Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: UgnSmkRwI5BkxlAq5DlajqBrveVtb56rlTYHxDtSDMk=
Subject key identifier: B5:01:63:34:4B:0C:95:D1:05:8C:81:53:55:42:8E:5F:AF:28:58:F8
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 01A161C46F3B981BE675290E68221822C77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0C13
Signing time: Thu 22 Oct 2026 04:00:25 +0000
Manifest this update: Thu 22 Oct 2026 04:00:25 +0000
Manifest next update: Fri 23 Oct 2026 04:00:25 +0000
Files and hashes: 1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: KY1VYwGfw1ifrIXObi90hivF2wofWI1qdWebQthi44s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:c4:6f:3b:98:1b:e6:75:29:0e:68:22:18:22:c7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Oct 22 04:00:25 2026 GMT
Not After : Oct 23 04:00:25 2026 GMT
Subject: CN=b50163344b0c95d1058c815355428e5faf2858f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:0d:ce:32:11:c0:dd:80:d8:6a:70:18:e2:
52:4b:fa:a4:4b:fa:39:b6:72:2f:a1:0c:56:78:62:
fb:05:f0:bf:13:6e:d6:a7:43:e0:01:1b:7e:f4:5e:
93:95:30:4c:13:e3:b5:91:31:98:36:f7:14:b2:5a:
ad:45:c5:46:0b:9b:8f:a6:e5:5c:0d:bd:e9:52:c1:
8d:78:3b:25:78:e5:d5:0f:b4:fe:86:48:0f:f8:ac:
de:e2:4d:72:0f:db:38:7f:23:29:13:07:76:a1:a6:
e1:a8:80:55:44:a5:10:6e:95:fc:73:0e:cf:94:8a:
31:3f:ae:98:16:3c:df:c8:f1:71:9e:7a:6d:b3:b5:
55:79:5c:07:bd:9d:c9:69:25:33:6c:51:81:d0:46:
a6:39:63:78:2f:f6:d9:d4:6c:bb:1d:f6:dd:64:03:
82:b2:d1:23:16:58:42:40:25:db:42:9b:30:64:c8:
93:6c:c9:d3:65:0d:92:e8:27:28:5f:b0:9e:48:aa:
03:d6:d3:7e:18:dc:63:66:24:bb:87:f6:c7:e5:f9:
b1:e4:8b:5e:39:68:b7:97:e6:72:5a:bd:70:67:c2:
6c:5a:c3:24:a6:85:f9:e0:6f:c5:8e:58:4f:41:23:
08:2b:bb:1c:bf:13:c5:52:16:9d:fe:54:9e:9d:02:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:63:34:4B:0C:95:D1:05:8C:81:53:55:42:8E:5F:AF:28:58:F8
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f3:d8:e2:49:a5:d7:74:63:c0:c9:44:cf:54:72:80:25:59:
f8:62:7b:62:85:ec:2a:04:2c:e4:64:53:07:0a:3e:ef:d0:9c:
f3:17:6a:32:ab:88:98:fa:77:58:ab:7b:a4:50:64:e0:09:f7:
97:a6:2d:bc:89:7a:c8:23:36:25:91:8d:95:6e:32:60:d2:c6:
ee:ca:ec:49:6b:6c:af:b3:32:ed:46:9f:23:39:b7:5b:37:0f:
b5:4a:51:81:cf:28:62:a4:5c:45:56:2e:ea:c1:15:f9:47:e2:
fb:e0:63:28:68:7c:36:04:81:06:fe:b8:76:19:e6:4d:22:27:
43:49:86:ef:57:c3:7c:db:d8:47:d4:93:1a:30:83:1f:9b:07:
35:99:4b:96:65:59:75:32:fe:f7:45:88:fc:6f:48:a2:be:31:
c0:01:9e:28:88:21:da:70:ce:5c:05:eb:27:46:d2:42:9c:fd:
50:c3:59:05:92:2b:39:64:2a:af:dd:44:4b:45:6e:5c:ea:0b:
89:b8:04:03:23:0f:0d:d2:c2:26:14:bd:ec:45:ed:35:7d:a6:
e6:ba:e1:28:fb:aa:aa:02:98:c3:ba:70:4e:40:bd:8f:9a:48:
67:42:2f:da:44:72:94:f2:d0:00:c2:b5:58:4d:02:55:01:b9:
4c:7d:6b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:59:56 2026 by rpki-client