Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: Gy8JayeCpJQ0HuNZGDBycWyZhv9crV9KoqjWVtX4QMA=
Subject key identifier: 7D:CC:99:B1:94:FF:5B:6D:C5:5F:82:B6:AA:32:70:E2:96:C2:C2:91
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019F129BF27A84A13ECC132B57E74E098CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 198A
Signing time: Mon 29 Jun 2026 09:00:37 +0000
Manifest this update: Mon 29 Jun 2026 09:00:37 +0000
Manifest next update: Tue 30 Jun 2026 09:00:37 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: Ha8OU936cFERtQA1fv+3fCdB10+4vmpBFoHjuQTZtJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9b:f2:7a:84:a1:3e:cc:13:2b:57:e7:4e:09:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jun 29 09:00:37 2026 GMT
Not After : Jun 30 09:00:37 2026 GMT
Subject: CN=7dcc99b194ff5b6dc55f82b6aa3270e296c2c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:a1:22:fd:a5:8f:41:50:98:2d:b9:d9:4e:
a9:16:b0:cf:80:5b:fe:6f:95:bc:84:1b:b7:36:16:
16:a6:97:8b:7b:f8:9a:f4:d4:5f:19:e4:0e:9a:8e:
ec:87:d4:b6:a6:02:a6:ac:61:3e:fa:f3:e0:18:66:
19:1a:ce:fc:45:d0:6a:7b:74:de:65:ec:e8:96:89:
f6:75:93:a7:4b:4c:12:ba:35:df:25:fe:60:c4:35:
42:01:60:87:e1:a2:13:a4:23:6a:b5:93:37:55:72:
69:3d:e3:ff:fd:3e:7c:1b:36:e5:fe:b7:b9:c4:86:
35:78:e0:12:ef:34:52:3b:dd:8f:08:a2:25:ed:fa:
ee:1f:2f:5d:20:19:6a:c0:81:e2:16:cd:36:34:be:
47:73:62:d8:4a:56:ab:a3:11:8f:cf:8b:7f:18:f4:
61:2f:81:4d:ba:b8:28:5f:16:f7:db:b0:a9:92:02:
02:bb:de:78:2a:5d:67:87:a4:6b:13:ab:36:97:5b:
30:0a:ed:b2:cb:f0:07:7d:1e:5c:ab:b8:77:ab:42:
d6:ce:e9:5a:f3:b9:e3:f6:92:17:53:59:e0:8e:35:
e9:8e:38:0b:49:81:2b:a8:6c:5a:f5:ab:97:5a:26:
7b:cc:c9:6e:eb:56:13:45:75:2f:e7:99:c9:30:f0:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:99:B1:94:FF:5B:6D:C5:5F:82:B6:AA:32:70:E2:96:C2:C2:91
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d0:c7:cd:0f:3f:04:39:72:50:b5:63:78:7e:e8:72:d9:ba:
1f:ab:37:86:04:42:bd:7c:0b:ed:7e:7a:08:b2:df:1c:72:73:
25:10:e3:57:ff:57:34:5b:45:8a:e8:69:c5:11:aa:cf:ac:98:
c6:f0:27:8f:93:94:73:95:85:ab:c2:72:27:94:d6:f0:28:68:
e5:36:57:f3:f7:59:4a:f9:aa:35:b5:75:e3:b7:e4:9e:17:92:
00:e1:d2:fb:9d:ea:34:79:6c:fa:a7:4f:bc:b5:90:c8:4d:7d:
4d:1a:90:42:db:8c:85:10:f4:4b:c8:32:e1:c9:8f:74:20:2e:
50:7e:5f:10:b6:9d:c3:84:ad:25:fc:7c:3e:75:30:0e:75:fd:
a7:c5:d7:bd:bf:c7:3f:82:99:ff:ed:48:7b:2a:a8:0b:21:ed:
b3:67:89:25:85:9b:9a:77:93:44:2c:32:41:e2:e2:4f:9d:1b:
ab:d7:4f:1b:a8:dd:ba:e1:2b:19:33:c5:50:2e:36:ba:ac:45:
42:45:9e:65:6f:ef:ec:57:bc:c8:15:54:9e:60:84:13:5c:ab:
e9:2e:7b:5e:a9:5d:cb:5b:8d:d1:81:40:17:6a:76:43:80:cf:
40:cc:80:e8:c5:e3:84:0f:62:b7:12:c9:04:7b:a5:54:54:c3:
59:8f:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:40:11 2026 by rpki-client