Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
File: mBiOFp92WtIVgq7onkQrqtaMWnA.mft (raw, json)
Hash identifier: Q6LsxtJ8U765SVbbtzmD+iruG5NTHMV2TN/kp518p9w=
Subject key identifier: F6:31:34:28:03:DF:51:46:E5:0A:F3:D5:41:55:27:63:53:E3:35:C3
Authority key identifier: 98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
Certificate issuer: /CN=98188e169f765ad21582aee89e442baad68c5a70
Certificate serial: 019D39AE8CC991F7DFF792F7702DA3B0A32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
Manifest number: 3A
Signing time: Sun 29 Mar 2026 13:00:33 +0000
Manifest this update: Sun 29 Mar 2026 13:00:33 +0000
Manifest next update: Mon 30 Mar 2026 13:00:33 +0000
Files and hashes: 1: CtVoaMBCLdM9BHt25HaZqMyTPK4.roa (hash: 5PXDA9U5fF7S6/XA+XWt3mI39Li4EcITN+bSwQsIUZc=)
2: mBiOFp92WtIVgq7onkQrqtaMWnA.crl (hash: M0Kvio/5i2tJd7iiwbTZHPHPsNp1NU7jK1cbKZ6rvGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8c:c9:91:f7:df:f7:92:f7:70:2d:a3:b0:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98188e169f765ad21582aee89e442baad68c5a70
Validity
Not Before: Mar 29 13:00:33 2026 GMT
Not After : Mar 30 13:00:33 2026 GMT
Subject: CN=f631342803df5146e50af3d54155276353e335c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:78:46:7f:73:2d:a0:2e:2a:fb:e2:fa:b1:
37:f9:65:46:cf:0f:5d:d4:ba:e7:ed:68:84:d2:d8:
41:35:ff:91:44:65:26:b6:b2:67:ef:38:46:a6:ed:
3c:4d:c0:56:4b:1c:87:9b:3d:e2:92:c3:9b:09:3d:
6a:4a:4b:f5:cb:1f:d4:47:0a:93:cf:81:7e:7d:62:
b2:c3:7c:ad:58:a4:54:6c:4d:31:f9:93:15:df:e6:
bf:d2:97:e1:60:14:64:3c:b4:ef:f5:49:fe:d0:4c:
e9:83:b6:02:89:a8:1f:35:e5:ea:92:a8:59:78:8e:
32:db:46:47:05:5e:45:4d:b1:51:43:e9:4c:bf:c8:
8c:e7:6c:48:4f:51:59:ff:fe:02:1a:3b:31:a5:6f:
0b:2b:ea:9e:c6:d6:ec:3e:bb:e7:3f:b0:00:ad:17:
c1:99:d9:95:1b:14:bc:76:dc:84:6d:60:7d:aa:18:
ad:bc:6f:4c:49:4a:68:aa:a4:f3:af:a4:5d:90:4e:
81:72:a0:d1:29:a7:82:75:90:1c:32:a7:41:38:d9:
43:a1:b9:c4:7f:a7:ad:f3:63:f9:70:05:53:ad:24:
02:d9:65:f7:05:b3:70:75:33:db:3a:e6:27:e1:b9:
4d:3c:e7:21:4c:4c:d6:b9:3c:a1:2b:0c:06:0c:b2:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:34:28:03:DF:51:46:E5:0A:F3:D5:41:55:27:63:53:E3:35:C3
X509v3 Authority Key Identifier:
keyid:98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:61:f4:24:f9:9f:f7:d4:2b:15:27:d6:32:aa:61:a5:28:90:
a3:95:4e:e0:a1:a5:fb:0b:44:be:d0:43:d9:fb:2d:0a:8e:d8:
d3:1d:41:11:a8:c5:42:8b:e5:bb:f4:52:d9:e0:70:93:47:f1:
83:83:e5:3c:7e:68:cb:e5:9f:1f:6b:26:3e:e8:fe:13:20:24:
a4:c6:30:e9:08:37:1d:12:23:a8:06:b3:cf:91:9e:d1:e1:8a:
57:9b:cf:8b:73:7d:22:1b:7d:63:56:f3:e8:21:64:46:a7:b0:
36:0b:56:e2:f9:ea:80:7b:eb:b8:b3:fd:0c:a2:30:83:e4:bf:
0c:8a:a1:ba:a9:70:8c:25:8a:60:a4:d6:36:ef:31:bd:e0:86:
f4:2c:d8:91:55:fc:95:fd:36:f4:2b:4d:bb:6d:94:d4:f2:be:
21:60:a3:33:6b:7e:89:75:80:88:56:3f:fc:c7:f3:50:1a:f9:
48:f2:72:83:b3:17:8a:df:d0:e6:7b:08:4d:bd:dd:fa:bc:39:
e5:03:b4:8b:f3:a1:dc:f2:6c:fa:9e:56:5c:dd:ba:f3:ac:70:
0c:99:0f:58:d9:32:c8:b0:be:fb:47:e7:9f:62:3a:83:47:3d:
53:04:dc:aa:ab:7a:34:e2:9b:3f:2b:a2:00:84:b0:64:0d:ff:
53:7d:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:18 2026 by rpki-client