Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: Fs5nOK4gxP7GWotF6pfK1Ur+vNZ5tMX5ey0+buHnDLE=
Subject key identifier: 4B:4A:8A:A7:EA:9A:89:9D:FB:3C:5F:54:87:07:32:B5:14:A4:FA:F6
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 01A03FE046FB2670B7A24EE7BDF199D0C91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1A26
Signing time: Wed 26 Aug 2026 21:00:57 +0000
Manifest this update: Wed 26 Aug 2026 21:00:57 +0000
Manifest next update: Thu 27 Aug 2026 21:00:57 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: JcqgR7+8DVeKMIUyPTWGDp3d8n8/PwdKOlLOpTuFj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:46:fb:26:70:b7:a2:4e:e7:bd:f1:99:d0:c9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Aug 26 21:00:57 2026 GMT
Not After : Aug 27 21:00:57 2026 GMT
Subject: CN=4b4a8aa7ea9a899dfb3c5f54870732b514a4faf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:24:37:13:cd:81:0f:ab:da:d7:90:d6:19:
8c:d0:b0:6f:b2:dc:0f:eb:1a:75:d9:e0:5e:a2:2d:
53:0c:c1:51:ab:b0:e1:f3:49:e1:01:26:40:87:74:
f8:74:71:ca:07:eb:d2:0e:e8:77:46:19:c8:78:5b:
1d:05:e3:c0:f2:ab:ff:2b:c3:80:58:86:9d:a8:18:
5a:4a:ae:69:90:36:f5:07:40:ec:fd:b0:3d:79:be:
b1:8f:bf:b6:53:ab:c1:79:e0:8f:6c:a4:1a:6e:6f:
3c:c8:c4:cc:b0:60:17:b9:94:34:22:18:40:69:6f:
a9:58:01:f2:b1:c2:aa:71:7d:10:90:ba:ca:18:7d:
df:7b:3a:dc:e1:a5:cd:a6:9e:6a:6e:28:7a:67:5b:
24:53:28:bb:36:17:0a:95:a0:96:29:6a:31:45:7d:
0b:65:b9:f0:87:e1:3d:a8:e5:ec:1a:88:09:79:9c:
34:0a:12:4d:07:f6:40:3c:71:f1:2e:4f:0b:bb:f0:
e3:cf:75:9d:b6:ab:2c:f4:2a:f4:18:49:ae:84:7b:
10:6e:58:6b:9d:94:3a:ab:8c:94:fb:a0:a0:e7:54:
43:75:14:80:a4:00:9b:35:c8:4b:11:32:81:37:20:
13:04:c3:15:58:1f:4b:02:c9:b8:e7:64:35:b6:e8:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4A:8A:A7:EA:9A:89:9D:FB:3C:5F:54:87:07:32:B5:14:A4:FA:F6
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e4:83:32:69:09:09:01:9f:ae:6d:55:b7:ce:b3:55:29:11:
c9:0a:e7:8b:db:b2:96:73:78:35:8c:35:58:c2:69:9a:0c:30:
ca:b5:e9:ea:48:2e:58:e0:ba:e1:bc:a7:cf:d1:47:28:e2:3f:
78:a5:3e:6f:cb:32:38:79:3d:1f:62:f2:77:e8:be:36:0d:64:
0c:bc:4c:89:c1:2f:10:fb:e5:0e:29:04:7f:0f:3f:96:46:ee:
00:eb:ea:76:41:d3:48:c1:2c:17:79:e9:45:48:85:f5:97:b0:
41:d8:f0:c1:a3:16:50:62:ed:0b:b0:79:c2:4a:93:fb:68:32:
9f:f3:90:a8:c0:34:e6:70:64:da:fe:cb:8c:ed:76:4c:2f:a8:
14:72:81:d4:aa:11:15:04:77:5d:31:c3:7f:a2:93:0c:80:be:
b3:0e:8d:9e:ab:a9:db:67:61:2a:4b:bb:31:0f:d9:6c:81:a4:
ce:51:39:b1:b7:76:20:68:72:41:7e:02:51:c9:ab:7b:1a:6c:
0b:29:b9:a2:a5:6a:25:b3:84:15:59:49:ad:ca:af:03:bf:b7:
8a:a3:22:b3:f4:2c:3f:33:12:4a:49:f7:9b:b9:f9:27:da:d4:
5f:bb:ca:a4:c9:c4:24:ba:df:7f:b0:d9:e1:4c:09:f2:0c:91:
c0:24:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:00:38 2026 by rpki-client