Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: rjLuRLm9BVGAd+df3BEZ3UTEBrJOuV0sUf1yaggvGBg=
Subject key identifier: B9:BB:2D:CA:B7:87:5A:AB:24:41:96:E4:BA:24:F5:9A:A8:66:B3:EB
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019CAA219D1178D1EAC891AA6F9F5520EC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 0930
Signing time: Sun 01 Mar 2026 16:00:55 +0000
Manifest this update: Sun 01 Mar 2026 16:00:55 +0000
Manifest next update: Mon 02 Mar 2026 16:00:55 +0000
Files and hashes: 1: aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa (hash: 3bBdTpTJvuXiahizaCJvEqZFOKH3JQrv3q1L3oXewkc=)
2: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: R3fVhgFWgjk3n4+RMFeD37v3Zze7jhPusq60VOJRfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:9d:11:78:d1:ea:c8:91:aa:6f:9f:55:20:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Mar 1 16:00:55 2026 GMT
Not After : Mar 2 16:00:55 2026 GMT
Subject: CN=b9bb2dcab7875aab244196e4ba24f59aa866b3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:f9:fb:e5:e0:47:90:7a:61:2c:af:78:be:
7e:52:6e:2f:8a:2b:ea:2b:7b:13:7a:06:99:d4:78:
c7:c0:06:ee:54:6d:77:68:8b:fd:40:32:7d:74:0d:
6d:4e:49:4f:02:47:14:55:ed:31:cc:15:8c:a1:80:
56:71:89:35:04:33:dd:9e:cd:ac:b1:68:90:6b:2c:
7c:e7:1c:f1:81:c0:39:d9:eb:31:c1:e8:23:f8:20:
e7:9e:42:fa:f5:87:f7:69:aa:fc:dc:49:ea:eb:aa:
a9:48:62:87:25:ff:b1:66:e5:d3:6e:4e:a9:19:b3:
9f:e7:47:11:5f:73:1b:d2:34:c1:84:d9:ff:9b:4a:
7b:f9:31:41:71:e6:a4:13:21:92:aa:9f:a8:c8:a4:
d9:1c:d5:8a:c6:a1:d1:c4:89:f7:2b:44:25:82:b8:
32:42:58:b4:74:fb:ea:37:52:af:59:15:f0:a7:40:
1d:b2:b5:74:dd:d1:17:c3:40:c9:6e:43:a8:80:72:
be:47:dd:75:93:4a:81:d8:f1:e9:23:c6:16:f4:73:
ae:80:ee:9a:64:44:13:52:80:0c:39:c8:db:96:b7:
4e:39:6b:35:f6:95:3f:8f:a8:b6:9c:42:36:64:d2:
50:4e:d8:a5:f5:24:3b:c1:bf:16:ca:4d:5f:20:4c:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:2D:CA:B7:87:5A:AB:24:41:96:E4:BA:24:F5:9A:A8:66:B3:EB
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:19:58:39:9b:c9:d0:49:26:76:ea:88:4f:da:f2:6f:cc:
ec:ea:a1:7c:16:62:2e:41:57:24:16:79:85:2b:b3:56:bc:ff:
3e:3d:bf:54:a6:86:eb:88:9f:f4:e7:60:02:b0:bf:f7:29:79:
1b:5c:a4:84:d2:7c:98:14:d0:40:db:2e:c0:b4:9b:83:34:32:
52:b9:bb:6a:d3:28:f0:70:30:f5:4f:26:a1:3e:cc:b7:8b:37:
e5:5f:56:9f:28:43:db:f2:bd:5d:02:34:52:b0:b5:ec:bf:13:
75:eb:85:80:55:61:a7:da:9d:56:b5:2a:31:d3:66:b1:07:e2:
b5:2e:7c:4c:42:ba:86:4f:a9:76:a5:a3:c2:f3:6f:9a:d4:56:
11:17:15:34:58:7c:23:cb:a4:52:3e:a6:4f:b9:50:2e:7e:9b:
3d:cc:02:9f:73:3b:91:71:ab:96:42:2e:c8:b4:07:44:f6:54:
13:b5:82:81:11:fc:be:dc:2d:e6:9b:c9:a1:42:5c:fd:38:7d:
ba:e6:53:19:7b:fd:0c:f3:a2:8d:54:8f:27:33:f8:89:cb:f0:
68:91:84:68:ea:9d:3a:2d:cd:7e:e6:3b:a0:af:10:53:7d:1d:
ec:d2:a8:db:5c:1a:a8:e7:e4:68:9c:16:ba:e5:34:e1:86:39:
13:30:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:07 2026 by rpki-client