Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: u2sbc6+Chv4ohorYW++KhW4yaM9nacY8zBbgVT83mpA=
Subject key identifier: 0E:C8:5D:12:47:CF:0B:38:95:FE:74:3A:49:8A:2C:BE:29:7E:45:9A
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019D9962BAA2174FFE3B6BA3BDB80AAF5F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 0569
Signing time: Fri 17 Apr 2026 03:01:17 +0000
Manifest this update: Fri 17 Apr 2026 03:01:17 +0000
Manifest next update: Sat 18 Apr 2026 03:01:17 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: ZcGFZ5asvlTHasf3JGzATUlyrJs3aBEthdHgohLjIQw=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ba:a2:17:4f:fe:3b:6b:a3:bd:b8:0a:af:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Apr 17 03:01:17 2026 GMT
Not After : Apr 18 03:01:17 2026 GMT
Subject: CN=0ec85d1247cf0b3895fe743a498a2cbe297e459a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:79:cd:9b:db:6e:53:36:cb:3b:0a:cf:55:
c7:c6:9f:ff:0f:69:b2:b8:fd:d6:c6:ab:d7:ae:c7:
77:d6:6f:50:d7:7f:c3:1c:b9:cb:f5:53:6b:2c:18:
db:74:30:05:a4:f8:10:7a:51:09:e0:ef:6c:21:36:
14:35:2a:31:bc:ad:00:61:83:7a:22:10:59:cc:72:
e8:94:82:e3:24:31:41:f7:09:15:93:09:35:fc:72:
2a:4e:56:9d:f7:5c:b2:0e:d6:96:63:a1:46:55:2f:
51:96:72:34:d4:cf:eb:bc:3e:20:4c:0c:ee:74:d4:
39:65:f9:14:f1:d7:91:60:86:a4:c7:82:47:8f:cb:
49:37:1d:9c:ee:1e:4e:8b:5c:5b:25:a2:49:51:1f:
a1:94:87:94:fc:45:16:83:62:8b:b2:ec:d3:58:99:
2c:e9:9f:fc:f3:d3:10:b0:59:54:4b:df:af:ae:d1:
a8:f6:9f:ac:9c:80:aa:92:6d:59:65:bb:0b:85:26:
59:bf:94:4e:97:fc:94:1d:13:aa:c6:ce:be:1c:ef:
33:53:c5:ad:a1:4d:27:a5:a2:46:37:c8:68:42:3b:
bf:93:90:9d:27:28:44:f9:33:31:36:54:43:27:8c:
5b:01:04:7d:b9:6e:c6:64:d9:cd:44:72:e1:3f:34:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:5D:12:47:CF:0B:38:95:FE:74:3A:49:8A:2C:BE:29:7E:45:9A
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cb:58:43:02:bc:4e:00:c3:a9:24:9b:a6:fb:34:76:2b:f6:
10:fa:d3:20:cd:b6:ba:8b:7c:9a:a1:2e:dd:4d:ba:a0:26:3d:
d7:e1:fe:f1:94:82:5e:34:f2:f2:8d:a8:ee:e8:f4:7e:ab:8d:
52:f1:83:e2:fc:06:22:09:35:96:8b:99:4f:12:69:96:b1:6e:
3a:3f:cc:1c:c4:bd:5b:ba:da:f4:f4:dc:54:56:a0:76:9b:25:
7f:d7:b3:7b:16:fb:e2:b6:9b:2e:71:ed:df:f4:44:49:15:19:
a7:fd:ba:8d:e1:eb:e5:49:8e:3d:77:8f:6f:f7:6f:3d:9e:b4:
e9:4b:9e:91:8d:f6:17:9a:bf:f2:d3:e0:e4:0c:79:0e:87:57:
87:0e:4f:b2:e0:d7:33:b5:5e:d4:e3:11:4f:09:3c:96:1e:2e:
87:d3:90:12:8f:97:33:29:ce:ed:29:6b:29:f3:2f:32:5f:f7:
91:f4:32:2e:08:4d:a5:e4:6c:32:b7:91:be:94:7c:57:cf:a3:
63:fd:77:b8:b9:6e:9b:01:bd:e4:78:d2:5c:37:4e:e2:3e:e3:
30:94:ee:17:8f:c9:05:52:bc:41:09:e0:11:04:38:d2:4d:02:
c8:1c:65:ca:f6:ed:89:b9:e8:ea:9e:e6:45:75:81:ae:63:2a:
71:a7:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:19 2026 by rpki-client