Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier: OKDRsAXPCP+8fbIcKVhqCTal31lzLjCfZllkIgrvtO0=
Subject key identifier: A5:50:EC:6B:CE:E4:52:31:23:92:EC:6B:CE:10:46:52:17:AE:B2:0D
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial: 019DA453B5CC79F35A2A51D606C1978B14CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 06:00:42 +0000
Manifest this update: Sun 19 Apr 2026 06:00:42 +0000
Manifest next update: Mon 20 Apr 2026 06:00:42 +0000
Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: 64kLFpmByzufUahW76dpq4ZMfHqJ2/y2zSbl13m542Q=)
2: _XpiWaBqL5cj6EScDkmzFX-RtaE.roa (hash: ZNQwF+NRIfIvKu5cA90w0QKywG10reBbxUARljIXqqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:b5:cc:79:f3:5a:2a:51:d6:06:c1:97:8b:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Validity
Not Before: Apr 19 06:00:42 2026 GMT
Not After : Apr 20 06:00:42 2026 GMT
Subject: CN=a550ec6bcee452312392ec6bce10465217aeb20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:dd:58:33:ce:e3:0b:ff:1e:65:de:5b:ca:
f0:dd:5b:61:5f:2c:e2:68:9b:04:c9:1f:0f:21:7f:
13:2e:b9:c3:67:42:f8:d4:fc:c5:70:ef:44:a9:9a:
8c:e7:1e:ac:0e:05:bc:21:05:bf:a1:31:5d:3c:73:
48:16:b6:a2:20:a1:90:29:89:6f:79:35:1a:61:36:
92:31:1c:0b:55:d5:5c:df:24:6c:e0:6a:49:10:3e:
99:74:54:e1:89:46:b6:0f:a3:54:e8:11:26:31:a9:
f0:81:40:5d:a3:48:b8:05:af:6c:97:93:6a:67:bd:
88:09:82:82:e2:66:7a:5b:3f:a9:a1:48:ec:a9:d1:
54:ea:c5:c3:7e:05:f8:41:c2:33:8f:19:6c:3b:fb:
64:1e:9c:71:a9:db:b4:42:c0:fe:ea:06:7f:6c:79:
ae:63:27:3a:70:11:bf:46:91:4d:0a:85:a2:d9:11:
b6:34:c8:80:ac:0c:aa:d1:f5:84:92:7d:27:54:94:
d9:c2:50:c3:3b:5f:26:f0:3c:df:bb:3f:3e:a4:a6:
35:5d:f8:06:c4:47:37:ec:22:ff:93:7e:f6:86:28:
67:5b:14:20:75:56:82:1b:79:1c:9f:23:88:e6:17:
47:3c:ab:0e:c0:6f:e4:c8:a0:fa:36:e0:6f:11:ef:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:EC:6B:CE:E4:52:31:23:92:EC:6B:CE:10:46:52:17:AE:B2:0D
X509v3 Authority Key Identifier:
keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d5:08:42:a8:bb:5e:59:66:da:d9:a0:a8:0b:b5:f4:90:2d:
e0:52:68:6b:2e:b3:19:29:d8:83:50:bd:ae:f6:11:c2:39:fc:
00:46:0c:f4:31:5f:04:98:7e:e9:c3:52:81:6c:27:41:c2:b3:
72:92:e2:f4:94:fa:71:71:cf:f1:d4:68:89:e2:84:a9:5e:bc:
0b:3d:a4:d6:da:bf:8b:dd:6f:8e:90:b0:21:10:ec:2b:4b:a0:
21:e7:5e:17:de:65:4e:c0:60:78:15:41:67:2e:36:c0:84:90:
da:e7:44:83:10:85:de:44:2a:e9:5c:44:b2:7b:b9:d5:6a:37:
97:f2:63:8a:63:33:41:31:06:02:e5:91:5c:ed:dd:d5:fb:84:
96:98:40:c8:fe:2a:41:6c:b3:90:fa:25:82:e4:89:5d:61:59:
54:e5:22:42:e9:e7:7f:85:9e:c9:b1:d1:ee:a1:11:80:8a:99:
b5:19:a5:c6:82:2f:7f:9d:a6:3a:7d:5e:f6:24:b1:7c:4b:16:
8c:67:2d:50:86:b6:72:6b:83:fb:60:4c:e3:03:0e:01:d3:46:
43:6d:b6:19:39:2e:11:e9:17:5f:36:5f:3c:a1:1d:84:c5:63:
80:f8:3b:40:69:9e:92:53:d8:93:3a:2c:50:ae:a2:f6:eb:6e:
20:51:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:27:18 2026 by rpki-client