Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File: mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier: NW3paU0ygNFGw5GZvgSa2mwZrTm4+9JDcFxAYNp53/E=
Subject key identifier: A1:52:39:27:06:41:78:20:F3:2D:76:71:73:86:7A:99:78:72:6F:40
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer: /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial: 019E916FD91704489C71A16B942B1EA764B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number: 0A9E
Signing time: Thu 04 Jun 2026 07:01:26 +0000
Manifest this update: Thu 04 Jun 2026 07:01:26 +0000
Manifest next update: Fri 05 Jun 2026 07:01:26 +0000
Files and hashes: 1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: X3faThMcArN0VG3q9il0UCS5BAtLheJc5gLn4KI0OdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:d9:17:04:48:9c:71:a1:6b:94:2b:1e:a7:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Validity
Not Before: Jun 4 07:01:26 2026 GMT
Not After : Jun 5 07:01:26 2026 GMT
Subject: CN=a152392706417820f32d767173867a9978726f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:f6:a7:3a:a0:b1:eb:e6:12:7c:a2:f3:fc:
9c:bf:72:6f:e8:66:5e:4d:b2:d7:8b:df:b3:d2:fb:
12:ae:12:c9:e8:34:56:4f:9b:07:90:36:8c:32:9d:
a8:99:30:98:15:5b:07:40:6a:aa:22:2c:58:de:b2:
88:c6:a4:3f:d3:f5:1a:ec:35:85:7e:3e:73:52:26:
ef:c8:9f:fb:83:84:5c:d7:f4:d0:bb:05:c6:1a:e0:
ae:7d:3f:4b:3b:49:46:c1:36:78:5a:ff:be:54:c9:
c2:ae:a4:13:a0:d9:bc:80:c6:6e:e9:bf:d5:50:61:
25:73:f3:e8:24:03:14:a5:43:59:f3:d5:f7:f9:c1:
fe:b2:f4:f9:72:90:95:1b:fd:75:f5:be:9d:1a:f6:
71:a5:93:bf:28:84:51:22:ed:8f:4c:70:00:66:0e:
d3:f2:93:4d:55:a0:96:27:cb:03:41:8f:74:a0:08:
74:af:4a:cd:23:ce:bc:f7:30:ec:e2:fd:7a:6b:0c:
dc:89:6c:71:4f:f5:e1:b0:f1:ca:ab:70:f3:9b:0d:
25:8a:df:2f:83:13:ab:6c:ae:2c:22:86:b4:87:4b:
f7:36:9f:11:ba:24:9b:35:b9:92:94:4b:76:ed:b4:
24:08:56:9e:6a:2d:b5:ab:35:75:d9:f6:71:a9:bf:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:52:39:27:06:41:78:20:F3:2D:76:71:73:86:7A:99:78:72:6F:40
X509v3 Authority Key Identifier:
keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f9:1a:11:e6:cf:a9:ff:82:8f:b7:28:72:ae:8c:e3:2b:6d:
35:02:5b:3b:65:e1:05:87:7d:20:0e:34:91:ae:e4:6c:74:a7:
98:f0:81:34:bd:61:3c:db:d4:f9:a0:6d:f8:3c:94:c7:9a:c2:
c7:0f:28:4c:44:63:46:bb:cb:2a:ff:b5:42:6f:e0:ec:47:c6:
14:65:e4:09:00:f7:60:dd:7a:c6:b9:e2:b3:cc:bf:c3:d8:86:
8d:9d:9f:bf:bc:04:a4:41:cd:02:c6:86:b6:d7:8f:c3:cc:ee:
0f:8b:42:3d:8b:12:a5:f2:a7:f3:e6:c5:cd:04:db:5f:7c:35:
0e:be:91:b6:08:9a:65:6f:0b:1b:22:36:c0:25:04:51:25:4e:
80:1d:c1:44:7c:15:f1:4f:c8:b9:6f:5a:62:ab:47:30:72:23:
92:7e:d2:d2:99:9f:08:81:71:df:e6:7e:cc:2e:ad:13:f5:5f:
9d:8d:56:35:d5:de:39:ea:c8:bc:dc:f5:10:3b:a5:db:9a:97:
79:4c:d9:3a:6a:d0:8f:27:b0:62:07:5e:53:54:c4:2e:db:4c:
00:c6:e7:4d:4e:d0:95:88:81:19:71:89:8b:99:df:6e:05:30:
5b:74:0f:4d:bc:b5:af:dc:11:d0:7a:ab:f8:1c:eb:9e:ad:7d:
e8:47:78:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Rb9kXBEiccaFrlCsep2S3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjYwNjA0MDcwMTI2WhcNMjYwNjA1MDcwMTI2WjAzMTEwLwYDVQQD
EyhhMTUyMzkyNzA2NDE3ODIwZjMyZDc2NzE3Mzg2N2E5OTc4NzI2ZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEf2pzqgsevmEnyi8/ycv3Jv6GZe
TbLXi9+z0vsSrhLJ6DRWT5sHkDaMMp2omTCYFVsHQGqqIixY3rKIxqQ/0/Ua7DWF
fj5zUibvyJ/7g4Rc1/TQuwXGGuCufT9LO0lGwTZ4Wv++VMnCrqQToNm8gMZu6b/V
UGElc/PoJAMUpUNZ89X3+cH+svT5cpCVG/119b6dGvZxpZO/KIRRIu2PTHAAZg7T
8pNNVaCWJ8sDQY90oAh0r0rNI8689zDs4v16awzciWxxT/XhsPHKq3Dzmw0lit8v
gxOrbK4sIoa0h0v3Np8RuiSbNbmSlEt27bQkCFaeai21qzV12fZxqb8ITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFSOScGQXgg8y12cXOGepl4cm9AMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvkaEebP
qf+Cj7cocq6M4yttNQJbO2XhBYd9IA40ka7kbHSnmPCBNL1hPNvU+aBt+DyUx5rC
xw8oTERjRrvLKv+1Qm/g7EfGFGXkCQD3YN16xrnis8y/w9iGjZ2fv7wEpEHNAsaG
ttePw8zuD4tCPYsSpfKn8+bFzQTbX3w1Dr6RtgiaZW8LGyI2wCUEUSVOgB3BRHwV
8U/IuW9aYqtHMHIjkn7S0pmfCIFx3+Z+zC6tE/VfnY1WNdXeOerIvNz1EDul25qX
eUzZOmrQjyewYgdeU1TELttMAMbnTU7QlYiBGXGJi5nfbgUwW3QPTby1r9wR0Hqr
+Bzrnq196Ed40Q==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:09:32 2026 by rpki-client