Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json)
Hash identifier: n69I9hle81FONRm+OnpD49pFqyBK7uR/k6i+60ALAT0=
Subject key identifier: 63:79:59:1A:EB:FE:78:28:F5:7C:DB:98:2B:F5:66:24:C3:15:90:6C
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial: 019D37F706BC31F084060607F68D0B23E7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
Manifest number: 02AA
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: cQoqo0+2/hDBOnvLQHKddQ6ibg7KxHVg96T03yNkDXQ=)
2: x3o94WH-TgOrV8YIjfYebD2ph7I.roa (hash: CyAtLVMGC2bxnLh65hikiQFqfdhP3gxbZnIoqvK7pGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:06:bc:31:f0:84:06:06:07:f6:8d:0b:23:e7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=6379591aebfe7828f57cdb982bf56624c315906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:09:96:4a:1e:03:8b:cd:f0:58:d2:58:02:
ac:31:e0:48:7e:ca:2a:ec:84:f4:b5:fa:69:61:4d:
38:3e:2c:fe:03:49:68:4c:5b:b3:ae:67:bc:78:8b:
4b:5b:a1:31:35:89:8f:ed:6c:df:7f:f4:7d:29:1a:
30:03:15:03:a4:0f:c5:ad:05:66:0b:4f:eb:82:f4:
ac:bd:e1:54:47:72:09:26:58:d2:be:a6:5d:f5:12:
4d:71:b9:a0:a8:d1:d1:73:f9:2d:11:0c:d9:cf:d2:
df:13:12:6b:82:87:0e:fd:c6:29:1b:eb:8b:72:ce:
c8:86:6b:49:e4:15:26:9c:da:c6:c8:f6:d5:d9:f5:
1c:07:9f:d2:01:68:4c:f2:5b:28:99:56:b7:fd:2b:
82:22:1c:f5:48:94:3b:b9:26:f1:95:b7:ac:71:20:
5c:3b:05:cc:52:35:a1:8b:27:ff:56:97:d8:ee:35:
8f:33:e5:85:74:de:6c:af:44:6f:41:31:10:f8:bc:
7d:38:60:94:17:90:22:db:a1:b4:7f:6f:27:ef:23:
a8:12:96:4b:6e:ce:37:41:ce:d7:f0:f3:a4:55:f7:
41:9e:59:9f:51:c5:c0:bb:ea:77:23:f1:ab:7c:34:
13:14:c5:3a:ba:b7:7c:1f:7a:d2:15:ba:75:e7:ac:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:59:1A:EB:FE:78:28:F5:7C:DB:98:2B:F5:66:24:C3:15:90:6C
X509v3 Authority Key Identifier:
keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:10:53:62:49:b3:5b:9c:08:7a:d7:9c:0d:57:19:23:94:
50:c8:e5:4c:b4:dc:53:b3:57:10:5d:4c:f6:26:05:1d:7f:51:
08:a7:fc:fb:0c:46:fc:98:be:b2:09:5b:2b:d0:da:37:54:d5:
3e:5f:9a:0c:b1:a9:90:34:64:a0:d7:61:69:80:32:69:54:2a:
b3:e9:d6:b5:f4:1a:0a:33:9a:6d:13:8b:3e:d0:64:94:cd:c0:
a0:35:c9:a6:24:ac:b4:9a:86:24:64:87:af:8b:ca:ea:29:bc:
f6:c2:da:d6:2f:c9:c4:6f:3d:39:31:52:50:5b:b8:96:7b:16:
87:2a:66:2c:81:e4:a0:1d:56:ef:b1:c3:66:55:54:b3:68:93:
0b:aa:08:a2:ac:ab:07:6a:a8:61:00:5e:da:f1:c5:c6:fa:45:
7d:f7:67:69:29:0b:71:3e:6c:30:3a:75:51:0b:09:a9:1a:38:
7f:f9:61:75:4d:33:be:ae:c5:99:35:03:69:95:dd:13:7f:fe:
a2:49:2f:4f:21:41:87:4b:d6:f5:7c:44:59:b1:29:e9:38:7a:
5b:c1:da:c4:3c:92:36:bd:08:49:4c:8a:9f:ec:1a:6d:de:5e:
85:c1:6b:77:76:b8:cf:56:b5:90:a4:d7:71:68:00:05:e3:b0:
b9:af:85:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:17 2026 by rpki-client