Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: AWr3LZ7S+OTQFYJPNkufb2R9blct2jMFvwGAVrpEtBg=
Subject key identifier: B8:C1:7D:76:BF:A4:B5:5B:4E:0A:F6:FE:86:82:1D:C1:08:BF:5E:49
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019D37896A9706F5D91A562C6A1B950BF028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1592
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: uGtrdC51+iyF7jXE69zl0/QOarzXeQ5XVjUCGDnij9I=)
2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6a:97:06:f5:d9:1a:56:2c:6a:1b:95:0b:f0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=b8c17d76bfa4b55b4e0af6fe86821dc108bf5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:82:6f:49:43:72:b4:65:7f:4f:39:85:d2:
6f:57:5e:bc:36:17:1e:d8:62:f1:ae:f5:d4:c3:2a:
9a:53:17:f1:a2:6c:68:ed:7d:fb:a9:05:5e:b8:0c:
b5:e3:dd:a3:78:49:ed:48:01:f9:f3:9b:a8:50:74:
d9:42:e1:85:41:31:06:70:8d:f3:09:50:77:c5:8a:
bc:6e:b7:47:9b:d2:25:94:d0:02:e3:40:f7:32:09:
af:88:80:2f:76:93:d3:60:a9:85:15:d2:13:b1:cd:
4c:35:6b:ca:1e:cd:42:c3:f5:39:c3:27:74:28:eb:
16:04:33:98:39:d6:54:33:36:eb:53:05:01:92:68:
7f:09:ec:79:0e:a0:38:3b:bf:e8:ec:1d:10:9c:0b:
29:b2:36:05:87:22:7a:06:52:79:86:36:69:a4:0b:
9e:f6:15:3c:85:37:de:77:ca:ed:4d:a4:8f:b0:40:
ff:e7:8c:3c:d9:96:d0:86:06:1b:18:df:b7:1b:cb:
0f:58:3d:b0:84:76:4a:1b:94:d0:a2:fd:36:ec:c9:
fb:07:fe:ea:d0:14:57:6b:a5:03:15:48:64:b9:99:
01:b9:9d:b2:ae:7e:8e:e1:3b:0c:2f:dc:74:cc:98:
50:dc:a4:d6:73:37:16:96:c0:ad:10:57:d8:ff:e0:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:7D:76:BF:A4:B5:5B:4E:0A:F6:FE:86:82:1D:C1:08:BF:5E:49
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:eb:3d:70:67:74:d5:a3:c7:ba:15:ec:d6:f1:bb:0e:b9:d2:
30:eb:fe:32:e8:82:35:7c:6a:6a:72:fc:c0:44:95:83:d5:04:
d8:94:33:ae:f4:13:43:bc:ed:09:62:bf:64:80:73:51:6e:e9:
e0:4b:ec:f7:e7:7a:2c:6d:1e:71:70:8a:16:e5:52:6a:0c:22:
7d:0b:84:9e:99:ef:29:05:9b:d3:09:b2:3d:c7:14:f3:76:e3:
f7:62:e5:d5:6e:71:5f:f9:18:d8:6b:b9:6d:22:6b:d0:6c:c2:
f2:0b:03:9b:6e:21:0e:ac:13:5b:b9:ee:92:73:68:6f:70:d7:
ef:79:4a:8c:1c:2d:23:72:38:24:2b:40:2e:d9:76:f0:e9:ec:
14:f6:ce:15:b1:89:31:ea:7b:a3:d3:63:e5:57:75:dc:5e:e9:
60:f6:8b:cf:dd:38:ce:c7:1f:00:b0:f4:75:bd:df:8f:be:77:
1b:c0:82:12:72:af:27:ab:35:dc:69:7f:18:71:43:31:ef:03:
8f:cc:e4:46:a1:98:5d:f2:40:bc:91:89:af:9d:b6:86:57:8e:
02:f7:96:06:49:f8:13:36:58:78:55:79:c6:fa:69:40:f9:43:
d5:9f:31:01:9d:87:46:07:81:35:2c:6b:e1:08:51:89:45:7e:
be:ec:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:09 2026 by rpki-client