Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: tyhoifTbW3nJ/pEyzzRN2DgxmH69leILlv2ILlp4RO8=
Subject key identifier: AB:3C:46:15:47:AF:5F:FE:21:D7:6C:1B:55:A9:E1:A4:54:F8:2C:EA
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019D9818ADFEF91E8D82EEB4DA1B87D8E553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 18C6
Signing time: Thu 16 Apr 2026 21:00:47 +0000
Manifest this update: Thu 16 Apr 2026 21:00:47 +0000
Manifest next update: Fri 17 Apr 2026 21:00:47 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: a+fyPcbOU2VWWx65YCe21O2Xb/g8RH7AREqfDkM1DJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:ad:fe:f9:1e:8d:82:ee:b4:da:1b:87:d8:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Apr 16 21:00:47 2026 GMT
Not After : Apr 17 21:00:47 2026 GMT
Subject: CN=ab3c461547af5ffe21d76c1b55a9e1a454f82cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:2c:04:7d:c7:e3:a6:11:3d:c0:c0:cb:a4:
e2:b2:de:47:48:a0:a4:c5:b3:27:9b:fb:19:1f:ac:
cb:00:c5:13:cc:5a:77:4c:18:8c:c7:92:48:19:f1:
7c:32:69:b0:84:91:a5:8c:5f:25:7d:35:90:04:98:
59:de:eb:77:9e:54:91:33:d2:fe:17:d7:30:78:d8:
0d:01:5c:6f:bc:70:07:db:5a:dd:e8:31:bb:65:29:
6e:49:a9:c4:68:0d:e0:72:48:e0:99:31:35:db:3f:
54:f9:62:c4:36:8d:19:c2:f6:38:a6:ba:35:5d:d4:
11:60:de:67:1f:a7:14:68:49:4f:36:99:35:ea:07:
32:dd:2a:43:c7:8c:c9:29:25:e1:c4:e9:67:c0:12:
fb:4b:33:64:cd:5e:eb:2c:9c:47:06:78:70:e2:29:
6e:95:b1:55:95:ef:0f:6f:47:6d:d1:70:dd:c5:cb:
84:dd:d1:95:27:93:9d:83:fc:cd:42:f4:28:e8:6e:
09:d1:86:4a:45:40:ba:96:5d:8e:7c:9c:64:96:67:
c0:30:92:10:12:d3:13:ee:a0:a9:31:0e:e7:b0:e5:
c8:a1:b9:c7:78:12:1a:93:37:93:09:76:1f:b0:42:
a9:03:52:f6:c8:05:23:8f:0a:42:50:5c:5b:90:1a:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3C:46:15:47:AF:5F:FE:21:D7:6C:1B:55:A9:E1:A4:54:F8:2C:EA
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:44:2b:18:aa:3e:f3:f5:98:61:76:8b:54:c0:ab:35:73:27:
d4:b8:74:01:7d:e9:c8:12:eb:a4:96:dc:dc:eb:b2:35:13:9c:
aa:9e:da:bc:a1:6a:ae:28:9b:42:3e:46:65:f3:fc:3e:2b:17:
23:2d:65:50:3c:06:8b:60:b5:4d:f5:31:1a:dd:e3:fb:64:fe:
97:4f:46:ba:9f:8c:58:e1:dc:91:d9:e7:45:37:79:0e:90:15:
fd:62:a0:6d:25:da:6c:ec:7b:ca:df:57:0d:1d:eb:f6:9d:ad:
b4:ac:27:9d:38:fb:6d:53:0b:cd:f9:41:39:b2:cd:d6:3f:c7:
e6:75:8b:c0:8a:59:17:da:8f:b1:cc:3e:38:24:82:84:45:59:
57:96:cb:c6:25:59:70:9f:70:da:c2:e9:0a:41:80:de:f8:b4:
71:25:2c:5c:1a:a4:2e:5a:ce:10:dc:bc:1e:dd:66:13:e8:c3:
6c:24:60:28:f6:5c:9d:81:24:42:64:eb:c8:c4:c0:03:b2:00:
fa:0b:82:14:32:46:db:af:16:9e:fb:fe:ac:95:62:76:13:d2:
3a:3c:18:98:c9:1c:6e:6e:c3:a1:bb:f2:fa:7a:5b:38:9f:bb:
85:5f:5f:1a:28:11:f0:6c:21:5f:a4:ba:a9:4a:be:da:7c:d7:
66:33:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:10 2026 by rpki-client