Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: B4qiJXH5TC5Ki75tw3w9wp7EC8cMpRTDONkywpa6GKo=
Subject key identifier: 5A:A5:63:E1:59:2C:47:56:D3:17:20:14:78:6F:88:3E:8E:5B:B3:F8
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019EBEECC7A268AFE2D56DE9E7E5E557BB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 0601
Signing time: Sat 13 Jun 2026 03:00:49 +0000
Manifest this update: Sat 13 Jun 2026 03:00:49 +0000
Manifest next update: Sun 14 Jun 2026 03:00:49 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: qqfynI4LaZF+Evsiiv44AXOaEEWnY/7ptPEn1khMdek=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:c7:a2:68:af:e2:d5:6d:e9:e7:e5:e5:57:bb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Jun 13 03:00:49 2026 GMT
Not After : Jun 14 03:00:49 2026 GMT
Subject: CN=5aa563e1592c4756d3172014786f883e8e5bb3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:ab:05:ea:dc:3c:50:33:a1:3e:85:a7:22:
c2:5a:46:b4:d2:ba:55:74:04:fc:2f:d7:5c:0b:90:
29:a8:82:4c:e1:fa:38:54:38:f1:49:ed:59:d3:ad:
8e:98:46:07:4f:a7:2e:ed:00:3a:72:dc:0d:5a:cf:
75:00:c4:d8:40:fa:d7:fb:68:4e:a0:42:77:aa:69:
48:41:2e:6e:40:81:6b:ed:75:01:65:3c:4f:f3:15:
3b:fd:61:1f:0a:c6:c0:5f:b7:62:1d:79:37:55:70:
c4:3a:76:46:a0:12:24:f0:ef:15:15:ee:01:c8:7a:
eb:f3:37:23:d3:93:84:03:01:43:23:e2:32:b0:d9:
4e:5e:96:ed:51:22:10:8a:4f:c7:d4:20:75:e4:63:
b2:8e:42:18:71:eb:a5:a9:73:b7:3a:db:d7:4e:ee:
c9:74:4a:fd:8c:83:47:72:be:8b:d7:8f:2f:bf:54:
07:a4:e9:4b:a9:2b:56:72:93:2f:26:1d:00:2d:04:
ff:0f:4d:29:7d:8e:e8:1c:ae:c6:6f:c6:84:07:29:
9b:d7:8e:2a:fb:94:97:44:3c:5a:c7:80:02:25:49:
b5:f6:8b:f4:6b:84:ce:d3:86:88:24:11:3e:e1:15:
e6:f1:00:0c:c3:83:6f:4e:49:2e:be:12:1c:69:7a:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:63:E1:59:2C:47:56:D3:17:20:14:78:6F:88:3E:8E:5B:B3:F8
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6d:a2:42:71:25:25:ef:95:93:11:e8:ef:51:c6:25:eb:df:
79:04:85:2b:49:e6:69:07:c8:cd:f7:d3:38:e4:4b:23:8b:c7:
8c:5f:7b:dd:04:29:22:8a:bc:b7:c9:ee:fa:be:7f:d7:df:2c:
ba:a9:a6:65:10:a4:a2:a9:f4:f0:7e:d0:b6:c9:c2:a5:b5:57:
dd:b5:93:c5:5b:fc:6e:db:7a:0b:5c:71:f4:18:c8:37:b9:6e:
db:f7:97:ca:70:0a:47:59:6d:5a:57:5c:91:f7:d3:cd:7d:33:
3a:7e:fb:56:7b:a6:c1:78:84:65:28:ac:da:88:b1:4f:38:78:
4b:00:76:de:aa:6a:f7:05:be:2e:7f:bf:f2:bc:07:03:b1:ac:
70:c1:5d:68:b3:06:75:70:09:56:d3:35:b8:49:f1:39:9f:48:
fb:89:3c:99:e3:cc:18:58:f9:07:34:2b:c8:87:5a:7a:b8:4b:
9d:60:33:b1:0c:f6:fe:c6:52:b7:fe:25:37:41:1d:8c:aa:25:
fd:e6:fe:f3:2c:93:ff:77:f6:ef:09:4e:1a:4d:0b:9a:d4:47:
f9:8a:24:d6:ad:ec:84:c5:1a:e8:53:9f:af:e5:b0:49:2e:5a:
6f:07:e3:d5:70:b7:f4:04:65:84:89:b0:92:d5:27:3a:62:bc:
18:57:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:44 2026 by rpki-client