9
x/0aIvU3P5LWCth1F1Bg3UxGpTwYlIb2bOJQSdBgpkBvxDblkvQLLuxA1tRu9hZJ
3/sNOWzcZMmLkg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:16:37 2026 by rpki-client