Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: hPcajrzXQnM9NIawFw0Cw1iCz1DxQ9NUmSIcGZSPALo=
Subject key identifier: 4B:E5:46:98:4D:6E:A7:AB:EC:28:E0:D2:20:84:1D:AB:09:70:99:00
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019FAB2C268151420FE25D1394819F9CC745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 16D7
Signing time: Wed 29 Jul 2026 00:00:24 +0000
Manifest this update: Wed 29 Jul 2026 00:00:24 +0000
Manifest next update: Thu 30 Jul 2026 00:00:24 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: x4e4+OV0Kj1h9N69IyjKs+rf7OrS9EAkYT5wCuMRzKI=)
2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:26:81:51:42:0f:e2:5d:13:94:81:9f:9c:c7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Jul 29 00:00:24 2026 GMT
Not After : Jul 30 00:00:24 2026 GMT
Subject: CN=4be546984d6ea7abec28e0d220841dab09709900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:43:80:6e:13:f2:ed:61:25:d2:d2:fe:3a:
02:f2:ce:9c:94:0c:94:94:33:c3:1c:c9:88:c5:05:
be:90:7e:af:9f:72:a7:40:63:cb:a8:cd:a8:a1:3c:
64:5a:6f:d5:a0:0d:19:94:37:e0:8e:44:42:ae:4c:
a3:97:6e:60:54:f9:08:97:34:d8:8e:ab:58:a3:1d:
c4:90:65:28:b9:54:80:0c:cf:02:c5:55:79:5f:3e:
a6:ff:1e:b5:50:42:32:63:e9:e3:e0:20:70:fa:96:
30:44:d0:98:a0:6a:5c:a9:9f:1e:cd:a4:f5:84:45:
bf:74:3c:6e:82:16:fb:73:24:66:35:86:43:d2:06:
02:90:ad:0d:25:72:02:76:ee:af:0f:b8:36:6d:b5:
03:11:1c:e5:c5:05:89:7a:67:37:be:3c:d9:cd:45:
37:fd:57:d0:7a:b8:b7:f1:c9:db:fc:99:a4:de:97:
f6:88:f3:b7:9b:17:f8:76:e3:d5:d5:42:a3:6a:4f:
35:9a:83:93:9f:e8:3f:2c:79:77:81:e7:99:57:bf:
a5:d8:9f:69:12:eb:97:8c:8d:15:25:6b:af:92:06:
36:57:4a:66:04:10:3a:7e:b2:64:6a:ac:46:8f:2b:
44:f1:79:55:69:f3:21:fe:46:00:8b:5a:22:56:ee:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E5:46:98:4D:6E:A7:AB:EC:28:E0:D2:20:84:1D:AB:09:70:99:00
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:79:90:71:d0:b5:60:5e:1a:65:27:b2:fb:72:16:82:4b:f0:
f5:60:d6:d8:46:75:3b:34:2a:d8:c8:2d:a6:9c:8a:03:d8:d0:
0a:c3:7c:81:89:3f:fe:40:89:f7:2c:31:0e:6d:ff:2b:c2:02:
f4:9d:d1:9c:b3:61:6e:5f:e9:aa:c1:fb:3f:0a:00:ed:9a:e4:
8c:aa:21:36:92:a5:a1:c3:77:81:09:67:d1:59:07:47:d2:30:
36:9c:0b:77:91:89:c5:7c:49:dc:c0:68:a2:3b:cb:b3:11:3e:
99:ad:04:4b:f4:3a:da:11:b2:14:70:bc:a5:8f:8c:0a:04:6c:
21:76:fb:51:2b:0c:08:68:2e:38:db:3b:ef:34:86:4a:42:19:
55:b6:67:f8:99:ae:76:16:f0:ad:0f:f9:ec:87:8c:d1:e3:aa:
1e:34:a3:e9:11:bd:9c:b3:eb:f9:66:b4:ba:95:8a:95:1c:d5:
0b:c7:bf:98:5a:fe:b5:f1:98:9d:f2:7c:0e:cf:3e:e9:ab:1c:
67:36:1d:25:ea:1d:8a:a0:66:7d:9e:ee:51:9d:86:f3:3a:9d:
9c:56:9a:2f:85:85:67:51:cc:87:d6:22:91:8c:30:fd:ce:7a:
72:74:10:3d:86:75:4b:c8:e8:b2:79:c6:f9:06:0a:28:24:82:
a3:ce:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:12 2026 by rpki-client