Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: iktadZK440hE51vd+yn+gXJ9HEayYuZxiKGqpoG0A98=
Subject key identifier: 99:30:FB:61:C5:CA:65:F8:96:15:32:7A:26:5F:28:30:AD:5A:75:D5
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019D36AD603FFBF93C4D56EC84A12BD2A61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0DE9
Signing time: Sat 28 Mar 2026 23:00:25 +0000
Manifest this update: Sat 28 Mar 2026 23:00:25 +0000
Manifest next update: Sun 29 Mar 2026 23:00:25 +0000
Files and hashes: 1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: iDfOmVh//YDfBAME7happwD7nIkZUWicgJ6y7OhI040=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:ad:60:3f:fb:f9:3c:4d:56:ec:84:a1:2b:d2:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Mar 28 23:00:25 2026 GMT
Not After : Mar 29 23:00:25 2026 GMT
Subject: CN=9930fb61c5ca65f89615327a265f2830ad5a75d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:fe:f3:65:32:b7:83:7c:ce:5a:e6:b2:1e:
c8:be:ce:13:fd:1d:8c:95:1b:ec:39:7a:ac:94:24:
fa:6e:4e:d2:e8:95:00:13:87:c2:28:90:a9:81:6a:
b5:37:6d:b9:0c:78:42:2d:56:b7:be:10:8c:dd:2a:
7d:84:91:92:12:03:6c:c2:2b:fe:6e:1c:f5:ab:9b:
c1:1f:b4:75:70:87:8f:d6:62:33:ea:59:9e:fb:33:
80:89:d2:ce:92:cf:f1:9b:c1:16:ad:f5:82:33:7a:
5b:67:92:51:84:ef:ec:e5:ed:df:2d:29:c8:1f:65:
86:89:45:92:9a:87:13:2f:4e:8b:ae:3c:e6:4e:42:
d9:18:05:71:12:d7:75:62:ac:bc:a3:a8:59:12:53:
71:2b:84:6a:12:5d:16:33:eb:98:3f:81:23:39:69:
f1:c3:b3:e7:4a:3d:09:fe:5c:d5:17:ea:a4:ed:ac:
12:1f:6d:c2:7d:0a:22:7f:69:bd:04:75:d9:ec:2e:
70:b8:66:e5:f8:a2:97:e5:11:1c:85:7e:1a:9d:f2:
60:51:39:48:00:12:f2:70:49:80:12:61:48:e2:dd:
0b:8a:2b:41:de:98:0f:bd:0f:23:51:be:6f:46:d6:
11:3e:f6:1b:d9:35:cd:51:66:9b:10:13:9e:22:b3:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:FB:61:C5:CA:65:F8:96:15:32:7A:26:5F:28:30:AD:5A:75:D5
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c5:90:6d:87:9f:c8:be:29:8b:f2:84:69:f5:d4:6c:84:88:
2e:ac:07:2a:34:28:73:ab:48:1b:8b:74:2c:38:9c:35:c5:8b:
42:03:41:57:3b:8c:93:5b:8b:1c:2d:b0:b7:b1:b9:22:a0:1d:
65:e6:eb:87:4d:40:a8:49:60:11:40:16:dd:5b:7d:ab:52:20:
a8:4c:3e:75:01:cb:3d:44:8a:18:31:b5:8d:9f:c8:d8:48:31:
9c:63:77:4c:2f:9c:d6:7b:f1:23:d1:fa:01:9f:8e:ff:aa:c4:
9d:90:ec:76:6e:ec:f5:9d:05:5b:ca:2a:1b:3c:b3:1c:fd:c4:
2b:19:35:ba:34:fc:e2:54:ff:f6:65:7b:8c:53:f6:0d:b2:58:
68:71:e7:f9:01:e7:d3:06:00:64:52:40:57:c9:85:f7:40:53:
54:3d:8e:e5:03:3f:32:3e:7b:58:9f:3a:4a:d6:05:0b:d7:0a:
44:d9:fb:5c:5e:3c:c9:14:3f:58:6c:30:1b:b7:79:96:4b:97:
a6:ed:f6:ca:e1:5b:4d:3f:6b:97:b4:26:bc:15:6b:a9:3b:17:
a4:90:f9:a9:1e:a5:9b:ed:9e:c9:4d:c0:8d:ac:b4:30:03:02:
66:6d:39:0a:db:0b:98:05:e1:2a:7c:da:64:7f:dd:1d:cb:2b:
5c:ca:75:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ02rWA/+/k8TVbshKEr0qYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjYwMzI4MjMwMDI1WhcNMjYwMzI5MjMwMDI1WjAzMTEwLwYDVQQD
Eyg5OTMwZmI2MWM1Y2E2NWY4OTYxNTMyN2EyNjVmMjgzMGFkNWE3NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VL+82Uyt4N8zlrmsh7Ivs4T/R2M
lRvsOXqslCT6bk7S6JUAE4fCKJCpgWq1N225DHhCLVa3vhCM3Sp9hJGSEgNswiv+
bhz1q5vBH7R1cIeP1mIz6lme+zOAidLOks/xm8EWrfWCM3pbZ5JRhO/s5e3fLSnI
H2WGiUWSmocTL06LrjzmTkLZGAVxEtd1Yqy8o6hZElNxK4RqEl0WM+uYP4EjOWnx
w7PnSj0J/lzVF+qk7awSH23CfQoif2m9BHXZ7C5wuGbl+KKX5REchX4anfJgUTlI
ABLycEmAEmFI4t0LiitB3pgPvQ8jUb5vRtYRPvYb2TXNUWabEBOeIrNRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkw+2HFymX4lhUyeiZfKDCtWnXVMB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsWQbYef
yL4pi/KEafXUbISILqwHKjQoc6tIG4t0LDicNcWLQgNBVzuMk1uLHC2wt7G5IqAd
Zebrh01AqElgEUAW3Vt9q1IgqEw+dQHLPUSKGDG1jZ/I2EgxnGN3TC+c1nvxI9H6
AZ+O/6rEnZDsdm7s9Z0FW8oqGzyzHP3EKxk1ujT84lT/9mV7jFP2DbJYaHHn+QHn
0wYAZFJAV8mF90BTVD2O5QM/Mj57WJ86StYFC9cKRNn7XF48yRQ/WGwwG7d5lkuX
pu32yuFbTT9rl7QmvBVrqTsXpJD5qR6lm+2eyU3Ajay0MAMCZm05CtsLmAXhKnza
ZH/dHcsrXMp11w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 03:25:27 2026 by rpki-client