Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: jMYZ7uC8Vco1BFvjl9Ova1sHiqxhVpw2vZw7zgxh90o=
Subject key identifier: D2:99:D1:81:13:A2:3E:6E:FA:EB:E6:7C:A7:20:A3:44:F3:0F:76:5E
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019E1F47CA59A2AE36C14055A76CDFC0B57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 03:00:58 +0000
Manifest this update: Wed 13 May 2026 03:00:58 +0000
Manifest next update: Thu 14 May 2026 03:00:58 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: 9Qv015BHpnmZfN3KdW7GmXPnLZB+hfa7UxF1wKxNRkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ca:59:a2:ae:36:c1:40:55:a7:6c:df:c0:b5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: May 13 03:00:58 2026 GMT
Not After : May 14 03:00:58 2026 GMT
Subject: CN=d299d18113a23e6efaebe67ca720a344f30f765e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:b6:41:ed:aa:1c:45:d7:2e:0b:9b:c8:f7:
dd:3b:b6:b1:c7:a1:fa:4f:3b:1c:be:7c:57:37:c0:
75:d7:34:0b:10:e3:91:43:32:54:3e:5a:f7:06:bd:
b1:64:58:12:30:91:52:1b:2a:06:c1:12:46:2a:46:
7e:31:7c:00:7c:2c:41:b9:58:fb:1e:ce:cb:cf:2a:
59:7a:21:53:58:b2:56:04:07:d9:0d:25:20:c5:a9:
bc:4f:1a:a3:34:b2:36:8d:15:95:21:32:e9:dd:78:
2e:0c:79:42:c9:18:54:05:19:16:74:e1:c3:05:b2:
16:da:f7:50:5e:5b:ac:1c:b1:e6:37:bf:ed:4c:46:
2a:25:33:2e:53:93:d9:8a:52:2a:75:5a:85:dc:d4:
1d:31:58:ef:40:7b:25:d0:46:56:6c:20:e1:cd:40:
97:2c:66:d5:54:cc:d2:43:8d:c0:01:e6:e4:c1:c3:
15:ab:0d:5a:25:b9:87:6f:33:1b:84:ff:83:18:a1:
f0:3a:4e:13:6f:8a:23:7f:fd:af:cb:fd:6d:f7:51:
87:0f:0a:27:99:7b:9d:18:bb:d9:c6:8c:b0:e0:98:
4e:88:c2:fc:1b:82:83:4d:53:cd:66:09:74:96:44:
75:8b:dc:e6:b8:97:26:71:e3:b8:dc:d4:7f:5e:25:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:99:D1:81:13:A2:3E:6E:FA:EB:E6:7C:A7:20:A3:44:F3:0F:76:5E
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f0:79:49:5a:53:cb:81:b4:77:30:0f:58:f2:d0:15:d0:34:
dd:01:7a:54:9b:42:34:52:db:c1:9f:33:c6:5d:7b:2e:2a:23:
40:da:ba:24:26:63:5e:07:a7:94:b8:24:5a:0c:c7:98:ae:6f:
80:cf:4e:88:a8:ba:f9:0d:2f:3a:14:da:e7:be:28:6a:83:60:
95:2d:4d:7e:25:18:b8:22:71:8c:ea:96:b4:61:88:6f:72:9b:
ae:c7:8f:83:d5:6e:89:5c:e2:2d:ce:6d:bd:19:69:43:d5:c2:
8b:40:82:dd:30:33:49:85:89:c2:68:8d:d2:69:2a:0f:7e:75:
4c:b1:fa:5f:27:ea:de:61:12:96:c3:c2:aa:51:91:43:d7:de:
93:c2:3b:9e:85:07:32:82:84:98:59:08:35:ec:cc:3b:81:86:
41:df:e9:1f:bd:43:ff:04:64:4f:2e:2f:32:88:eb:94:50:58:
8d:5e:5c:ed:95:4f:a2:f3:97:df:84:27:3e:a5:80:43:63:ad:
5c:32:66:a4:84:c0:c3:49:29:23:b2:50:7f:75:ec:ad:2d:3f:
a6:21:30:f8:7f:d8:e4:4b:95:92:f1:a5:9d:9d:cd:c4:d0:0c:
69:53:b3:35:20:45:10:dd:17:68:b7:8c:78:1c:cb:10:37:7d:
04:27:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:59:23 2026 by rpki-client