Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File: mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier: Jf2jnHZBLi0g837Vv3Tso0+gXDnnc3MIX2/b8uLtmmA=
Subject key identifier: 3F:C7:4B:59:B2:C4:33:AA:AD:E8:42:CB:5D:92:0A:62:23:C0:19:32
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 019D99D0112DDF2A96F2D4AFAA049A40A834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number: 0E97
Signing time: Fri 17 Apr 2026 05:00:43 +0000
Manifest this update: Fri 17 Apr 2026 05:00:43 +0000
Manifest next update: Sat 18 Apr 2026 05:00:43 +0000
Files and hashes: 1: ateB1eMixo1Q5bIvGLLCwGfK3Yk.roa (hash: hmzWGsdutZHKJhCIH0ky2UAWl4Fsdp5ElC7q6jHDT04=)
2: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: C5mfS4aGgUoPhM4eyk09u1sRXTFZlt4qqDChbSACOMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:11:2d:df:2a:96:f2:d4:af:aa:04:9a:40:a8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: Apr 17 05:00:43 2026 GMT
Not After : Apr 18 05:00:43 2026 GMT
Subject: CN=3fc74b59b2c433aaade842cb5d920a6223c01932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:40:e0:6c:a4:df:4e:f1:0b:05:3a:01:af:
40:de:2a:15:70:7b:6a:2a:0e:79:77:38:e5:47:52:
9f:28:cf:50:58:58:42:27:24:1e:fa:50:ba:a3:59:
ae:db:94:df:f4:04:5d:ca:54:df:ad:16:f2:31:29:
1c:2a:45:f6:f5:aa:e9:96:96:af:07:f0:03:7b:80:
4d:bd:27:09:ba:bb:1d:dc:19:40:98:71:f5:40:ff:
d2:61:8a:60:d0:5a:e9:ce:50:91:10:10:23:05:b4:
59:30:fd:87:6d:2f:06:02:b4:b3:9e:ff:cf:64:b6:
fd:28:09:cf:5b:0d:5a:7c:3c:d1:93:64:75:b7:26:
97:2c:0a:2a:b5:d3:fb:8f:17:f1:c5:3a:91:5c:2b:
8f:16:f8:c6:77:97:b7:37:b7:9d:f4:5f:c4:7d:a6:
d6:49:1c:7b:9b:a0:ab:2e:d4:b4:4c:43:e4:6d:e2:
1a:51:da:a1:f5:4f:c4:ed:5c:8e:5b:97:04:a0:d6:
a3:b7:e4:f2:02:cb:86:18:3c:5a:3c:7d:51:78:70:
09:a3:6d:64:74:14:bb:c1:63:48:11:66:43:87:85:
99:63:5a:b1:ac:bf:37:80:cb:65:b5:0c:6a:ba:db:
8d:3c:f1:fa:35:4c:55:21:df:8a:ed:df:86:32:83:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:4B:59:B2:C4:33:AA:AD:E8:42:CB:5D:92:0A:62:23:C0:19:32
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3a:35:fd:fa:b4:6c:40:1d:d3:8d:4e:ee:27:b4:13:56:3f:
89:e9:0f:76:1a:bf:af:eb:b6:39:96:e7:b5:c5:f3:86:fc:8e:
ec:f7:fb:24:85:4c:dc:d9:57:5d:63:e9:7a:ef:2a:da:70:33:
9c:11:e8:fc:d7:e6:47:83:dd:9a:a9:36:34:92:aa:c9:90:87:
1e:c7:f1:65:72:90:f2:4f:34:e2:0c:b3:83:23:c9:12:d8:a7:
3f:3e:7f:a5:84:47:63:a3:8d:ff:51:ca:e7:f3:49:fe:9c:42:
5b:60:2f:6c:21:fc:38:7c:ff:38:f6:b3:8f:b5:73:16:2e:a9:
70:54:f2:8b:3f:c3:e9:e3:47:9a:4a:4f:9c:2a:56:74:62:66:
3e:37:5d:5c:20:dd:19:37:55:7e:fe:7f:80:16:d2:88:87:3a:
71:62:3d:8c:50:a4:07:79:fd:c1:53:e9:e2:07:20:d1:b5:3b:
54:09:10:14:1a:1a:57:75:7e:52:ac:d4:d7:2f:c1:c5:29:06:
3e:ea:d1:6f:b4:b1:a8:f2:19:4c:b5:15:9b:56:e8:52:70:66:
8a:6d:54:12:c6:30:d1:78:ca:b2:e3:e7:30:f0:94:09:cc:cc:
d3:3d:44:8c:e1:22:6e:56:4c:0b:2a:ab:92:54:97:72:1e:df:
b9:ad:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:53:10 2026 by rpki-client