Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: ITcYwscDWd6Y0HTsFBwD7wnetSec1WnqdKZaaSLDx8E=
Subject key identifier: 58:C0:77:B7:8D:1A:CE:F6:B5:B9:7A:E0:9C:C3:19:E7:A9:29:1F:E4
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 01A100FF3FCF898CA531CBFF208D3B1BD9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1A8A
Signing time: Sat 03 Oct 2026 09:01:30 +0000
Manifest this update: Sat 03 Oct 2026 09:01:30 +0000
Manifest next update: Sun 04 Oct 2026 09:01:30 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: +ZBW6LhCG30bcdYZ1C57MNTIjg6Prt4xevIz+whV0is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:ff:3f:cf:89:8c:a5:31:cb:ff:20:8d:3b:1b:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Oct 3 09:01:30 2026 GMT
Not After : Oct 4 09:01:30 2026 GMT
Subject: CN=58c077b78d1acef6b5b97ae09cc319e7a9291fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:26:49:52:c6:e6:84:d6:96:ad:6b:1d:3e:
31:0c:42:0b:09:f2:0e:12:4e:31:c0:1a:47:44:9d:
67:80:8c:0e:33:50:25:5e:c0:90:75:c4:02:ca:ee:
3e:d7:27:06:92:29:f2:95:38:de:74:a7:c7:a7:5d:
54:52:fa:20:6b:b7:94:d6:ef:ac:45:95:32:e8:16:
d5:84:a6:12:11:34:7e:80:67:f8:a9:b4:8e:eb:2d:
fb:dc:4f:63:42:cf:ff:c8:3e:89:e0:d1:e6:e0:6f:
84:c5:10:eb:bd:fe:d5:e2:4c:42:62:30:a7:d4:40:
aa:ca:9d:82:6a:2d:5a:4e:25:4d:f1:80:ed:91:9e:
09:c0:e5:0c:2e:c5:79:c4:4b:34:11:c1:05:b2:87:
d2:e5:06:5d:d8:5a:aa:7e:38:ce:2f:9d:70:03:21:
48:f1:30:d6:52:6d:20:e9:7c:6b:49:e5:39:23:f3:
ab:61:53:10:50:cf:d5:65:2c:58:0d:47:7a:a0:0c:
16:c3:e9:c1:a0:2e:a4:85:8a:0c:35:14:6d:9a:d0:
b3:dc:94:5f:b3:ba:91:84:47:a9:c5:2d:d2:65:29:
d3:9a:10:18:e4:36:7b:6a:e4:b7:9b:8b:98:fe:0b:
02:11:3d:52:6d:29:22:0f:0c:c1:46:b2:ea:58:ef:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:77:B7:8D:1A:CE:F6:B5:B9:7A:E0:9C:C3:19:E7:A9:29:1F:E4
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dd:74:e7:75:ed:6e:98:e9:a5:21:b5:2a:e8:0c:21:e1:18:
8c:17:8e:3c:1e:39:f2:16:ff:b4:86:da:d3:33:08:d6:f7:a8:
19:75:97:02:81:a9:62:55:ef:4b:73:98:6d:27:bd:04:1f:2e:
2f:e0:51:3f:ff:ad:f5:5d:01:85:53:2a:04:e0:d8:9b:6a:c5:
d5:75:31:56:2b:45:df:cd:89:ed:2e:1d:c5:69:1f:a0:6b:71:
e9:ea:8b:03:a1:bf:1b:eb:22:fe:78:1a:52:04:80:31:97:55:
ed:17:6e:35:c6:0f:c4:f8:e0:04:4c:da:f7:52:0a:7f:6d:6c:
dd:de:df:f6:10:58:db:d1:d0:cc:90:5a:82:fd:f0:ac:89:cb:
82:18:71:53:87:17:7c:e0:41:29:56:34:e9:8f:fb:3e:3b:1c:
c0:d8:34:9a:32:96:16:63:6b:33:94:d3:c3:36:67:a2:b2:ef:
a9:14:52:c0:f3:8f:4e:70:67:50:94:6e:d9:49:39:82:31:ef:
43:3c:64:90:b9:d5:93:2f:f0:72:ef:6d:f2:79:f0:33:56:8b:
cc:22:c4:0a:95:8a:3d:93:61:0f:ad:be:3b:ec:8f:51:f0:f6:
c3:44:1f:06:9c:d4:bd:2e:92:7b:fd:85:7c:d5:05:00:26:3a:
9c:d5:ee:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEA/z/PiYylMcv/II07G9n1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj
MDUxNGUwHhcNMjYxMDAzMDkwMTMwWhcNMjYxMDA0MDkwMTMwWjAzMTEwLwYDVQQD
Eyg1OGMwNzdiNzhkMWFjZWY2YjViOTdhZTA5Y2MzMTllN2E5MjkxZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+EmSVLG5oTWlq1rHT4xDEILCfIO
Ek4xwBpHRJ1ngIwOM1AlXsCQdcQCyu4+1ycGkinylTjedKfHp11UUvoga7eU1u+s
RZUy6BbVhKYSETR+gGf4qbSO6y373E9jQs//yD6J4NHm4G+ExRDrvf7V4kxCYjCn
1ECqyp2Cai1aTiVN8YDtkZ4JwOUMLsV5xEs0EcEFsofS5QZd2FqqfjjOL51wAyFI
8TDWUm0g6XxrSeU5I/OrYVMQUM/VZSxYDUd6oAwWw+nBoC6khYoMNRRtmtCz3JRf
s7qRhEepxS3SZSnTmhAY5DZ7auS3m4uY/gsCET1SbSkiDwzBRrLqWO+vuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjAd7eNGs72tbl64JzDGeepKR/kMB8GA1UdIwQY
MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt
NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl
LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd1053Xt
bpjppSG1KugMIeEYjBeOPB458hb/tIba0zMI1veoGXWXAoGpYlXvS3OYbSe9BB8u
L+BRP/+t9V0BhVMqBODYm2rF1XUxVitF382J7S4dxWkfoGtx6eqLA6G/G+si/nga
UgSAMZdV7RduNcYPxPjgBEza91IKf21s3d7f9hBY29HQzJBagv3wrInLghhxU4cX
fOBBKVY06Y/7PjscwNg0mjKWFmNrM5TTwzZnorLvqRRSwPOPTnBnUJRu2Uk5gjHv
QzxkkLnVky/wcu9t8nnwM1aLzCLECpWKPZNhD62+O+yPUfD2w0QfBpzUvS6Se/2F
fNUFACY6nNXuWA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 20:19:55 2026 by rpki-client