Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: LZPF+/pMIURE/II4wyFavRDgRw/XFb/IPDqUlpxr+po=
Subject key identifier: 3C:F7:4B:26:3E:72:23:B7:84:E1:45:AF:CE:5F:17:45:11:1E:87:73
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019FA89932586458C825E81230D2BF359907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 067A
Signing time: Tue 28 Jul 2026 12:00:39 +0000
Manifest this update: Tue 28 Jul 2026 12:00:39 +0000
Manifest next update: Wed 29 Jul 2026 12:00:39 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: 6dbA96vrCSd9WfxWeC7XDYNjadx13R9kedDIhMi5Bwc=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:32:58:64:58:c8:25:e8:12:30:d2:bf:35:99:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Jul 28 12:00:39 2026 GMT
Not After : Jul 29 12:00:39 2026 GMT
Subject: CN=3cf74b263e7223b784e145afce5f1745111e8773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:a4:b4:7c:02:d6:0d:22:d2:da:d5:58:c3:
7b:b1:76:b1:7e:78:bb:c4:b2:39:ac:c9:7f:24:60:
57:49:ec:13:7d:6b:04:4e:32:8f:74:ed:0a:35:af:
4e:8a:90:30:2f:09:00:2a:6d:d0:7c:57:32:34:84:
bc:cb:e5:51:17:64:ed:d9:5f:59:02:94:91:ab:59:
5d:8e:58:9f:fe:1e:66:0b:b8:11:09:cd:2b:44:6f:
84:32:f6:05:d7:3f:27:b0:3c:1c:ab:eb:25:31:ab:
cf:c0:4d:20:9f:45:f7:62:63:db:9b:b1:2f:b0:84:
72:95:a5:59:76:7b:e7:b8:1e:69:9d:70:f3:b4:61:
1a:6f:34:69:e9:dd:aa:d7:90:5c:db:a1:bf:d0:b7:
3f:c2:f8:a0:7e:88:2d:ca:46:6b:4e:a5:92:39:37:
7c:04:74:ea:02:e3:45:ac:b6:61:e2:b6:90:b1:a5:
23:38:1a:1f:d3:8b:4d:d1:52:01:17:2d:5a:87:59:
78:e8:48:06:d7:36:f7:a2:59:31:10:c0:d4:f9:ce:
fe:e8:38:84:4f:a3:ba:e1:cd:74:a5:7f:36:48:c5:
24:f6:0d:5e:a4:d5:02:76:f5:24:72:61:3f:cb:7c:
65:b4:4e:f5:0d:77:36:6a:53:ad:26:36:25:97:7e:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:4B:26:3E:72:23:B7:84:E1:45:AF:CE:5F:17:45:11:1E:87:73
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f9:4b:98:e2:1c:33:f8:92:8a:05:b4:36:c4:d7:5d:77:04:
fd:e9:14:f5:e4:01:72:16:de:42:37:6b:a6:95:35:98:e1:76:
ea:83:0e:5b:f5:06:eb:d1:c5:f8:3c:89:31:e9:eb:07:f4:ec:
a2:16:ab:f1:83:53:a9:74:07:2c:06:41:a7:88:c3:c6:ae:ba:
35:ca:ed:8c:63:c6:9d:a6:3a:24:ef:d0:94:1a:f1:76:11:c5:
f3:34:2a:21:d7:07:a3:a0:c6:8a:fb:2d:db:00:24:02:9c:0d:
7b:83:78:ea:d7:87:22:13:b4:4b:01:e2:fc:5b:66:ae:fc:50:
4b:c4:99:41:f7:90:02:7a:c2:a6:f3:e7:e1:e4:f2:95:e4:c7:
ab:54:d7:bc:cf:70:a0:ea:87:4d:ab:85:83:49:f6:fe:71:ce:
41:19:cd:b6:85:7e:1d:7f:d7:51:08:00:bb:9f:49:7e:51:75:
1f:c8:b7:05:d0:4c:f4:b0:29:8b:1a:3f:c5:ed:7b:1a:98:2f:
8f:19:c7:ef:d4:10:45:e7:c1:0e:9e:e9:13:ad:fd:74:d0:80:
7d:e2:23:45:ea:1b:86:6a:6d:a1:4f:00:9c:47:de:b2:5d:09:
db:4d:ab:03:de:e6:fe:58:b5:70:7e:ba:82:43:37:ca:f1:31:
b2:06:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:22 2026 by rpki-client