Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: Iy4wyVxLIxe0B+e7h2GZjlw0ewdSw9CFeKVuLDdQ1OA=
Subject key identifier: 1A:99:8C:C9:DB:A5:6E:56:A2:7F:E5:AC:C6:3C:FD:54:77:3F:90:4B
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019E30A98AF515BF690D3A54CA4474CA4CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1613
Signing time: Sat 16 May 2026 12:01:17 +0000
Manifest this update: Sat 16 May 2026 12:01:17 +0000
Manifest next update: Sun 17 May 2026 12:01:17 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: i5H37OLaIWtdEMjvLfjvvw/USIm6v2t1LEbaN1B9KPU=)
2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:8a:f5:15:bf:69:0d:3a:54:ca:44:74:ca:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: May 16 12:01:17 2026 GMT
Not After : May 17 12:01:17 2026 GMT
Subject: CN=1a998cc9dba56e56a27fe5acc63cfd54773f904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:ad:3d:b1:83:32:b5:70:b0:d3:3b:0b:5d:
16:eb:19:91:6f:a6:c2:6c:68:2f:65:f8:44:09:bf:
26:10:82:4e:bd:a6:67:3f:9e:71:e5:ff:5e:c6:f6:
a8:89:ff:15:0e:64:33:62:3b:39:c7:9f:6b:37:af:
40:8d:62:bb:21:fd:2c:ed:1b:46:91:5a:d5:8e:a8:
86:d1:35:fa:f8:71:a9:9a:c0:d0:81:51:44:ac:24:
8b:0d:11:b8:78:5c:01:18:00:13:e5:8d:53:17:d9:
a3:0a:86:22:14:bf:67:26:f0:08:ad:39:a4:96:f4:
be:39:43:dc:c9:52:a3:89:ba:0b:26:a8:99:49:5b:
d6:43:4e:e2:36:c1:f7:fc:d8:b6:b6:c9:ae:81:c5:
0a:c9:88:60:b6:3e:c5:c5:24:82:fb:51:4c:fa:4d:
03:39:a2:2d:5b:d3:60:d3:70:f5:3c:82:fc:97:b8:
cd:ed:58:fb:fb:f1:e3:5f:12:1f:bc:4e:8b:d6:34:
f4:38:9c:e8:7c:62:dd:f6:d2:29:b3:3d:e0:23:00:
d0:f3:92:40:73:11:2c:ae:84:b9:a6:24:7e:e5:1b:
89:8a:02:82:fd:a0:89:5c:c7:44:0f:e4:30:1a:21:
d8:fd:21:20:17:6d:3d:18:5f:b5:18:c1:06:64:76:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:8C:C9:DB:A5:6E:56:A2:7F:E5:AC:C6:3C:FD:54:77:3F:90:4B
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d7:9b:63:70:74:9c:43:34:b7:06:3d:27:0e:e6:8c:bd:57:
a8:66:57:79:87:4d:48:ed:26:9b:a0:2b:84:3c:59:5a:0a:c0:
7d:b8:2f:49:fc:4e:d0:4a:ad:88:22:8d:8e:20:a1:1b:7c:71:
76:4c:4b:46:f9:87:60:98:be:88:32:f9:c5:3f:bd:93:04:c6:
78:55:3a:0d:2e:42:2c:c1:c4:f7:a9:5b:42:99:fc:48:58:63:
ad:1d:2b:04:a1:49:cc:0e:4a:3e:ad:2f:12:9e:4f:bd:fa:be:
37:0b:e4:bc:62:af:20:03:f4:30:de:95:0b:f8:6a:73:29:1e:
b7:49:4a:c1:3e:cd:d1:8e:2a:29:df:81:c7:fa:bf:70:ae:4a:
87:dd:6e:49:13:0e:0d:40:fa:c5:d3:b2:38:d1:cb:bb:50:82:
27:cc:b5:12:4c:6a:d8:67:88:7a:f8:2d:b5:c1:c0:86:58:d2:
47:82:44:da:b4:9d:47:f4:7a:5d:95:e6:e6:0c:67:7b:37:f5:
39:32:4c:fd:03:2b:ee:e5:aa:56:b9:6b:ee:b8:db:a3:e6:70:
6a:c0:90:08:f3:cc:de:79:c9:0f:b1:7c:c1:57:28:1f:35:44:
1a:b1:67:ee:fc:e8:58:61:04:bc:66:aa:7f:ad:c3:01:07:e8:
47:23:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:57 2026 by rpki-client