Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: /ICLo1+mVa4wdeD9E1DEvPKMPwZm31VjhEvRAC3Oslk=
Subject key identifier: 32:2F:E8:5C:81:A5:37:03:F1:22:BF:AA:E9:9A:6E:0E:3D:B6:17:20
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019F93FF9B186125D225B8A619935964581D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 12:00:29 +0000
Manifest this update: Fri 24 Jul 2026 12:00:29 +0000
Manifest next update: Sat 25 Jul 2026 12:00:29 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: 3YNxeVLu5s71zF2+Fa3tsTi/xq1mokvdjVEPXCYtbeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:9b:18:61:25:d2:25:b8:a6:19:93:59:64:58:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jul 24 12:00:29 2026 GMT
Not After : Jul 25 12:00:29 2026 GMT
Subject: CN=322fe85c81a53703f122bfaae99a6e0e3db61720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:76:b4:09:94:5f:d2:d1:67:47:b2:b8:43:
11:cb:29:85:59:06:2f:d6:82:36:56:c5:02:0e:a6:
d1:7f:d2:07:3a:d8:c6:f6:47:74:26:0e:84:c2:32:
78:ec:96:64:bf:0d:54:e3:81:58:2c:cf:70:74:38:
de:40:78:3e:58:a1:ae:bb:51:92:eb:bc:2f:8d:d1:
63:46:19:a2:f7:38:7f:3d:39:ea:9b:b5:af:c0:16:
d8:c5:dc:39:2b:ae:ae:c1:94:02:af:b6:ae:18:c4:
25:0c:43:03:23:d5:c8:fd:99:bf:ec:36:04:24:56:
54:74:d8:91:9b:00:42:df:da:32:87:18:44:3e:1a:
62:4d:dc:a9:28:74:b3:9c:7d:f1:69:10:14:7e:c1:
ff:04:90:5a:fb:f4:51:af:9a:a3:46:bb:ad:4b:9e:
da:9f:a0:58:cc:b0:32:41:34:31:23:af:42:51:f1:
6c:f0:63:64:90:2b:5b:09:cc:1a:ed:ab:fa:74:fc:
67:09:b6:5d:27:3b:80:91:c3:27:c4:f2:30:0b:51:
da:9b:bf:d3:ac:1a:c0:d8:66:38:e7:f2:2b:51:c0:
39:81:4b:93:ab:5d:4f:2d:34:31:4f:91:59:f4:74:
7d:3f:6a:4b:43:26:08:db:bf:ef:74:20:a5:c6:b7:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2F:E8:5C:81:A5:37:03:F1:22:BF:AA:E9:9A:6E:0E:3D:B6:17:20
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e4:78:06:3d:17:e3:cf:2e:54:6b:08:8a:19:23:19:e0:18:
f5:46:04:f2:14:2f:21:b6:e6:de:1c:11:3a:7b:1a:b6:80:26:
cd:e8:47:a8:07:34:35:62:4c:1b:47:a7:9b:1f:fb:35:96:d1:
93:8c:b0:0b:4b:16:7b:c8:34:8e:7f:4a:72:ab:2d:0d:e3:f5:
d2:ec:18:0d:be:a5:44:b3:41:e8:04:a2:5e:33:70:4a:ac:b9:
65:16:3c:86:78:f4:bd:60:4b:4a:b9:54:96:17:bd:23:df:47:
03:5a:ac:e1:fc:e2:0c:49:4e:33:88:7a:ef:30:a1:7a:1d:22:
3b:8f:2c:07:37:77:d4:36:0e:15:34:ff:12:34:bb:0e:9b:6f:
8a:a8:70:30:5a:65:57:a6:47:11:3d:3f:23:51:5e:07:33:e5:
99:43:c8:d0:7c:e9:38:aa:74:06:f7:04:3e:c7:13:a5:a0:1f:
7b:a1:42:a8:ef:bb:41:d0:6b:9c:9b:6e:c1:b9:7c:b4:85:80:
14:fa:d1:e7:56:00:6d:a7:b7:71:8d:75:43:17:5d:6f:5e:16:
7b:b4:1a:3c:c9:2c:9c:cd:b1:e6:fc:05:a6:47:f3:da:5c:87:
c9:0e:fa:c9:da:d7:63:a9:e5:6c:57:48:49:51:a7:7c:99:f5:
dd:9a:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:01:18 2026 by rpki-client