Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: jEfK4xrPPhwFUU8ce8cnDCyTH7M5O4yV4kvBxC49vJA=
Subject key identifier: 17:93:88:55:0E:01:96:D4:9A:1E:A5:66:46:6E:EA:8A:CF:D5:8A:38
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019E2ADE2D1F37B5477C9BCF47F537315A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1912
Signing time: Fri 15 May 2026 09:01:04 +0000
Manifest this update: Fri 15 May 2026 09:01:04 +0000
Manifest next update: Sat 16 May 2026 09:01:04 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: +FyUDQ/f5AOp+uWXKnhYAHCT87EgSo6E4vYwqYt32vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:de:2d:1f:37:b5:47:7c:9b:cf:47:f5:37:31:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: May 15 09:01:04 2026 GMT
Not After : May 16 09:01:04 2026 GMT
Subject: CN=179388550e0196d49a1ea566466eea8acfd58a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:82:46:52:83:d8:38:3c:d4:59:d5:e4:db:
d4:d4:a6:73:6c:f7:30:4c:f7:09:b8:a3:f0:c5:10:
4d:a5:c9:a8:86:f5:f4:67:97:25:69:69:5a:67:ff:
b7:53:22:a0:a5:0e:28:be:1d:87:e2:91:b0:c8:17:
86:0f:76:27:6f:9f:ae:6e:89:fd:76:98:42:32:fd:
f0:8b:3a:42:e0:08:11:d5:d8:e4:e1:f6:ca:e3:87:
9c:46:5b:94:c5:9b:f0:00:e3:3b:e9:e9:a8:cf:c9:
6a:4e:5b:0c:46:c2:95:24:ab:61:0a:41:52:32:83:
36:52:ba:6a:eb:a3:66:b4:2f:9e:2f:50:4e:52:b6:
a4:38:67:48:6b:fb:bc:1b:0d:36:20:5f:cf:1e:27:
cd:fa:76:a1:40:a4:5e:d0:c6:5b:40:70:7c:40:a8:
9a:39:6d:b6:7d:67:e8:45:29:81:1b:35:01:c6:77:
66:f1:65:bd:a7:dc:9f:cf:4d:54:52:da:17:25:8c:
b8:29:42:85:f4:bf:25:a1:4d:fd:6e:32:7e:04:09:
f1:f8:44:52:3d:7a:a6:22:d7:66:41:0c:69:a8:35:
cc:12:a8:10:7d:46:88:f3:fb:77:bb:64:16:c2:cc:
89:82:1f:5f:1f:7e:a4:49:7a:f5:32:56:85:99:c8:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:88:55:0E:01:96:D4:9A:1E:A5:66:46:6E:EA:8A:CF:D5:8A:38
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:55:5c:20:a0:2d:58:64:10:15:ab:a2:0b:ae:df:9b:3a:
0e:ef:c1:91:31:2f:0a:83:6d:1a:92:71:94:1a:d2:9b:6e:99:
44:0b:44:c1:01:bf:41:07:ec:ef:79:86:95:b6:f6:bb:b0:b8:
dc:0c:07:43:bd:dc:0e:e5:d8:af:c1:1e:e7:8a:e5:59:86:43:
1b:e2:ae:6a:2a:e1:db:7a:a1:e6:9a:09:fd:04:24:a3:37:d5:
eb:ff:69:ad:5b:12:59:55:a4:74:b4:d8:66:ce:1d:08:8d:98:
d2:2b:bb:5b:a7:06:22:f3:c2:c3:07:49:65:70:77:f2:21:38:
6c:4a:cc:c3:97:3e:68:69:12:a9:21:6d:3d:8e:cc:0e:cf:3a:
d1:c4:1c:dd:b8:7d:75:8b:96:be:ae:ac:8c:81:d3:d4:4f:ee:
8d:31:90:cb:fc:fb:ff:59:63:5f:19:f0:cc:2c:1e:03:76:41:
b2:cf:b1:e9:af:d2:95:18:cd:12:ce:e9:77:84:94:1e:6f:37:
6f:27:a3:73:3b:41:0c:99:b5:88:ee:7a:36:e1:db:34:a1:30:
b5:0e:2e:d8:c8:b6:38:c5:d5:87:9c:65:ce:b0:a6:3e:e2:74:
49:43:cb:a2:1d:ef:7d:c9:35:2a:d9:fe:de:07:ef:1f:f5:58:
01:40:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:54:43 2026 by rpki-client