Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
File: v99XKOyr1W70Y3NWlVhmylRoaRo.mft (raw, json)
Hash identifier: +xKWbBpDtCp9nmPbDwcAQrWjZBB5HSylQCEAjNcEAqs=
Subject key identifier: 27:E7:9C:ED:C0:FD:41:FB:29:03:00:B8:21:10:41:14:B9:75:8A:49
Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a
Certificate serial: 01A08C0CD1A33A0E1B379F3F45E5124C6349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
Manifest number: 066B
Signing time: Thu 10 Sep 2026 16:00:45 +0000
Manifest this update: Thu 10 Sep 2026 16:00:45 +0000
Manifest next update: Fri 11 Sep 2026 16:00:45 +0000
Files and hashes: 1: 3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa (hash: QqrBTNsjue3924ijEFZUnNRSzA8ZRhSOavKbIrZOqys=)
2: v99XKOyr1W70Y3NWlVhmylRoaRo.crl (hash: A9K0XXai5A9UJGOyT+POW2kYxdI06gOP5IgapC7AvE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:d1:a3:3a:0e:1b:37:9f:3f:45:e5:12:4c:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Validity
Not Before: Sep 10 16:00:45 2026 GMT
Not After : Sep 11 16:00:45 2026 GMT
Subject: CN=27e79cedc0fd41fb290300b821104114b9758a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:30:35:e5:c6:c0:10:d5:74:38:9b:10:fa:
12:7d:f9:84:9e:ca:7e:c3:1f:9d:2a:50:ce:0a:f3:
a6:47:e3:70:40:a8:19:06:ef:32:d4:f5:86:22:b4:
f8:89:4c:a3:27:8b:68:7b:cd:7d:37:15:3b:4d:82:
3c:db:2b:3a:6b:ee:7d:71:f5:a8:ce:7e:77:f4:4e:
9a:c3:58:7e:b6:b1:d3:ff:3d:33:a4:7b:6b:de:d1:
03:d1:50:fb:52:56:e8:f2:cf:37:cf:67:87:ee:5c:
1a:39:0a:b1:94:f4:43:5a:f6:31:24:be:cf:86:f3:
1b:a8:b8:db:90:4b:96:6c:70:c4:05:ec:8d:80:a1:
13:4c:bb:60:be:31:44:1d:98:4b:b0:7a:f1:b1:e8:
fc:58:f3:9c:7d:af:4c:16:7a:8a:23:06:c8:c2:14:
7d:00:ba:f1:68:a0:a8:b1:1c:45:5b:81:62:2e:8c:
31:41:50:c0:c9:e8:a2:25:e0:f3:8e:96:e5:6c:48:
ee:31:a9:a3:5c:b3:31:f2:ac:eb:3d:4c:8c:b3:60:
e6:78:c4:49:1a:6a:10:13:6f:0a:30:7c:c2:96:46:
cc:2f:fe:fe:db:e6:d6:4e:d3:70:1b:aa:e7:09:ce:
73:2a:50:4e:f4:87:dd:bd:92:fe:31:e3:04:a8:7f:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:9C:ED:C0:FD:41:FB:29:03:00:B8:21:10:41:14:B9:75:8A:49
X509v3 Authority Key Identifier:
keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6f:3e:64:89:1f:f7:c2:04:59:e3:cf:0b:83:32:89:ce:3a:
3b:7b:66:78:99:7b:aa:ba:f0:5b:26:e8:47:12:e3:53:ba:94:
a1:06:50:2f:09:67:68:2d:8a:16:51:4a:d7:4d:b3:59:e7:61:
b4:45:79:88:d7:72:fb:5a:10:ae:4d:56:be:fe:19:74:c4:a3:
de:3f:14:f6:9b:95:5e:39:36:3d:e6:55:9c:cc:b5:1a:b8:c3:
8c:d3:a9:53:79:1d:af:72:e1:91:21:4e:d5:00:8d:ab:38:a5:
e3:8d:00:c4:27:75:94:c8:6b:83:36:49:40:0d:ab:01:9d:ce:
5b:37:cb:87:89:81:77:a4:f5:bb:a2:70:92:ba:63:be:de:05:
3a:b7:3c:43:2e:8f:6e:9f:6c:04:b7:83:51:42:5d:5d:e1:49:
7c:be:83:d2:ca:fd:2c:ec:0c:77:7e:12:f8:34:63:ed:37:59:
b3:66:49:cc:39:ee:ee:d6:b4:9e:ab:cf:18:35:5b:3d:93:eb:
5b:ec:d3:e0:6f:49:6d:4a:83:1b:38:a1:0f:af:d1:42:39:de:
ea:a4:f4:d4:13:dc:54:70:01:ad:64:73:80:86:da:ff:2c:57:
e8:04:19:04:5f:2d:20:e4:a4:b0:7e:00:a1:95:e9:42:11:e6:
dc:73:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:37 2026 by rpki-client