Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: 7xMc90tBZxjNH/oB9M7qyNu4unYlnuYmZpkcyayQh5Y=
Subject key identifier: 9A:46:9D:52:EC:71:56:2B:4E:1E:7F:33:D4:D3:C9:DB:FD:BE:B2:2E
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019EC17FF0EF7E83FEE3BA14D5B12BF7D23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 15:00:47 +0000
Manifest this update: Sat 13 Jun 2026 15:00:47 +0000
Manifest next update: Sun 14 Jun 2026 15:00:47 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: rnizKb6u57LQEV03qpCY4AywqM3oFZJcH9LmIzYiZRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:f0:ef:7e:83:fe:e3:ba:14:d5:b1:2b:f7:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jun 13 15:00:47 2026 GMT
Not After : Jun 14 15:00:47 2026 GMT
Subject: CN=9a469d52ec71562b4e1e7f33d4d3c9dbfdbeb22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:cc:0a:35:08:80:cd:94:7d:19:41:37:50:
13:b8:0b:91:d2:16:47:63:07:7a:01:68:08:52:53:
12:b0:48:aa:39:9b:ec:7b:23:f8:43:f9:26:a5:81:
62:7d:75:13:b3:2f:a3:9a:8c:fb:d1:ee:d4:df:ae:
1a:72:ae:3b:91:3b:fc:a4:84:1f:8f:0c:5d:6c:81:
ba:2d:61:b9:85:86:20:aa:d7:92:52:91:db:a0:ac:
4f:60:d0:b3:e5:3b:df:29:e7:2c:49:4c:2c:3d:96:
a8:3c:18:15:40:22:e1:68:fc:98:e8:51:93:d8:e9:
f3:0b:a5:d1:d5:8e:90:2f:a3:af:8f:34:39:43:13:
04:1f:6e:62:e7:5a:a3:06:aa:36:d7:e2:ae:0f:c6:
a6:fe:cf:28:d6:75:ab:5d:76:ea:bc:5b:b8:74:4f:
39:57:10:82:78:fc:69:3e:1d:d3:03:13:25:f1:a8:
63:d5:c8:07:29:0b:7f:a6:53:f0:a9:2e:89:bc:1c:
8e:f5:e3:f1:2e:f5:0c:40:b6:50:ac:be:d2:ae:de:
55:2e:00:f1:53:c4:4c:8d:08:93:8e:b0:8b:87:fb:
16:c6:ab:14:dc:9e:24:b9:f6:94:fd:9f:d2:b1:d7:
cb:82:11:21:8d:f7:52:46:6f:8e:0e:1e:65:5e:8f:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:9D:52:EC:71:56:2B:4E:1E:7F:33:D4:D3:C9:DB:FD:BE:B2:2E
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c1:d3:cf:05:3b:b5:cb:7f:9c:52:dc:74:a0:83:69:dd:db:
e5:53:a0:79:1e:d7:2b:64:64:0b:70:4b:10:d8:31:07:66:fc:
77:42:5b:fc:a5:53:f3:4b:87:a1:10:5f:c5:f8:2f:ad:25:53:
5a:cb:70:9c:1a:de:32:1e:fd:60:3f:9a:38:32:c7:a4:10:fe:
e8:dd:58:31:97:ea:d7:c7:c5:c2:2d:82:e5:23:4b:6b:a0:73:
eb:88:a1:b6:2d:31:4c:c1:fa:c6:b4:40:66:75:b2:19:82:df:
eb:11:55:c1:bf:0e:f7:8c:c1:ed:34:73:5c:31:4b:ff:06:55:
a9:10:f5:19:97:cf:53:bb:fe:e9:ab:bd:33:7c:3f:85:07:61:
8d:fc:49:26:2f:81:2f:21:f8:12:26:8e:b7:a3:45:9e:68:cd:
32:0c:73:21:e3:2b:c9:76:86:e3:af:02:a9:21:dd:39:ec:bc:
30:f0:a3:ee:4c:fe:dd:29:d3:d0:e1:2c:9d:3e:f2:09:c3:fb:
1e:5b:dc:e5:23:9d:f3:96:82:62:0c:0c:dd:e5:32:09:a1:cf:
a8:6e:40:76:a1:2c:b8:f3:00:d8:bc:c0:bc:9b:8c:c2:a3:2e:
e6:69:f0:78:74:24:d9:3c:d0:ab:ca:e3:b9:e4:b9:84:af:bd:
91:35:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:50:23 2026 by rpki-client