Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: vc3AC6cR7ERlCqW6/RafSlFQUtQW1mj9qxKKJRR5m5w=
Subject key identifier: 49:90:A9:C3:F2:E2:F2:61:A9:4B:99:AA:3D:CB:4F:13:07:ED:05:35
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 01A0BEB0523270F994D129C2BF1A303093A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 070A
Signing time: Sun 20 Sep 2026 12:00:21 +0000
Manifest this update: Sun 20 Sep 2026 12:00:21 +0000
Manifest next update: Mon 21 Sep 2026 12:00:21 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: pNOeQrBj6dMuPaOqxpKIEiAvMvFP5lvM1BVOfHWt8pI=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:52:32:70:f9:94:d1:29:c2:bf:1a:30:30:93:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Sep 20 12:00:21 2026 GMT
Not After : Sep 21 12:00:21 2026 GMT
Subject: CN=4990a9c3f2e2f261a94b99aa3dcb4f1307ed0535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:29:1c:70:ce:87:60:29:95:fd:4b:a6:fa:
4a:2c:99:64:2a:87:fe:7e:03:0d:50:3e:0d:99:2f:
b2:6d:53:9f:51:cc:8d:bf:ad:d4:6e:69:0d:2f:78:
f3:39:3d:a9:a9:93:aa:b2:b2:0f:b1:5d:83:cc:10:
6a:e8:88:af:8a:28:a5:ec:7d:51:f1:bb:c1:d1:b5:
12:4c:3c:86:e0:09:65:ec:1b:72:29:18:fd:e5:ca:
f3:30:23:ba:8c:ed:87:e5:fc:73:8c:6a:c9:42:63:
31:73:27:c7:39:02:68:59:96:ea:56:f2:fa:d8:96:
bf:c4:8b:65:99:f7:fd:a8:23:fe:7c:43:6a:80:f8:
ef:f3:43:8d:40:f1:cf:ef:67:c4:c2:3d:06:b1:af:
16:28:26:e6:39:ea:78:fc:03:60:e8:34:11:b7:19:
12:f9:33:2d:8c:b1:11:5e:78:16:67:5f:dc:38:98:
a3:0a:63:d4:48:e5:23:40:dd:f1:bc:f9:68:1b:3c:
9d:b3:9b:e7:57:24:5e:31:8e:49:32:7e:a9:2f:03:
0a:62:31:72:50:45:e0:77:86:18:83:93:b5:e8:55:
4b:72:59:06:0a:a0:ac:1d:74:fb:a0:f2:3d:0c:2c:
e2:5a:bc:6d:a7:3d:fa:a8:c9:cc:f0:6e:89:e5:57:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:A9:C3:F2:E2:F2:61:A9:4B:99:AA:3D:CB:4F:13:07:ED:05:35
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dd:98:5e:db:7d:85:3e:39:66:65:20:55:07:36:5c:78:62:
ad:b5:74:59:0b:94:d4:3f:1c:14:76:ca:91:5c:9e:9a:a6:51:
6b:17:e6:0e:79:20:32:76:c0:9f:52:fc:83:17:d7:22:fe:53:
3d:df:22:91:f0:9f:38:04:14:81:73:de:ad:8d:60:7b:94:fc:
89:e0:7e:fc:30:9f:7b:2a:a6:81:f3:eb:85:ea:7e:a0:6f:38:
e9:93:1f:12:2c:c1:ac:4e:6a:fb:6c:25:4d:7e:71:5a:49:1a:
38:9a:c4:26:5d:b0:5e:71:8c:38:4c:86:e9:ec:94:4d:81:7a:
44:f4:e4:e3:66:d6:8d:4d:f0:b6:78:6c:b3:d1:a7:8c:35:df:
4d:de:04:a7:91:62:d1:93:65:f1:d4:ae:c3:55:b8:42:a6:17:
0b:c8:37:56:a1:e7:d2:2d:2f:24:55:e7:c2:30:39:69:74:6b:
3e:b1:90:1b:b9:8f:58:da:ce:66:0c:0c:4e:d2:f2:d4:74:90:
48:7f:36:fe:41:2f:4a:40:dc:08:dc:25:79:3f:aa:3b:93:89:
6e:a5:e8:25:81:49:26:a7:48:5d:f1:ad:76:f3:a8:a7:ee:93:
b8:0a:c2:e1:63:49:46:da:65:12:0b:b0:b5:3f:0b:f6:70:6f:
15:ea:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:35:06 2026 by rpki-client