Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: Sj9tfqVJKR81XWsKHmUnE4OQAN/eEe9hRe5+9V3scnw=
Subject key identifier: 03:EA:27:A7:8D:AF:5B:75:91:2B:53:D7:F1:56:1D:59:BF:58:19:A7
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019D37C0224D8CAB87552BD6AC03930B17EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 09EB
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: JbhGLIcQuVJBqAjeUJXfy4D9tCiE8F4dmQu6Ee8poBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:22:4d:8c:ab:87:55:2b:d6:ac:03:93:0b:17:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=03ea27a78daf5b75912b53d7f1561d59bf5819a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:fb:cb:68:25:bd:b2:c8:84:d8:f2:87:fd:
73:74:c1:31:0f:42:c1:d4:f5:5a:06:17:89:5b:67:
67:ec:c1:f5:d5:3d:fe:e7:a0:1e:7a:ec:0b:88:0e:
fc:0b:1d:fa:4c:31:6d:15:2e:03:36:c0:3f:5a:d7:
c1:e1:d0:40:d5:7e:97:49:fa:1c:2c:b0:f2:3b:37:
fd:9e:4f:55:78:1e:48:6f:d1:7e:cd:7a:94:ff:c4:
4d:ab:bd:4c:91:2c:ca:aa:30:12:a6:df:a8:d2:0d:
55:9b:4c:04:5d:2f:e1:ef:08:a6:39:5d:fa:29:34:
f2:14:13:e4:ea:bd:84:43:6a:65:23:f1:d8:39:81:
81:d2:cc:47:77:0b:fc:af:3b:89:fe:ed:16:60:77:
10:91:76:8a:bc:37:52:ab:63:af:e7:bc:80:b6:db:
d0:da:49:df:4e:7c:99:3f:dd:42:39:08:94:65:7b:
96:98:b2:96:17:e2:ab:2a:4c:c6:7d:aa:1c:b7:6a:
06:7c:a2:9a:7c:2e:97:5b:e6:01:94:b7:25:91:74:
f4:06:e9:49:d1:46:0b:30:67:4e:c7:54:b1:0c:be:
f0:cf:38:0d:91:9f:5f:be:f7:6d:0b:26:0b:11:a2:
4a:d1:68:84:50:0e:d7:61:14:9b:ac:06:f8:73:3a:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:27:A7:8D:AF:5B:75:91:2B:53:D7:F1:56:1D:59:BF:58:19:A7
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:a3:1c:3b:c0:d7:12:e0:59:e5:b4:9e:a1:bd:1e:4f:c0:
30:a1:c8:a6:24:a2:28:79:bc:72:d0:b8:2e:03:93:26:e6:5b:
9e:d1:d3:75:2a:d8:9a:8c:eb:f1:9a:f8:f6:11:56:e4:20:51:
d9:2f:fe:71:c7:3d:f2:10:1b:cd:da:7d:f5:59:c8:40:a3:97:
d1:6d:02:f7:5f:ef:f4:1e:54:83:f4:cd:fa:26:94:f3:7b:fc:
a3:7b:3a:d2:41:97:e6:95:f3:ef:74:d0:51:4a:01:60:a1:9a:
dd:70:49:25:20:3a:00:ce:09:0d:5f:04:42:c8:19:3a:35:a0:
c5:7e:93:4f:d4:3d:09:e1:d5:5c:4d:c0:b8:98:a1:c3:42:fc:
1d:5e:7f:25:12:a9:95:bf:d7:2a:40:17:93:2f:a6:b2:2d:24:
1e:2e:7b:5e:da:3a:5e:67:ff:33:7d:c4:48:aa:a0:da:63:82:
c3:62:8e:7f:6f:40:e2:88:70:09:22:67:1c:50:93:79:76:03:
51:2b:9c:23:5a:f3:3d:61:c5:94:c0:50:24:9e:4d:69:80:5d:
7c:71:b7:05:20:b6:9a:9f:37:13:d5:6f:55:4d:b5:2c:6a:e2:
8d:30:7c:d0:09:81:bd:4f:53:d6:da:a7:49:fa:f4:1c:61:bb:
45:59:11:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCJNjKuHVSvWrAOTCxfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjYwMzI5MDQwMDMxWhcNMjYwMzMwMDQwMDMxWjAzMTEwLwYDVQQD
EygwM2VhMjdhNzhkYWY1Yjc1OTEyYjUzZDdmMTU2MWQ1OWJmNTgxOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvST7y2glvbLIhNjyh/1zdMExD0LB
1PVaBheJW2dn7MH11T3+56AeeuwLiA78Cx36TDFtFS4DNsA/WtfB4dBA1X6XSfoc
LLDyOzf9nk9VeB5Ib9F+zXqU/8RNq71MkSzKqjASpt+o0g1Vm0wEXS/h7wimOV36
KTTyFBPk6r2EQ2plI/HYOYGB0sxHdwv8rzuJ/u0WYHcQkXaKvDdSq2Ov57yAttvQ
2knfTnyZP91COQiUZXuWmLKWF+KrKkzGfaoct2oGfKKafC6XW+YBlLclkXT0BulJ
0UYLMGdOx1SxDL7wzzgNkZ9fvvdtCyYLEaJK0WiEUA7XYRSbrAb4czpz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPqJ6eNr1t1kStT1/FWHVm/WBmnMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKujHDvA
1xLgWeW0nqG9Hk/AMKHIpiSiKHm8ctC4LgOTJuZbntHTdSrYmozr8Zr49hFW5CBR
2S/+ccc98hAbzdp99VnIQKOX0W0C91/v9B5Ug/TN+iaU83v8o3s60kGX5pXz73TQ
UUoBYKGa3XBJJSA6AM4JDV8EQsgZOjWgxX6TT9Q9CeHVXE3AuJihw0L8HV5/JRKp
lb/XKkAXky+msi0kHi57Xto6Xmf/M33ESKqg2mOCw2KOf29A4ohwCSJnHFCTeXYD
USucI1rzPWHFlMBQJJ5NaYBdfHG3BSC2mp83E9VvVU21LGrijTB80AmBvU9T1tqn
Sfr0HGG7RVkRmw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:29 2026 by rpki-client