Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: CFuDoMEPNPV3+xgLI++7TQyNg/j4Oa1BNOw3vLbey5c=
Subject key identifier: F4:19:C3:C9:00:5C:11:B9:D8:01:97:6F:B0:D9:14:92:98:4C:DB:04
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019CAC7DC9A49A2772859AD73A6458189B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 154A
Signing time: Mon 02 Mar 2026 03:00:50 +0000
Manifest this update: Mon 02 Mar 2026 03:00:50 +0000
Manifest next update: Tue 03 Mar 2026 03:00:50 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: Zr4uhQi9Oz++VPIRursgPUVcv2WIcGu9pcJB9AtlHAk=)
2: sGm0vU9oSC-btG4YiEKa4VaTO0s.roa (hash: Z7crjxHBjgD6BdGuonNkIQvXjn5E/Ot91T2B7Xj3rsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c9:a4:9a:27:72:85:9a:d7:3a:64:58:18:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Mar 2 03:00:50 2026 GMT
Not After : Mar 3 03:00:50 2026 GMT
Subject: CN=f419c3c9005c11b9d801976fb0d91492984cdb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:fe:2e:ef:f1:8d:32:11:83:18:ab:3d:bb:
fe:60:45:b5:b7:90:f8:f2:aa:67:11:e2:51:f3:06:
dc:e4:60:ef:70:c5:75:d3:30:0b:b5:d6:a0:46:1a:
e5:e4:f9:d3:7b:a4:72:9f:62:bf:89:3a:ef:9d:f7:
fd:e5:bb:da:87:12:9f:7d:28:db:d4:38:8f:07:b8:
03:83:4b:5b:c0:d7:4d:88:f5:26:1c:31:eb:58:7e:
e7:04:5a:bc:4e:dd:00:0c:42:a0:f7:8e:92:95:a3:
d9:84:fb:60:df:e7:2b:42:7f:97:52:56:85:d3:f1:
ad:9e:b0:2c:3c:a0:ed:b4:38:91:ba:0f:60:2a:94:
bf:33:ff:20:8d:e2:45:72:d1:82:22:34:7c:4d:51:
46:13:dd:ea:d1:61:f6:1d:31:2f:6f:18:7f:fc:84:
9d:a7:e7:23:ee:e6:cd:57:c4:2a:15:c5:c5:32:fe:
fb:67:8b:4d:ba:1d:ef:4a:62:91:29:f7:10:97:df:
17:7c:e0:93:c7:f3:ac:e0:6c:a5:22:d7:03:98:70:
1a:5b:78:da:b7:a4:08:12:1c:e2:d4:17:69:fc:cf:
de:dc:db:f4:19:3a:88:fc:0d:de:a4:14:e8:5f:97:
8d:1a:4b:ba:a5:db:60:10:7b:fa:cc:84:87:2d:ec:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:C3:C9:00:5C:11:B9:D8:01:97:6F:B0:D9:14:92:98:4C:DB:04
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:09:cc:fb:b6:e6:e4:da:0e:33:7d:e2:c3:01:aa:79:3e:88:
5c:ef:24:76:e7:81:ec:c4:6f:cd:5e:02:e4:bd:a7:71:ca:5b:
83:54:25:fb:7a:3d:d4:4a:44:d8:99:9c:10:0c:fb:d2:e0:9d:
9c:0e:1c:e2:66:18:43:17:42:e5:f0:5d:01:88:91:d3:c4:47:
b2:1f:6a:a5:bd:2f:35:a0:f0:71:ba:79:ec:3a:8b:3e:15:d6:
f9:7d:fd:d8:09:7b:87:8d:e2:77:e9:2a:b5:14:5d:7e:49:4a:
d6:40:f1:67:a1:69:d2:97:ba:f7:58:45:29:cb:a0:d5:ea:d7:
8b:3d:b5:79:11:54:78:ee:99:cf:d8:1f:4a:f1:48:c1:6b:e8:
c5:57:23:ec:33:a1:b6:2a:9a:f1:7c:65:6e:3a:90:47:32:8e:
9d:6c:a0:fc:9c:7f:49:a5:73:b5:4c:e3:64:9a:43:d8:37:25:
22:76:52:5f:80:93:5b:98:e3:7d:7e:41:9a:60:4d:85:b5:1f:
65:52:b4:e5:ff:36:ba:2a:42:eb:8b:b3:40:25:c9:af:95:6e:
18:d8:68:4f:6e:52:6c:b7:84:ea:bb:7b:ed:a6:8a:a7:8d:fe:
3b:ad:32:7c:fd:57:64:f3:02:23:a8:b1:69:78:13:b3:5d:0b:
71:b6:7a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfcmkmidyhZrXOmRYGJuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTRiOGM3ZjUwOWUxMDA1MWIwY2QyOWZkOGQ2OWYyODU1
MDhkODcwHhcNMjYwMzAyMDMwMDUwWhcNMjYwMzAzMDMwMDUwWjAzMTEwLwYDVQQD
EyhmNDE5YzNjOTAwNWMxMWI5ZDgwMTk3NmZiMGQ5MTQ5Mjk4NGNkYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DL+Lu/xjTIRgxirPbv+YEW1t5D4
8qpnEeJR8wbc5GDvcMV10zALtdagRhrl5PnTe6Ryn2K/iTrvnff95bvahxKffSjb
1DiPB7gDg0tbwNdNiPUmHDHrWH7nBFq8Tt0ADEKg946SlaPZhPtg3+crQn+XUlaF
0/GtnrAsPKDttDiRug9gKpS/M/8gjeJFctGCIjR8TVFGE93q0WH2HTEvbxh//ISd
p+cj7ubNV8QqFcXFMv77Z4tNuh3vSmKRKfcQl98XfOCTx/Os4GylItcDmHAaW3ja
t6QIEhzi1Bdp/M/e3Nv0GTqI/A3epBToX5eNGku6pdtgEHv6zISHLew5RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQZw8kAXBG52AGXb7DZFJKYTNsEMB8GA1UdIwQY
MBaAFDAUuMf1CeEAUbDNKf2NafKFUI2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYt
Nzk5NTI1YmU3MjE1LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYtNzk5NTI1YmU3MjE1
LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQnM+7bm
5NoOM33iwwGqeT6IXO8kdueB7MRvzV4C5L2nccpbg1Ql+3o91EpE2JmcEAz70uCd
nA4c4mYYQxdC5fBdAYiR08RHsh9qpb0vNaDwcbp57DqLPhXW+X392Al7h43id+kq
tRRdfklK1kDxZ6Fp0pe691hFKcug1erXiz21eRFUeO6Zz9gfSvFIwWvoxVcj7DOh
tiqa8XxlbjqQRzKOnWyg/Jx/SaVztUzjZJpD2DclInZSX4CTW5jjfX5BmmBNhbUf
ZVK05f82uipC64uzQCXJr5VuGNhoT25SbLeE6rt77aaKp43+O60yfP1XZPMCI6ix
aXgTs10LcbZ6Ag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:39 2026 by rpki-client