Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: nx8YsHtzGEydG0uup0xIVOLTT42KdvQwm2zvkGdi6M0=
Subject key identifier: FB:F3:D4:30:72:9E:54:45:31:25:69:82:9E:E2:D5:CE:C3:D2:FB:50
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019CA7FC8A23763A271CB98D1D8C123D7742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 04EC
Signing time: Sun 01 Mar 2026 06:01:11 +0000
Manifest this update: Sun 01 Mar 2026 06:01:11 +0000
Manifest next update: Mon 02 Mar 2026 06:01:11 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: QOtQ3ZeZUU1Fjiwxw+0Sey/M4quyuXSzVp+kjTjuhLE=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:8a:23:76:3a:27:1c:b9:8d:1d:8c:12:3d:77:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Mar 1 06:01:11 2026 GMT
Not After : Mar 2 06:01:11 2026 GMT
Subject: CN=fbf3d430729e5445312569829ee2d5cec3d2fb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:fd:46:6b:f4:f1:33:8d:56:98:e9:a2:7a:
65:f1:db:bc:05:ad:74:ca:04:31:23:bb:c9:72:ab:
81:e2:cc:99:dc:be:9e:c5:fe:af:07:2a:ea:ba:58:
26:56:20:0f:7a:c3:16:d5:52:9d:e5:e8:57:ad:00:
79:8a:a9:c1:d4:1a:5c:57:af:9d:61:d3:f1:40:51:
65:35:fd:56:b9:4d:b2:f3:3a:72:71:91:4d:7a:09:
90:c3:e3:48:49:1a:5f:51:10:26:88:78:d4:f5:57:
6f:f6:a1:f3:ca:ba:ca:aa:f2:a3:d9:90:b6:74:09:
47:7e:0d:ba:21:da:4a:31:9a:10:03:a4:7b:df:64:
45:71:66:93:9a:9e:88:83:cc:f7:24:c9:a1:cb:b8:
d8:dd:cb:d0:6a:29:be:6f:52:a2:ed:b0:f1:56:eb:
5f:d9:8a:d5:76:c8:db:af:85:b8:35:f0:92:4f:b4:
bd:d1:2f:8d:ca:b9:d6:07:81:09:bc:f0:8d:3a:b9:
03:3d:93:55:e0:9f:2f:d0:d4:79:9f:3e:56:0e:f0:
47:0f:c2:d2:28:7d:ab:09:79:c6:bd:ad:5d:3e:fa:
00:4c:0d:91:79:18:17:04:f8:a3:b2:8d:f4:05:84:
ea:a1:b5:d3:a2:25:08:9d:40:af:e0:24:88:f2:bd:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:D4:30:72:9E:54:45:31:25:69:82:9E:E2:D5:CE:C3:D2:FB:50
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:94:4a:7b:69:67:6d:47:8a:3e:cf:d6:47:02:99:a8:eb:
ad:36:ae:c9:09:e8:5f:ed:9b:39:a8:84:a3:5a:5e:ca:40:d7:
a9:43:03:41:98:54:3a:2f:ac:89:92:78:cf:39:a1:f3:0b:ef:
8d:09:6b:00:80:7e:d0:fa:e4:b3:c2:9c:56:c8:d7:9a:1b:e6:
05:bd:3d:b8:e7:dd:58:b4:85:05:d3:7d:2d:56:ac:9f:c9:43:
7d:94:9a:1a:ad:df:67:cf:0a:d0:d6:24:8e:77:43:f5:e2:7a:
3e:d4:0c:e3:4c:6b:ac:99:34:e7:4a:5a:5f:13:6b:f2:23:70:
19:7e:09:3d:86:22:f8:28:84:93:b0:86:ce:9d:71:a3:62:f4:
91:23:3f:20:26:67:56:0f:54:ee:1f:b6:1f:79:88:d2:4f:23:
2a:ec:50:f4:fe:52:2b:a6:40:6c:a1:5c:2c:df:9f:0f:da:fb:
63:15:d9:62:3c:68:25:05:a3:a8:0c:04:ed:8f:ea:eb:95:74:
ab:10:52:d7:36:a3:80:96:5a:7b:d2:0a:d0:33:d8:8b:28:cd:
55:96:43:e0:a1:f7:e8:75:c9:7c:15:a2:62:a9:c9:7e:e4:b3:
33:64:59:1b:7b:65:55:aa:71:fe:7c:08:10:1c:96:de:a7:84:
29:53:78:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/IojdjonHLmNHYwSPXdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGIyMDMyYzM4ZmIxN2Y0MmY4ODMyYTRjMjFlMWYwZDVm
MTllZTAwHhcNMjYwMzAxMDYwMTExWhcNMjYwMzAyMDYwMTExWjAzMTEwLwYDVQQD
EyhmYmYzZDQzMDcyOWU1NDQ1MzEyNTY5ODI5ZWUyZDVjZWMzZDJmYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktP9Rmv08TONVpjponpl8du8Ba10
ygQxI7vJcquB4syZ3L6exf6vByrqulgmViAPesMW1VKd5ehXrQB5iqnB1BpcV6+d
YdPxQFFlNf1WuU2y8zpycZFNegmQw+NISRpfURAmiHjU9Vdv9qHzyrrKqvKj2ZC2
dAlHfg26IdpKMZoQA6R732RFcWaTmp6Ig8z3JMmhy7jY3cvQaim+b1Ki7bDxVutf
2YrVdsjbr4W4NfCST7S90S+NyrnWB4EJvPCNOrkDPZNV4J8v0NR5nz5WDvBHD8LS
KH2rCXnGva1dPvoATA2ReRgXBPijso30BYTqobXToiUInUCv4CSI8r003wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvz1DBynlRFMSVpgp7i1c7D0vtQMB8GA1UdIwQY
MBaAFDJLIDLDj7F/QviDKkwh4fDV8Z7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMt
NDM2MGVlMDZhMjJjLzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMtNDM2MGVlMDZhMjJj
LzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZweUSntp
Z21Hij7P1kcCmajrrTauyQnoX+2bOaiEo1peykDXqUMDQZhUOi+siZJ4zzmh8wvv
jQlrAIB+0Prks8KcVsjXmhvmBb09uOfdWLSFBdN9LVasn8lDfZSaGq3fZ88K0NYk
jndD9eJ6PtQM40xrrJk050paXxNr8iNwGX4JPYYi+CiEk7CGzp1xo2L0kSM/ICZn
Vg9U7h+2H3mI0k8jKuxQ9P5SK6ZAbKFcLN+fD9r7YxXZYjxoJQWjqAwE7Y/q65V0
qxBS1zajgJZae9IK0DPYiyjNVZZD4KH36HXJfBWiYqnJfuSzM2RZG3tlVapx/nwI
EByW3qeEKVN4BQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:28 2026 by rpki-client