Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: t4JF4KOC7MXNty0vXmsObmPUINYsO19L1GUClPx53/A=
Subject key identifier: 39:BE:73:C0:1D:DA:4C:85:AA:0C:62:EA:2F:78:62:E4:3F:0F:AE:C1
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 01A140BA1A57BD89289C39B79FD92346B198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 17A9
Signing time: Thu 15 Oct 2026 18:01:40 +0000
Manifest this update: Thu 15 Oct 2026 18:01:40 +0000
Manifest next update: Fri 16 Oct 2026 18:01:40 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: 4wPLcqa8SybdTnSAIS7Njr3h0P4tKNqZMqU2r7vfSjc=)
2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ba:1a:57:bd:89:28:9c:39:b7:9f:d9:23:46:b1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Oct 15 18:01:40 2026 GMT
Not After : Oct 16 18:01:40 2026 GMT
Subject: CN=39be73c01dda4c85aa0c62ea2f7862e43f0faec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:0b:d3:93:9b:25:d5:ac:f5:3b:d5:b1:d1:
7d:0b:10:7e:90:63:0d:67:67:d0:7c:f3:c5:80:ea:
30:18:c6:9c:9b:21:37:d0:54:ad:65:f0:74:67:55:
9c:db:e7:00:ed:20:39:24:16:91:75:73:9b:66:1d:
63:7b:51:a1:a6:2f:39:07:1c:fa:8d:77:dc:9b:f8:
4f:08:71:04:fb:66:93:3f:b1:50:2a:4e:28:20:70:
22:da:b2:58:e8:55:23:b6:2b:79:33:19:e9:25:8a:
ad:52:36:d3:36:e8:dc:da:0d:d0:dd:ee:88:b6:45:
9f:d7:ff:04:a0:7b:8e:ff:ba:25:6f:8d:c2:05:89:
fb:cc:e8:b1:00:72:50:97:b2:8e:17:ac:8f:75:65:
8f:89:3e:d7:0f:fb:1f:6e:30:ad:98:03:3d:27:11:
fb:d4:e0:64:11:c0:92:df:c9:8b:d9:4a:32:c5:53:
6f:a3:ca:7c:e2:ce:f0:cb:48:ff:48:9c:5c:f1:df:
95:fa:0e:16:10:b5:92:e4:e2:d9:43:6e:40:0f:b7:
8c:73:e0:89:8c:1a:81:d2:6a:23:b6:ea:33:b0:7a:
b7:70:ae:66:ee:d4:fb:0e:82:07:38:31:00:b1:37:
3a:a9:ef:4a:2a:2a:0c:b0:fd:45:f2:bd:79:94:19:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:73:C0:1D:DA:4C:85:AA:0C:62:EA:2F:78:62:E4:3F:0F:AE:C1
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:25:e8:1b:ad:ef:55:13:e2:28:b2:99:02:ee:09:25:51:23:
42:d1:cf:a8:ef:d5:fc:55:62:84:04:31:f7:99:7a:c2:47:9f:
ae:32:e2:c4:9f:f6:15:b1:2a:10:2d:cb:46:03:a1:43:94:ff:
ee:16:57:96:61:9c:0e:46:db:29:56:c0:54:6c:3f:9f:74:08:
03:35:d8:a1:fd:22:75:a7:87:87:38:e2:1d:2a:67:77:eb:47:
a6:89:d3:1b:d7:6f:15:8d:57:19:ea:6b:18:7b:eb:9f:ef:23:
01:36:76:8f:8d:23:b3:7b:cf:2e:02:81:08:ab:76:1e:74:cf:
1f:61:d9:6b:2c:ba:ff:f3:ab:44:d7:f5:41:a0:8f:a8:cf:7a:
15:05:26:b2:ad:ac:bd:a4:4b:e8:b2:fe:20:a9:be:ae:c6:48:
66:c0:35:81:bd:05:e4:88:35:60:d2:bb:d0:19:0e:49:f3:28:
57:3b:71:f8:dd:37:fb:f3:ca:6d:48:04:88:e0:6f:8a:42:ad:
63:88:16:c3:13:fb:3d:22:fe:2d:a4:e8:48:02:02:5b:07:68:
6e:27:37:6e:ac:df:98:12:c3:67:7c:81:31:bf:f2:55:a2:62:
9d:0e:9e:5d:01:2e:8d:05:1b:8d:68:13:28:27:82:f5:1f:f7:
75:02:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:10:41 2026 by rpki-client