Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: Yoazxprec/2khpQJWlnkhG+dxMvqbqjpfcg1XLM/DXI=
Subject key identifier: 92:8E:3C:C5:02:53:2A:E9:1E:9E:FE:DC:E1:BB:D1:D2:7B:13:49:60
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019CAA90088174F5D66900913F2DD6C4974E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 18:01:31 +0000
Manifest this update: Sun 01 Mar 2026 18:01:31 +0000
Manifest next update: Mon 02 Mar 2026 18:01:31 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: 8fUCGCUFuCGer77lW1Sw0EE5fVIrgPS5R5AMHxoByyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:08:81:74:f5:d6:69:00:91:3f:2d:d6:c4:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Mar 1 18:01:31 2026 GMT
Not After : Mar 2 18:01:31 2026 GMT
Subject: CN=928e3cc502532ae91e9efedce1bbd1d27b134960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6d:50:ee:a2:0d:eb:22:23:bb:b8:28:c4:8f:
52:fc:f9:58:dd:a2:79:ff:58:1a:3e:14:55:58:6b:
9f:0c:77:e5:f2:6a:be:88:a2:15:e1:49:8c:12:fa:
d4:62:16:96:96:6c:56:aa:46:0c:9e:3e:63:92:60:
84:8b:4a:05:c3:1e:74:ee:4b:81:d7:e0:d6:34:13:
13:af:52:37:f3:83:2a:70:f7:05:0e:dd:86:99:e2:
3f:54:b7:0e:8d:0f:97:3c:9e:a8:c4:f3:1c:00:87:
37:53:48:e9:76:a9:13:61:98:48:2e:6f:68:d5:64:
55:41:63:fb:2d:dc:44:84:bd:bf:b2:2f:62:61:13:
e1:db:36:5e:89:1e:62:7f:38:02:ec:b6:9a:06:79:
42:e4:a4:d1:aa:23:55:6e:3e:43:6f:e4:fb:a4:6d:
c7:f2:de:77:23:1e:64:a6:ae:83:4c:be:81:08:4f:
cb:ca:4e:9b:9f:a8:05:82:a2:71:bc:3e:df:6f:c6:
94:d2:fb:7d:d0:98:14:a4:05:93:06:09:f3:54:24:
ea:c2:af:db:c5:65:f3:f6:f1:76:95:4d:62:03:2f:
c6:5f:11:92:ee:99:2f:87:e3:c4:a0:c7:d7:4c:ec:
88:42:18:11:d9:69:e9:5d:f4:bb:ed:08:0e:36:7e:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8E:3C:C5:02:53:2A:E9:1E:9E:FE:DC:E1:BB:D1:D2:7B:13:49:60
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:17:aa:1f:2b:5a:d5:7e:0b:d1:7d:14:3e:be:ba:ef:a7:bc:
e1:0a:8f:a2:35:bf:3d:f4:8b:88:5d:d3:87:b9:22:27:81:bb:
de:60:06:0e:1d:e8:5b:6d:0d:f3:cd:ba:7a:b9:bc:7c:b2:be:
10:82:95:ad:e6:51:91:bd:02:08:6d:aa:a3:9d:cc:5d:9a:ba:
11:e2:32:bf:2e:d5:cd:fa:93:c9:65:2e:bd:16:bd:42:a3:25:
86:08:57:0b:88:d9:47:03:c7:f8:00:13:fb:6d:39:1e:5f:a7:
b3:38:4e:72:06:8e:31:80:08:e4:0c:bf:68:5c:6e:1b:d8:54:
71:a2:8d:1d:b3:12:8c:0d:8d:21:9c:62:68:cf:ee:b8:e5:dc:
69:fa:aa:62:2f:ef:02:13:3d:30:de:50:91:b1:e5:5c:d1:8b:
bb:81:35:9c:eb:d1:c8:ee:7b:1a:e6:46:70:15:99:f0:31:bf:
6c:e9:c5:10:c6:fc:fc:34:12:39:0b:b1:48:da:4b:ed:bd:99:
36:5a:99:c3:2c:72:0c:0a:d8:6a:d7:2f:a7:0d:54:37:1c:71:
d5:0a:c1:67:a8:2f:45:ec:0f:7c:15:18:bf:ac:57:03:0f:45:
81:f4:0a:54:18:9c:46:f6:88:99:82:f8:8d:93:37:d8:48:01:
e0:de:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:16 2026 by rpki-client