Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: xcvYY4NPOafW40t5tJwtkqL/5V7hWdim4tyemW6PKwM=
Subject key identifier: DD:2B:6C:A7:B5:AB:22:0D:E0:8B:5A:7B:67:32:33:95:12:DD:21:83
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019F8A8F71AC4365584BD5A5AF5BBC8CF1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0B1F
Signing time: Wed 22 Jul 2026 16:01:24 +0000
Manifest this update: Wed 22 Jul 2026 16:01:24 +0000
Manifest next update: Thu 23 Jul 2026 16:01:24 +0000
Files and hashes: 1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: eAAvNW94k7ntGWzEzeiO71qmKpI8KU5qG6RJzLNSPoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:8f:71:ac:43:65:58:4b:d5:a5:af:5b:bc:8c:f1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Jul 22 16:01:24 2026 GMT
Not After : Jul 23 16:01:24 2026 GMT
Subject: CN=dd2b6ca7b5ab220de08b5a7b6732339512dd2183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:94:3c:e9:bd:3d:50:4a:7b:c2:af:50:f3:
17:d7:4e:de:db:92:7a:50:42:07:4e:b5:43:d6:16:
b1:52:9d:28:40:fc:cf:65:9c:12:98:37:0b:85:3e:
62:b7:3b:13:2e:45:bc:9f:bb:dc:5c:b7:9d:d6:5d:
6e:b5:d5:62:a5:27:4b:d9:49:91:ed:18:2d:4d:51:
06:3e:54:f6:d3:44:bd:ad:90:2e:72:f3:35:67:50:
f9:35:da:d6:a9:28:fe:51:30:94:81:16:6d:a9:8b:
27:99:26:cf:7b:dd:29:c9:4b:67:dc:6a:e6:97:62:
42:a9:ae:62:47:54:bf:fa:e4:d9:27:3f:f5:de:88:
5e:86:39:28:60:ea:4e:10:31:8d:44:c9:ec:2a:bc:
ef:b6:5b:53:35:4a:c1:09:dc:bb:4b:df:aa:2e:c7:
5b:06:3e:d2:fc:6e:69:9f:4f:23:51:b5:38:2f:96:
e9:51:a8:3d:f6:f2:7a:4b:55:d7:6b:d4:4d:b1:a5:
8d:61:c2:5d:95:f8:2f:46:59:3f:46:63:27:eb:5c:
08:4a:6c:2a:10:dc:98:95:89:6e:f3:00:25:75:73:
e2:84:db:bb:d0:cc:1c:15:60:98:72:c6:c4:11:49:
f1:82:e8:29:52:f0:7b:b2:78:43:c8:22:14:99:bc:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:6C:A7:B5:AB:22:0D:E0:8B:5A:7B:67:32:33:95:12:DD:21:83
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:31:74:ad:eb:3a:6b:db:7b:37:be:80:ed:4f:9b:b8:0c:
dd:85:24:df:58:a5:2f:6c:4d:68:3f:e8:55:99:0b:cc:ac:c9:
2d:25:f7:84:63:d3:e2:4c:57:c3:2e:59:87:c3:e7:d0:fd:ca:
3a:95:88:9e:6e:08:6e:f2:63:1d:34:b0:d9:e9:28:e2:02:ee:
46:ba:f5:07:7d:0e:ed:58:5c:5b:c4:6d:2f:d5:ef:45:be:76:
b3:3a:d8:b5:5f:3b:cb:21:3b:80:34:4c:35:a6:b7:6a:72:4c:
48:ad:13:4a:40:be:02:fd:29:c4:cf:18:01:55:cc:4b:83:0c:
23:1f:6f:7e:85:e4:d2:52:94:4b:79:2c:50:67:32:e5:f8:9c:
2c:6d:f1:65:01:90:08:f8:c6:97:69:c0:24:58:17:fe:eb:f6:
1c:9b:81:3b:d4:0f:db:58:91:81:1e:d2:dd:38:26:17:23:25:
d9:75:c8:66:36:de:56:61:1a:72:4b:9f:b2:98:59:bd:f4:e2:
80:da:0e:1c:d0:fb:82:de:ff:61:c2:b1:94:44:3e:67:19:f0:
aa:a8:ee:2e:a5:37:b7:78:70:f9:a9:75:80:a9:3f:2f:9f:67:
e6:dc:c6:0c:54:af:9c:73:36:12:dd:3d:ca:f0:6f:c9:a2:63:
a7:93:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:52:44 2026 by rpki-client