Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File: MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier: k+Jne4l3gNqvPRwOflVhngjghMf90kgdsnTSidL5Iq0=
Subject key identifier: AF:4D:44:48:6F:0F:A5:BF:4A:B5:A6:28:0B:AC:1D:9D:93:53:54:7B
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer: /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial: 019E1DFE67DE7FE38AD68BA255677FC4D789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number: 0856
Signing time: Tue 12 May 2026 21:01:12 +0000
Manifest this update: Tue 12 May 2026 21:01:12 +0000
Manifest next update: Wed 13 May 2026 21:01:12 +0000
Files and hashes: 1: 1SJhyocRudC4i3a4wpxvnXhK1TE.roa (hash: Q8DohD/O4S8CVYT18myTFMGAt4L6+jeYMfQ4zRODCWc=)
2: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: yOY1SKv3YTvyzJUzpjyvvfzqRsKriiScJvWCLWbrtcg=)
3: XpKKyExlunDnIgewiAZPtg86MrQ.roa (hash: wS0s5Zz3UFUtCAGlt2SFNPs++jwDVKFp6MczP/XrPT8=)
4: yYnjMSBD0N1GdUhW8b3gkCvcBTY.roa (hash: UXD6Z2ZYC62V3GCh/SczjWuD8By0eruoWG1wzac/bwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:67:de:7f:e3:8a:d6:8b:a2:55:67:7f:c4:d7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Validity
Not Before: May 12 21:01:12 2026 GMT
Not After : May 13 21:01:12 2026 GMT
Subject: CN=af4d44486f0fa5bf4ab5a6280bac1d9d9353547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:82:0a:a8:4a:83:05:61:f0:55:eb:54:aa:
bd:48:39:2a:36:98:45:ac:16:9f:4d:5c:92:ab:92:
6e:ca:10:c4:7a:fa:e6:f0:08:f3:b9:72:89:29:bb:
16:8c:34:95:4a:7a:e7:05:ce:9c:7a:f5:94:52:8a:
10:90:3e:ff:38:59:b9:db:d7:a1:f0:f5:d2:ed:d7:
ce:b2:6b:e4:0d:2d:37:cc:62:a6:7a:b5:24:aa:90:
c4:56:08:cf:55:62:e4:a9:fe:12:38:02:50:1c:99:
a0:65:c8:2a:5f:2b:ab:81:49:09:53:fe:16:7c:7e:
ca:33:18:59:ad:4f:7a:91:14:43:64:42:64:e4:d2:
5f:ae:da:f2:85:31:30:3e:00:a8:0d:24:da:5e:22:
e4:34:dc:09:2d:e8:80:8a:25:de:d8:b9:f6:c8:fa:
a9:fb:7b:72:70:6d:88:64:e0:ec:1d:8a:88:7c:11:
18:c1:11:5e:c3:6c:fc:98:ee:77:4a:1f:05:a4:04:
10:d3:b3:19:82:41:3e:d7:06:c2:f9:11:7a:b4:11:
ed:aa:76:10:f1:88:cd:53:b4:85:91:c1:70:5f:ab:
2a:34:fa:87:35:8f:0d:ec:4b:b4:d2:c5:be:d8:13:
de:59:1a:3d:76:8d:ae:2b:6d:96:2c:3c:79:76:b9:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:44:48:6F:0F:A5:BF:4A:B5:A6:28:0B:AC:1D:9D:93:53:54:7B
X509v3 Authority Key Identifier:
keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a2:41:36:d8:b6:bd:96:49:1c:58:70:1b:67:b1:e1:d6:12:
8e:c7:d6:cf:22:73:e1:ed:cd:a5:6c:d3:b4:a0:c8:39:04:4b:
ea:af:83:d6:d7:e0:0b:1e:03:37:f0:0c:4b:0c:8d:3a:19:f5:
fa:90:49:36:1b:c3:44:5c:4e:f9:3b:ba:66:03:63:79:71:37:
a4:0e:4a:e7:94:82:8c:78:b7:b0:58:d9:9e:15:26:96:3b:fb:
10:71:7c:f7:3f:7c:08:df:28:65:c3:78:b9:ff:84:cc:96:8d:
be:3a:ae:67:99:ae:24:63:3f:51:74:41:12:20:53:69:4c:37:
6d:72:29:90:46:fb:b8:4f:57:08:cc:e3:a9:97:36:8d:75:0d:
fb:1f:19:e9:a0:33:27:5d:33:de:77:3c:85:cf:53:fe:c6:ab:
45:a5:e4:85:3d:35:8f:70:d1:cc:ba:94:c0:5f:a8:a5:99:e2:
b9:71:3d:1e:cb:c0:13:f8:8c:8f:75:9b:bc:62:93:7e:9a:1b:
91:a3:bf:4c:cc:86:f9:85:54:ad:37:9d:e4:ba:86:81:0e:d4:
32:e1:d9:69:11:e7:e9:f0:1b:70:b7:21:48:cc:02:35:f0:92:
bc:c5:3e:f5:6c:e7:1c:d3:98:77:57:49:54:63:e4:47:f3:54:
76:7c:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:12 2026 by rpki-client