Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: Mqglmo/QA80qCKf773Xzd8C/lOCqdr6P17Ao9elLbkE=
Subject key identifier: 0B:2E:17:6F:DA:20:58:18:D8:5E:F1:C0:00:DF:7C:AA:4A:C1:D2:04
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 01A132590FFB0D138A3FC4BDDE9C659C6CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0FF9
Signing time: Mon 12 Oct 2026 23:00:59 +0000
Manifest this update: Mon 12 Oct 2026 23:00:59 +0000
Manifest next update: Tue 13 Oct 2026 23:00:59 +0000
Files and hashes: 1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: KGdYCfnZq5N2E5DbvwoBXFOk6LM4/Dhrqd43GLTu0Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:0f:fb:0d:13:8a:3f:c4:bd:de:9c:65:9c:6c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Oct 12 23:00:59 2026 GMT
Not After : Oct 13 23:00:59 2026 GMT
Subject: CN=0b2e176fda205818d85ef1c000df7caa4ac1d204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:35:12:d1:cf:73:e5:1a:d9:1a:8e:10:8b:
ae:5c:8f:62:2f:92:88:c7:fd:62:4e:46:41:c9:4b:
b2:19:31:36:a2:0a:d1:65:51:de:dd:93:66:3a:d1:
3a:8b:f3:54:6d:a5:ee:79:8a:76:40:74:01:8b:60:
03:1d:d0:1a:ef:02:92:c4:30:d5:2d:a0:32:e5:a5:
f1:4f:cd:68:f5:b0:bd:d4:16:44:ac:20:52:4c:6b:
8b:77:98:8a:58:1b:4d:b7:20:86:a9:48:7b:59:03:
fa:76:ca:7a:62:f1:cf:84:59:7b:4a:b8:35:cf:f5:
da:79:67:e4:77:d8:85:a1:e6:83:18:8b:27:7f:09:
47:46:80:18:6b:f8:53:e0:65:2b:72:85:e2:16:23:
4c:42:b9:93:1b:a4:ac:fb:af:b5:4e:e1:0a:d6:36:
4f:60:e7:1b:3f:dc:4b:86:51:2c:b9:c6:ed:0d:54:
67:c2:09:af:26:e4:f3:a6:63:18:5b:2f:70:4f:36:
43:d7:31:fc:fe:f9:41:5d:a9:60:57:f8:2b:32:ac:
f5:63:68:5a:56:bc:75:3f:21:b4:92:d9:f8:a9:77:
3b:c3:f4:e2:07:b6:ff:4d:5d:f3:2b:8b:19:db:91:
a1:95:d0:83:a3:ed:e3:5c:44:90:8d:f1:c2:d8:30:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:17:6F:DA:20:58:18:D8:5E:F1:C0:00:DF:7C:AA:4A:C1:D2:04
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:65:2e:ab:13:e1:4b:df:ba:ed:d1:75:a2:fc:84:e6:0e:
3e:35:2c:76:9c:75:54:73:59:b9:b6:a6:ec:a1:04:9e:21:09:
00:98:55:d6:45:7b:29:92:c0:ac:00:32:d8:37:3b:65:ca:ad:
e1:27:74:01:d2:89:1b:d4:cf:38:09:29:5e:84:84:b7:35:ab:
24:0e:11:78:b4:92:e2:17:23:f1:aa:a3:94:6e:a6:d9:50:19:
b6:3a:99:14:0b:61:d3:d9:95:f5:15:ba:61:70:c5:79:a9:67:
80:71:a3:05:58:94:86:7c:6b:d3:41:81:fc:69:50:19:54:d8:
b3:fe:d8:76:4b:8c:80:e8:83:c7:52:ee:c7:d2:61:65:19:0f:
99:60:2d:53:b1:70:dc:3b:90:43:16:e7:5f:a3:b7:07:7a:0b:
53:c3:45:3f:8f:dc:2c:0d:18:f2:8a:b4:6d:20:d3:e2:db:85:
fc:83:bb:48:a5:05:91:b5:6c:6b:69:91:0b:40:fe:52:a6:f3:
76:2b:12:78:a4:45:da:47:d1:69:29:7f:9b:32:e1:c7:88:e4:
62:68:80:69:cd:08:5d:c1:02:ce:3f:b9:22:13:ae:27:7e:0c:
cd:5c:89:46:cc:1f:f1:44:f4:da:1c:3c:22:8f:36:5f:96:b4:
ef:91:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:04:22 2026 by rpki-client