Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: yW3rS0znRlO6qJp/bCmNSt4oeplA6PXw/wXupxqBxaA=
Subject key identifier: 31:D1:BF:1F:7B:32:F5:B5:60:19:14:5D:F9:95:91:E3:6D:D7:03:D6
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019D3977BFD47A47D67F2D7CD1DD2E1F4F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 12:00:42 +0000
Manifest this update: Sun 29 Mar 2026 12:00:42 +0000
Manifest next update: Mon 30 Mar 2026 12:00:42 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: cPA0gp84tGQxow2Y/FS9nMl8yl9ZsRzDaOJSe+3QwvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bf:d4:7a:47:d6:7f:2d:7c:d1:dd:2e:1f:4f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Mar 29 12:00:42 2026 GMT
Not After : Mar 30 12:00:42 2026 GMT
Subject: CN=31d1bf1f7b32f5b56019145df99591e36dd703d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:cd:9c:12:7a:70:0d:8b:39:f5:3b:1f:7a:
fa:05:47:cb:0f:40:81:bb:47:ae:5a:2d:86:8f:62:
e4:a6:a6:77:e1:77:78:c6:60:23:9b:40:b6:2a:27:
19:b5:88:43:37:6e:6a:42:87:8e:71:4d:2f:30:8b:
1d:88:e4:9e:60:78:06:cc:55:c6:37:c6:86:2a:c3:
63:bc:e9:71:1b:bb:cb:45:8c:a3:37:76:67:42:98:
4a:d3:a7:4b:88:91:03:01:d6:e3:26:a1:aa:34:b1:
6a:9c:d3:01:80:cc:65:72:11:bb:ab:b6:67:8a:b1:
2e:04:3f:b9:54:69:a0:e3:d6:05:09:e3:75:5b:7b:
44:0d:13:fd:a9:89:6e:a0:d5:be:45:e7:2b:9b:7e:
b6:ed:df:27:38:f7:cc:59:04:0f:73:0c:89:58:1b:
ec:47:48:6a:81:72:c1:7c:08:95:06:af:89:b3:fd:
77:62:1d:27:84:e5:39:c9:af:34:41:0e:c1:8b:b3:
4f:f8:e4:a1:b9:2f:b5:11:61:71:8f:97:ed:fe:7b:
10:75:bb:17:29:25:b5:38:6a:76:fe:49:c2:2c:16:
dc:e8:e0:34:1e:17:5b:f2:65:77:2a:51:83:dc:11:
69:52:94:ee:f3:44:e4:3b:4d:cc:7b:41:e6:15:32:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:BF:1F:7B:32:F5:B5:60:19:14:5D:F9:95:91:E3:6D:D7:03:D6
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:e9:19:7b:b7:2e:44:9c:43:9a:51:e1:d1:8a:ce:96:92:
e5:0c:3b:f9:36:88:94:fa:25:d0:63:53:0f:f4:46:c3:18:51:
50:44:52:1f:b9:6d:10:0e:02:a1:2b:ac:83:ed:56:d1:88:d5:
ec:ab:1a:49:69:66:f0:99:69:85:08:99:ce:5e:68:0f:0e:ff:
51:e7:69:c4:be:fc:ee:3b:95:87:3a:33:18:bf:4e:01:20:19:
1a:aa:5b:fc:50:80:3f:86:e9:3e:2e:56:5d:56:6a:17:72:b3:
76:30:2b:f1:19:66:bb:be:02:1d:c3:68:8e:57:33:52:40:61:
d2:6b:43:be:20:83:78:89:ca:e7:17:5f:62:54:cd:72:06:70:
8a:e9:5d:3d:ac:0f:6c:76:9c:7b:02:b2:e4:91:37:73:66:c4:
b8:48:14:48:b5:2d:f3:83:f2:c9:bd:a7:9f:d1:6e:88:a8:6d:
39:06:61:64:4e:eb:2e:89:22:d3:aa:fa:93:58:36:57:f5:26:
71:ba:a2:26:1a:79:eb:29:f8:95:a1:16:79:da:7f:0c:49:fe:
73:12:85:4d:42:fc:9f:31:6a:b4:7a:85:45:84:23:c4:8e:ad:
45:eb:5f:ef:99:7f:7c:56:9c:79:c5:4b:2c:e4:3e:42:e6:3e:
8c:83:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:15 2026 by rpki-client