Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: eu/p7NleKPKyHdbz9G99ZkEGpTkZ4wj1bQ7LSXAks6E=
Subject key identifier: C0:CE:9E:FF:4D:5F:C5:92:D3:35:B0:08:12:CF:06:86:7C:68:B5:97
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019CAD908C33D838B020B92409CA025C1075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0DA2
Signing time: Mon 02 Mar 2026 08:00:57 +0000
Manifest this update: Mon 02 Mar 2026 08:00:57 +0000
Manifest next update: Tue 03 Mar 2026 08:00:57 +0000
Files and hashes: 1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: GDQqgT8rY2riEpDWPDX//HItsMUvq1EA+2oFC1b5PRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8c:33:d8:38:b0:20:b9:24:09:ca:02:5c:10:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Mar 2 08:00:57 2026 GMT
Not After : Mar 3 08:00:57 2026 GMT
Subject: CN=c0ce9eff4d5fc592d335b00812cf06867c68b597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:1f:ee:7e:ce:dd:73:2d:e1:f1:1c:99:11:
1f:3c:5a:9b:44:9f:3b:a8:bd:eb:23:9f:cc:fc:86:
6e:8e:49:63:ca:57:82:dc:ae:21:7b:5a:84:25:2b:
67:b3:54:90:94:6e:11:31:23:1b:30:b2:c8:6c:e7:
22:0a:62:46:91:ca:eb:d3:c3:e7:af:46:14:e9:01:
13:31:58:0b:c5:1f:0e:e1:ea:15:f7:d8:67:df:bf:
96:70:1d:a8:69:65:c6:53:bd:6e:c1:91:86:6e:27:
52:b9:1a:ca:5a:d0:c8:8b:37:1d:40:f3:54:bc:f3:
f5:64:2c:36:af:86:3f:16:d5:f7:6f:e7:27:23:2a:
1b:76:c2:68:05:ad:d4:fc:c2:4c:d4:82:ed:1a:90:
0c:91:34:da:2a:a8:57:56:e5:ff:97:6c:70:8c:78:
5e:24:c4:81:a9:ce:93:2a:eb:8b:b3:b1:11:26:c9:
90:9b:81:e0:91:a6:4b:4d:c3:56:02:1c:04:a9:dc:
f9:1d:f8:c4:33:6c:c6:e5:cf:fd:1c:c1:e9:77:50:
33:3f:58:00:82:09:b2:2d:e7:c9:fc:a0:02:a2:76:
c0:6b:05:89:a1:e6:29:2c:02:04:85:80:64:9d:33:
fc:3e:a5:19:13:99:57:93:ce:b7:b5:c0:6e:20:96:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CE:9E:FF:4D:5F:C5:92:D3:35:B0:08:12:CF:06:86:7C:68:B5:97
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:f0:f9:f6:60:99:46:f1:31:20:a4:78:5e:fc:6c:54:43:
4a:be:62:2b:33:d8:e2:82:86:7a:87:e3:3f:51:e8:8b:12:ed:
80:bc:79:3e:a5:9e:3b:18:44:53:24:11:c5:a8:a2:53:d2:c5:
26:8f:d0:9f:f1:fb:91:3d:83:41:b5:64:f8:10:b5:0d:9c:9f:
c5:b5:ff:5f:32:02:8a:15:fd:1b:a4:31:13:96:b2:df:63:c3:
9f:70:ec:67:69:84:bf:b6:92:44:fb:a4:d5:21:c5:66:7d:09:
9f:f1:24:b4:ca:d6:4e:00:6c:16:dc:52:b8:03:88:43:e3:8b:
6a:e1:f6:8e:01:87:11:49:23:d9:34:81:30:21:7a:43:29:60:
78:95:8f:9d:34:1a:64:b2:45:23:7d:78:3f:d0:f5:fa:34:14:
97:68:28:91:ba:f0:27:0e:52:55:25:6b:4f:e2:f4:64:24:89:
76:23:0a:d1:74:a0:71:4e:00:a5:e9:70:21:1a:c0:b6:a1:6b:
dd:66:64:f7:c1:43:43:92:cf:f5:6d:2b:aa:54:19:3a:f3:d4:
5c:c1:7c:91:f6:b4:36:39:4a:87:f7:51:94:d0:a4:24:4e:32:
78:16:e3:8e:37:29:4e:c9:9b:a2:72:ef:60:9e:93:22:a1:aa:
e0:3b:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:41 2026 by rpki-client