Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: NX+gzFrgqt8nkzHReRaB6dMsRUkTVoLjW8B8nXKghu0=
Subject key identifier: 20:E8:64:B2:5B:77:84:00:21:5D:4C:9C:14:66:B7:92:0A:60:2B:7C
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019EC30074E9E67353D67FF8D1F6A9828F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 12FF
Signing time: Sat 13 Jun 2026 22:00:47 +0000
Manifest this update: Sat 13 Jun 2026 22:00:47 +0000
Manifest next update: Sun 14 Jun 2026 22:00:47 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: h7U+1yTyXAO0YUdHdFvvwlA1nZZ9jcmF2f2HorgHkSc=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:74:e9:e6:73:53:d6:7f:f8:d1:f6:a9:82:8f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Jun 13 22:00:47 2026 GMT
Not After : Jun 14 22:00:47 2026 GMT
Subject: CN=20e864b25b778400215d4c9c1466b7920a602b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:6c:b2:f9:06:62:1c:b1:5a:7f:40:f1:49:
c4:1c:29:c1:8e:2d:c7:42:4b:91:a6:34:34:b6:8f:
52:86:9c:18:9e:fe:79:1a:1a:f3:aa:de:44:ac:4b:
0e:0d:22:4f:48:5a:55:02:b1:73:3e:71:84:db:1b:
43:ce:35:49:f6:50:75:b0:e4:d5:53:f5:ba:bb:dc:
6e:90:e8:d9:7e:30:fe:09:30:ff:02:77:f8:ad:22:
2e:0b:08:fd:10:1d:f0:f0:21:0f:34:b8:cd:79:2b:
95:b2:e0:b7:42:e6:ec:db:13:33:dc:a4:d7:d3:ea:
f9:93:74:d5:8e:7d:c7:2c:32:f8:2e:83:56:e8:c7:
f6:2c:05:0b:81:db:99:77:7a:6e:07:47:23:19:dd:
c1:18:f0:6a:c6:d8:20:5f:f1:6d:8a:9f:67:e5:c4:
9b:68:dd:82:eb:24:be:2d:8c:75:bb:26:2d:6e:45:
3d:f9:7c:91:9b:7b:b1:b2:64:61:8c:ef:44:08:a5:
a6:5c:56:8d:d8:6a:12:8e:aa:99:bc:e4:60:89:7e:
8b:74:44:c7:40:76:f9:60:a7:49:37:76:b0:b9:42:
21:c8:73:62:7f:0b:d0:ac:05:0a:42:f0:30:85:aa:
23:96:0d:cb:74:72:96:81:ac:45:de:8f:bf:ba:37:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:64:B2:5B:77:84:00:21:5D:4C:9C:14:66:B7:92:0A:60:2B:7C
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b0:35:41:2a:1d:f4:6c:56:68:c3:e8:ab:a3:1d:a2:78:5d:
64:9e:06:50:e2:b5:9c:46:a8:cc:58:2c:15:2d:cd:00:43:aa:
d3:99:00:e3:46:f2:e1:a9:4c:28:8f:49:37:ae:42:b1:95:27:
ff:22:36:8f:e8:39:8b:fb:a4:f7:76:18:a6:25:50:51:11:c5:
5f:77:83:01:0e:e0:14:6b:8d:63:7c:28:09:06:5a:81:3b:23:
b1:48:c8:4c:cf:74:53:04:61:57:51:1a:4c:d9:d9:17:4d:ce:
b7:d5:6e:d6:d0:5e:dd:ec:ab:93:a6:b1:e0:81:18:a7:02:05:
a1:b5:cd:e1:fd:4d:df:51:02:ec:5e:ef:51:8a:13:2f:64:b9:
8f:39:d9:18:35:71:3b:a8:a9:19:42:27:4f:10:84:fb:f7:9b:
1f:72:0f:c0:c7:cf:64:d1:7b:76:92:47:f5:fa:e6:15:e5:6a:
06:bb:3d:3d:db:ad:38:00:1b:98:52:c3:39:0b:05:16:ad:89:
95:b9:c4:6f:d6:d6:98:c9:60:cc:bb:2e:45:3a:80:eb:38:19:
48:7a:35:dd:44:ca:4d:8a:d3:7a:19:0d:89:44:7c:c0:7d:35:
a3:ee:c7:7c:74:b6:28:51:8d:09:c1:80:b2:83:ce:10:b1:dc:
77:00:b1:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAHTp5nNT1n/40fapgo+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjYwNjEzMjIwMDQ3WhcNMjYwNjE0MjIwMDQ3WjAzMTEwLwYDVQQD
EygyMGU4NjRiMjViNzc4NDAwMjE1ZDRjOWMxNDY2Yjc5MjBhNjAyYjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJVssvkGYhyxWn9A8UnEHCnBji3H
QkuRpjQ0to9ShpwYnv55Ghrzqt5ErEsODSJPSFpVArFzPnGE2xtDzjVJ9lB1sOTV
U/W6u9xukOjZfjD+CTD/Anf4rSIuCwj9EB3w8CEPNLjNeSuVsuC3Qubs2xMz3KTX
0+r5k3TVjn3HLDL4LoNW6Mf2LAULgduZd3puB0cjGd3BGPBqxtggX/Ftip9n5cSb
aN2C6yS+LYx1uyYtbkU9+XyRm3uxsmRhjO9ECKWmXFaN2GoSjqqZvORgiX6LdETH
QHb5YKdJN3awuUIhyHNifwvQrAUKQvAwhaojlg3LdHKWgaxF3o+/ujfU5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDoZLJbd4QAIV1MnBRmt5IKYCt8MB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLA1QSod
9GxWaMPoq6MdonhdZJ4GUOK1nEaozFgsFS3NAEOq05kA40by4alMKI9JN65CsZUn
/yI2j+g5i/uk93YYpiVQURHFX3eDAQ7gFGuNY3woCQZagTsjsUjITM90UwRhV1Ea
TNnZF03Ot9Vu1tBe3eyrk6ax4IEYpwIFobXN4f1N31EC7F7vUYoTL2S5jznZGDVx
O6ipGUInTxCE+/ebH3IPwMfPZNF7dpJH9frmFeVqBrs9PdutOAAbmFLDOQsFFq2J
lbnEb9bWmMlgzLsuRTqA6zgZSHo13UTKTYrTehkNiUR8wH01o+7HfHS2KFGNCcGA
soPOELHcdwCxsw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:24 2026 by rpki-client