Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File: mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier: omraRUvHoXntL0jyKoqmNBdXpjm+DjE9Avyr8G0lWiI=
Subject key identifier: 64:C3:CC:8A:AE:A3:42:2A:AE:22:09:1E:CC:75:AB:A3:A3:35:3E:46
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 019CAC4792B639C29FD3E81FAA33DFB8612F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number: 0E1C
Signing time: Mon 02 Mar 2026 02:01:37 +0000
Manifest this update: Mon 02 Mar 2026 02:01:37 +0000
Manifest next update: Tue 03 Mar 2026 02:01:37 +0000
Files and hashes: 1: ateB1eMixo1Q5bIvGLLCwGfK3Yk.roa (hash: hmzWGsdutZHKJhCIH0ky2UAWl4Fsdp5ElC7q6jHDT04=)
2: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: JfDzTj7I/+4JW+fMc0/P1794R9qkOmNJ1m+7Hgf44hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:92:b6:39:c2:9f:d3:e8:1f:aa:33:df:b8:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: Mar 2 02:01:37 2026 GMT
Not After : Mar 3 02:01:37 2026 GMT
Subject: CN=64c3cc8aaea3422aae22091ecc75aba3a3353e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:f2:ca:e9:6e:a8:66:d4:31:65:8d:0a:af:
7c:b3:63:54:92:96:f5:e2:88:c6:f3:fd:dc:d6:58:
57:f7:db:51:a7:6d:bf:a5:e5:9f:61:68:9d:cd:65:
3e:a8:d5:15:ed:1c:e5:24:97:ea:83:3d:1c:de:dc:
51:8a:d3:98:c4:d2:ba:74:ab:05:b4:b5:48:79:a1:
20:16:a0:86:20:84:b6:04:7d:a6:58:9c:13:2c:3c:
d0:c6:15:83:ac:09:27:8e:96:16:cc:76:71:a2:d2:
4f:14:24:19:0d:a7:c6:2f:ab:75:a1:0c:3a:c6:78:
90:13:70:10:1c:f0:10:17:fe:ab:33:8c:10:9c:d8:
4e:d3:20:bf:f9:b5:5c:a4:e8:12:9c:04:07:52:4f:
20:78:c4:f4:1a:a3:48:ca:60:a4:c2:3b:6e:b1:77:
fb:00:0e:ec:e3:03:1d:d2:32:47:7d:6b:44:ee:9d:
f4:b3:b1:c6:59:30:3d:1b:11:80:c4:d7:a3:28:26:
bb:a6:36:25:e4:a1:c5:21:94:45:0b:9f:aa:d3:b1:
87:a3:4d:05:73:f8:85:b1:6d:c8:13:05:77:d8:cf:
06:17:71:8f:ff:07:e7:c9:55:57:87:10:0b:25:53:
a4:e6:62:9c:46:b3:0e:61:1b:01:67:9e:7c:15:3e:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:CC:8A:AE:A3:42:2A:AE:22:09:1E:CC:75:AB:A3:A3:35:3E:46
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:91:d2:ad:dc:00:8a:81:0f:41:54:ea:98:b7:24:7b:33:a3:
a3:95:76:31:64:6e:24:a8:1f:51:46:1a:f2:7d:d1:28:ad:e5:
1d:ce:3b:f3:71:f6:aa:68:b2:22:47:c5:be:0a:51:a8:05:f7:
cb:14:96:93:ce:94:9e:6f:32:98:c4:b4:85:9f:91:e5:fb:dd:
f6:f7:26:53:19:dc:3a:32:ff:32:db:89:58:4c:56:a5:d0:69:
e1:dc:0f:d5:2e:75:6f:75:9d:1d:44:0f:ff:21:12:8f:eb:d0:
02:b3:7a:0e:8b:a9:4a:f8:0f:c7:68:64:c0:2c:f1:cb:24:3b:
12:4e:34:15:7b:1c:86:c3:20:3b:dd:3d:7a:71:96:d3:25:e0:
67:27:d1:8c:6c:93:9f:88:6f:05:35:a1:5e:d6:0b:13:fe:ee:
9f:fb:ae:37:85:11:44:4f:69:89:a3:9d:0a:4f:a2:5b:78:4b:
e4:df:29:2c:44:89:c0:6c:77:c4:bc:d8:55:30:67:a0:7e:0d:
3e:af:d6:3d:45:9d:a7:bf:ac:4a:2d:4c:17:c7:0a:da:f8:09:
37:89:90:c4:9f:1d:ec:b3:45:e1:72:1d:56:fa:3c:2f:ff:10:
5a:fb:e7:0d:5a:a9:7b:ce:a4:32:81:04:44:47:41:38:4c:d4:
0b:5e:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:12:51 2026 by rpki-client