Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
File: M27g-MBTE_4RyEitRrz9homk0zg.mft (raw, json)
Hash identifier: 3njnBbhC6WgHt0GaH1oW+qD7L5EVqDpNNDQz7LaiV6A=
Subject key identifier: 6C:B9:7D:97:DF:1E:A8:29:2A:A6:83:EF:52:E2:72:09:02:86:2B:48
Authority key identifier: 33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38
Certificate issuer: /CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338
Certificate serial: 019D378965B5571CEBF056AC781679C3CCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
Manifest number: CD
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: M27g-MBTE_4RyEitRrz9homk0zg.crl (hash: rpyFi3u1ieFTZPMpcB7rZhEHZTEAQPm+TC8WtXyGxwc=)
2: UdbPrpWZnVUI8xYJ93EGzy3y3Fo.roa (hash: YUbFLz2txfa5ZpLLO9VEEJXfhsSpca/Bp2yKiziVyTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:65:b5:57:1c:eb:f0:56:ac:78:16:79:c3:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=6cb97d97df1ea8292aa683ef52e2720902862b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:23:9b:99:30:0c:d6:23:5f:18:a9:64:3e:
13:e3:9a:03:c5:41:cd:fe:a6:84:c0:55:9b:4d:e4:
45:36:35:eb:7c:5b:a8:d3:b4:68:43:9e:4b:89:19:
1e:79:49:32:63:66:dd:e0:ee:f5:91:7f:71:d1:70:
25:72:64:5d:67:3a:52:90:6a:b0:ba:85:19:15:a6:
14:62:6a:fd:88:00:5d:d0:e9:cc:a8:4e:77:20:a5:
41:ef:7b:5f:70:bd:d7:b8:bc:72:79:a3:86:32:b4:
66:5f:eb:f5:74:7c:a4:23:66:6c:b0:8f:30:bd:ac:
d4:97:3a:42:70:49:d3:9d:d9:06:d9:02:a6:bb:09:
e2:0b:21:8c:06:3d:75:74:3c:dd:58:0b:0c:9e:a5:
28:9a:c9:f7:56:22:44:51:af:9c:66:25:8c:6b:eb:
fb:76:24:d1:73:6b:95:6e:62:8d:a5:aa:91:75:27:
56:c0:00:14:97:28:40:41:6e:a3:73:ce:88:f4:be:
0e:6d:e3:ac:03:7e:15:8d:e5:9f:8b:63:fe:e7:3e:
7a:3c:f1:72:07:89:74:fa:96:7c:aa:76:ab:12:a4:
ce:c7:ec:dd:9d:87:1e:81:a9:d5:a7:8e:06:c3:c6:
61:60:e6:fa:98:ed:72:70:6b:03:a7:ce:07:59:a8:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:7D:97:DF:1E:A8:29:2A:A6:83:EF:52:E2:72:09:02:86:2B:48
X509v3 Authority Key Identifier:
keyid:33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:c9:82:9c:93:c8:a9:12:49:24:2e:26:c4:55:7e:71:d1:
6b:e7:e1:73:a4:1a:de:fb:27:d8:01:db:c9:4a:74:cd:e8:e9:
dd:3b:d7:08:e8:3e:cf:7b:68:b0:e4:46:60:c6:db:1d:5c:33:
19:eb:a0:53:de:9a:99:27:a2:90:8c:77:e5:37:22:0c:76:18:
7f:77:1c:3e:bc:db:13:56:18:3b:36:a3:88:33:16:79:92:d4:
53:57:05:7a:17:f1:27:35:c1:20:36:3b:a8:5b:06:e5:b8:6f:
80:62:1c:3b:db:99:87:eb:37:53:f2:63:4a:9c:47:76:59:6f:
ea:3e:cb:cb:83:99:8b:08:62:4a:ce:ec:72:f7:67:ac:c2:1a:
69:17:90:91:fe:f2:b2:41:44:78:ec:a4:93:08:06:b9:98:dc:
d0:28:8e:cd:c3:fd:fc:cd:af:f1:d0:e7:e8:54:1f:58:7e:00:
4c:87:fa:82:56:97:65:7d:ff:d7:c4:c2:70:51:72:39:18:a7:
02:61:0a:fa:73:bf:ab:52:a2:02:cc:cb:68:db:28:dd:ae:a3:
02:bc:9a:e0:2b:3c:d8:4a:9b:96:77:b2:52:48:e7:1e:f9:69:
56:aa:79:2d:12:96:e1:cb:7a:3d:12:30:25:5f:95:da:ba:2b:
8c:03:ce:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWW1Vxzr8FaseBZ5w8z1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmVlMGY4YzA1MzEzZmUxMWM4NDhhZDQ2YmNmZDg2ODlh
NGQzMzgwHhcNMjYwMzI5MDMwMDQ0WhcNMjYwMzMwMDMwMDQ0WjAzMTEwLwYDVQQD
Eyg2Y2I5N2Q5N2RmMWVhODI5MmFhNjgzZWY1MmUyNzIwOTAyODYyYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wjm5kwDNYjXxipZD4T45oDxUHN
/qaEwFWbTeRFNjXrfFuo07RoQ55LiRkeeUkyY2bd4O71kX9x0XAlcmRdZzpSkGqw
uoUZFaYUYmr9iABd0OnMqE53IKVB73tfcL3XuLxyeaOGMrRmX+v1dHykI2ZssI8w
vazUlzpCcEnTndkG2QKmuwniCyGMBj11dDzdWAsMnqUomsn3ViJEUa+cZiWMa+v7
diTRc2uVbmKNpaqRdSdWwAAUlyhAQW6jc86I9L4ObeOsA34VjeWfi2P+5z56PPFy
B4l0+pZ8qnarEqTOx+zdnYceganVp44Gw8ZhYOb6mO1ycGsDp84HWahEHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy5fZffHqgpKqaD71LicgkChitIMB8GA1UdIwQY
MBaAFDNu4PjAUxP+EchIrUa8/YaJpNM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lZTk2ZjgtNzIzZi00ZTg1LWFjMWUt
N2YxOTgyZDI1N2YyLzEvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lZTk2ZjgtNzIzZi00ZTg1LWFjMWUtN2YxOTgyZDI1N2Yy
LzEvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfjJgpyT
yKkSSSQuJsRVfnHRa+fhc6Qa3vsn2AHbyUp0zejp3TvXCOg+z3tosORGYMbbHVwz
GeugU96amSeikIx35TciDHYYf3ccPrzbE1YYOzajiDMWeZLUU1cFehfxJzXBIDY7
qFsG5bhvgGIcO9uZh+s3U/JjSpxHdllv6j7Ly4OZiwhiSs7scvdnrMIaaReQkf7y
skFEeOykkwgGuZjc0CiOzcP9/M2v8dDn6FQfWH4ATIf6glaXZX3/18TCcFFyORin
AmEK+nO/q1KiAszLaNso3a6jArya4Cs82EqblneyUkjnHvlpVqp5LRKW4ct6PRIw
JV+V2rorjAPO9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client