Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: BqXyb7+9jZAUdFGtmJzz8eKfvQQyvui3vwUR+wjq3H0=
Subject key identifier: 45:07:18:60:48:08:8A:90:D1:A9:F9:DC:FC:8D:5A:2C:48:48:BE:D1
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019CAAC63C1995A1344923B54DC739517730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 09A2
Signing time: Sun 01 Mar 2026 19:00:43 +0000
Manifest this update: Sun 01 Mar 2026 19:00:43 +0000
Manifest next update: Mon 02 Mar 2026 19:00:43 +0000
Files and hashes: 1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: bttMpKEeITX5X0GsZ8aRzIDBBqk+B8PavO+yFEMWXi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3c:19:95:a1:34:49:23:b5:4d:c7:39:51:77:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Mar 1 19:00:43 2026 GMT
Not After : Mar 2 19:00:43 2026 GMT
Subject: CN=4507186048088a90d1a9f9dcfc8d5a2c4848bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:44:de:bb:67:8e:a1:64:93:05:f9:de:f5:
d7:74:a7:ea:84:b7:f9:a6:82:60:89:ab:b7:a2:5d:
75:46:70:16:14:0e:75:34:81:87:dd:f6:a6:40:5e:
cf:82:10:b6:2d:b0:5c:60:d8:e1:f9:ac:75:bb:81:
e6:9b:8a:aa:0d:cd:9e:42:ea:d4:09:8a:51:e8:8c:
87:60:34:cf:f2:8d:15:f1:80:39:6e:b8:bd:51:a0:
c4:a8:ff:34:f2:d8:c6:73:9f:a4:6c:a4:93:e5:24:
37:e2:01:16:b6:ec:81:b7:e3:27:2e:a4:e3:68:26:
d1:cd:c0:46:46:60:63:24:54:ae:97:b9:c9:b4:6b:
2b:27:b6:d5:2c:76:2a:aa:b4:dd:40:84:96:02:33:
6e:7b:0e:72:3a:25:e1:99:8c:01:0e:db:6f:34:4b:
7c:d5:2c:07:41:7f:03:43:f4:03:02:56:d7:ca:be:
58:36:60:b2:b5:a2:b1:82:06:80:10:71:85:a2:d5:
4b:b1:d7:12:35:1f:f9:08:b9:7f:55:8e:5c:8b:27:
6a:d6:20:55:c4:3f:04:c0:bd:f6:67:da:6b:01:ad:
20:9a:6a:6a:ef:ff:3c:e5:3c:ff:a1:7c:8f:ad:9e:
72:b8:cf:02:34:3f:e7:89:ba:39:56:b0:e3:9c:f2:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:18:60:48:08:8A:90:D1:A9:F9:DC:FC:8D:5A:2C:48:48:BE:D1
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:24:5e:b1:e0:b8:57:3c:40:60:78:f0:77:cc:a2:86:18:0c:
ff:bc:78:8f:4c:5f:4e:e1:9a:43:47:30:2e:7e:47:ff:88:a7:
51:27:04:07:11:59:89:b8:f5:4e:25:8d:53:c1:c0:66:d1:6b:
d5:39:f5:60:69:66:40:94:30:d7:5f:e9:09:01:b0:b3:aa:a9:
cd:e1:9c:a7:18:50:b6:1b:d6:5d:e9:c6:55:ba:fa:73:3c:52:
eb:e2:cb:3e:46:29:9a:2d:07:09:f0:03:46:a7:b1:33:bb:f3:
72:07:06:c5:a0:74:b0:93:90:89:3c:37:28:c3:e3:55:c5:22:
a6:3d:f0:41:3d:b4:f0:67:76:7a:7f:2c:02:7c:6c:d4:79:9f:
80:83:f2:68:00:2c:04:08:d3:19:c4:cb:81:cf:f9:c7:aa:e5:
d0:1a:29:2a:8e:c4:b4:2c:b7:ff:ed:9e:ed:6d:d2:ad:84:56:
ee:63:a6:79:ed:28:90:b2:74:96:3a:99:a0:3f:55:a0:ef:fa:
9f:d1:6b:5c:12:d9:3b:54:6e:98:8e:fb:4a:38:95:75:30:44:
d8:e2:66:06:2b:98:a6:93:ac:7e:26:b3:0d:04:e1:29:fb:83:
d4:e8:4e:4b:4c:65:b9:3e:e8:4c:28:56:71:23:45:b7:cb:47:
be:83:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:57 2026 by rpki-client