Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: qn9yYmwP8wVgAA2lknthNLaXmj5JYzK5To0JWLPnNZg=
Subject key identifier: 7A:BC:68:C6:D9:8B:C9:80:FA:31:78:D3:26:1F:48:81:51:83:10:F3
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019D2628097FCB3B5027C9A0B1FAE45158D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1589
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: b7dlXVCr1JiTrGR2Ycui6IA1iGAP9MDcqyygHpknpig=)
2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:09:7f:cb:3b:50:27:c9:a0:b1:fa:e4:51:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=7abc68c6d98bc980fa3178d3261f4881518310f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:84:3d:8a:aa:9d:46:be:2b:a4:6a:06:d9:
52:35:9a:75:fa:be:ba:50:64:f5:da:17:47:fc:7d:
9a:19:d8:ca:17:c6:b8:9a:9d:38:8b:7c:31:3d:e8:
59:bb:b9:1e:54:94:9d:28:be:8d:b5:b6:89:76:d2:
88:de:6a:20:c0:61:07:7b:ae:f0:ce:a0:61:11:fc:
6b:18:2b:4a:cd:54:73:5c:78:77:4d:25:fc:af:e0:
da:65:d0:71:8c:80:06:fb:cd:d4:45:72:19:06:47:
89:00:5a:52:38:b0:6d:83:13:bb:2b:61:1c:3c:a3:
bd:6a:fb:21:28:fb:09:8f:4a:d5:a3:b8:1a:83:70:
6e:20:bc:6d:40:41:fa:18:dc:03:cb:a0:2e:47:4b:
be:41:d1:4a:d1:37:b5:65:d4:23:b7:ee:07:b7:87:
5a:f9:34:18:48:96:f5:22:32:48:b9:e9:cb:14:97:
77:c9:74:c4:06:6b:8e:1d:e8:0d:13:ee:3d:80:0a:
da:bc:a9:f5:cf:9d:de:2d:ae:64:7d:86:d6:a1:fb:
be:ca:1d:ea:32:b6:dc:3c:1c:81:08:e7:66:d3:fd:
ed:ca:24:f9:ae:ea:93:e0:c1:c1:01:40:91:07:eb:
5a:27:21:b3:f1:9a:1a:9d:94:3e:1d:17:5a:ea:c8:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:68:C6:D9:8B:C9:80:FA:31:78:D3:26:1F:48:81:51:83:10:F3
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d2:57:ac:f0:8e:a3:72:0d:b6:a0:25:3a:bd:67:f6:7d:96:
18:84:a8:2a:58:85:c4:8e:9f:8a:b9:9f:a4:3c:98:42:4a:90:
30:f4:a7:2c:36:fa:5f:11:c3:b3:e4:41:d5:5e:73:69:92:fd:
76:fb:b4:7e:b3:d7:bb:44:de:67:02:be:ab:60:52:94:5c:bf:
7a:29:7e:ea:76:9a:2e:b8:42:b6:4b:86:b6:67:10:6e:39:bc:
06:09:3d:ee:0c:dc:a8:98:e5:17:96:73:c8:2b:bc:e0:51:eb:
f6:20:bd:ca:35:5f:a6:3b:3b:29:01:fe:ba:ad:84:40:e4:91:
81:46:aa:77:8a:47:dd:58:56:f7:7e:78:a8:98:8c:f1:0a:36:
61:16:05:ed:7d:e0:54:ea:fc:43:e0:6c:e6:44:85:c3:6d:0b:
29:24:5a:d2:00:5d:22:51:b0:69:43:52:7e:eb:49:c9:23:db:
6b:62:8e:69:9e:bc:63:c2:ed:08:e4:ec:08:9b:8c:ee:18:19:
57:66:0a:91:ce:07:47:68:35:be:db:b2:fe:79:55:bc:e1:7f:
61:b7:ca:97:51:17:e4:75:78:3c:26:a8:0c:fe:0e:81:96:d6:
2e:53:e9:ae:5a:86:98:da:b7:bc:d2:76:d1:26:7d:6f:a1:ad:
e8:d7:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:04 2026 by rpki-client