Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier: pABLU5hN1RpbG/S9c25w4jbSpQv5fKu4i6oXcZZocVo=
Subject key identifier: 0D:F7:60:58:BF:44:BA:BB:8C:F3:24:B8:0F:5F:0A:63:8C:AB:4E:C8
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial: 019DCE995A3C10C2F5F7206153148547C6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number: 0FC3
Signing time: Mon 27 Apr 2026 11:00:49 +0000
Manifest this update: Mon 27 Apr 2026 11:00:49 +0000
Manifest next update: Tue 28 Apr 2026 11:00:49 +0000
Files and hashes: 1: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: TdY0RToPn9eK2hsXUYAKfUDafsjysvO0mZcJ7XccXrE=)
2: xspnOhir25ohaDEON_nokDMNa54.roa (hash: K76YUwImg7wnbqKcDgw/UjFp86GQnCK+RGi0ceH55xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:5a:3c:10:c2:f5:f7:20:61:53:14:85:47:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
Validity
Not Before: Apr 27 11:00:49 2026 GMT
Not After : Apr 28 11:00:49 2026 GMT
Subject: CN=0df76058bf44babb8cf324b80f5f0a638cab4ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:01:2a:28:26:e6:e5:34:bf:56:bf:fb:16:
ac:e9:30:30:a9:ee:10:eb:9a:fb:5b:09:97:a2:14:
4d:f4:45:c5:1d:14:27:f8:53:69:25:c3:8e:53:38:
ef:37:61:09:e1:68:e3:ba:f5:1d:12:a2:74:c0:42:
32:c0:61:ba:0e:3e:84:5e:04:84:e7:3f:37:4c:cc:
f6:12:74:61:06:b9:bb:be:c1:64:c6:51:7f:85:7e:
f2:6b:cd:95:5d:4d:67:27:b5:a9:75:a2:63:a0:8c:
81:68:bb:0f:e0:f2:7f:b5:7b:31:e3:29:13:95:77:
07:ba:15:5e:ce:fd:1c:ea:6a:12:f0:19:ad:f7:2d:
fc:ca:d6:10:10:9b:0b:78:44:22:c0:17:48:54:70:
fe:48:82:bf:e7:81:e7:01:0b:b8:4b:17:3d:7d:f4:
6b:b9:2b:ad:f1:b3:a5:9f:a2:2c:33:6b:97:ad:b6:
eb:a0:4f:86:21:4c:ea:dd:37:b5:b8:68:38:33:01:
d5:8e:fd:12:24:7c:be:72:b3:0c:5f:2f:62:a0:ec:
50:8a:20:57:b8:43:4f:67:1e:e4:ef:a5:5a:35:bf:
86:4f:20:e4:93:7e:5a:3a:5a:5a:4a:8d:c0:e5:ab:
12:4a:9e:07:65:e7:db:26:c8:5e:2f:5c:c4:8a:fc:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F7:60:58:BF:44:BA:BB:8C:F3:24:B8:0F:5F:0A:63:8C:AB:4E:C8
X509v3 Authority Key Identifier:
keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:31:af:8c:52:17:f4:6e:1b:19:cf:75:62:e9:76:6f:3c:e9:
34:ee:9e:dc:f6:5a:07:07:32:97:1e:95:46:c8:5f:29:12:21:
73:87:01:ba:06:d1:ea:81:0a:77:fe:32:68:fa:c5:04:e7:7c:
d7:9e:63:d0:65:1e:74:d7:d5:d4:65:fc:43:21:8c:27:45:c2:
dc:71:06:ee:e8:8b:02:fc:99:24:91:2f:e9:7b:86:34:3d:a5:
00:17:54:ae:2a:88:1b:9e:f7:55:75:2d:f5:2a:98:9b:08:9c:
20:15:82:13:a6:5d:5c:3a:05:56:53:2d:37:fc:c1:91:eb:f0:
a9:47:8f:47:11:32:9b:e9:95:86:ee:8e:cc:42:a1:eb:81:15:
73:fe:39:60:7b:6b:a9:ce:60:d6:be:09:a8:69:58:b8:b4:4d:
7f:22:0c:2a:66:bf:52:ae:43:88:36:b1:da:89:a7:d0:22:35:
06:f3:80:f0:1f:6d:b7:ec:fb:08:7d:33:e9:47:6f:fd:b1:ad:
9f:19:04:64:67:a1:5a:6e:bb:cb:ff:3b:ae:e5:4b:2f:76:66:
0d:49:15:5a:d8:b4:1e:5e:f6:ce:ad:e4:7c:2c:1a:f2:b1:50:
65:4b:65:8d:c9:3b:38:85:a4:8e:a8:c7:29:a9:fe:4a:ac:01:
a8:94:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:06 2026 by rpki-client