Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: VQgVKwQOxMXFQfMNXsWOWQIgsZQKOMBVHh6Z9nHjaSM=
Subject key identifier: A8:31:B1:8E:70:74:63:A1:11:0A:FA:E1:28:22:8C:AE:88:D2:1B:16
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 01A125422E9853FA8DEFFB8458EA3F1B1E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 143B
Signing time: Sat 10 Oct 2026 10:00:56 +0000
Manifest this update: Sat 10 Oct 2026 10:00:56 +0000
Manifest next update: Sun 11 Oct 2026 10:00:56 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: IT4GX7//++6F2j69jjVjoJOogKcb7cKknz87/SriyY8=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:2e:98:53:fa:8d:ef:fb:84:58:ea:3f:1b:1e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Oct 10 10:00:56 2026 GMT
Not After : Oct 11 10:00:56 2026 GMT
Subject: CN=a831b18e707463a1110afae128228cae88d21b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:15:32:a1:15:5c:a7:ae:d6:bb:53:6c:3c:
af:c9:be:fe:58:8f:94:50:d0:f6:78:e7:cf:ef:9f:
07:4d:85:68:8c:62:e9:e6:ea:0f:4d:4b:49:d0:7f:
02:67:18:70:b5:90:44:ba:62:b8:9b:e5:32:95:1c:
88:4a:38:4d:ec:68:af:3a:19:50:20:af:99:84:bb:
ba:0f:16:99:e3:f5:03:dd:d5:25:f8:ea:92:0f:02:
03:18:73:0b:1d:bf:1d:db:ee:72:17:6b:69:6a:c7:
8c:c6:41:eb:c8:64:88:02:ad:03:22:05:f4:e2:0a:
b2:6e:4f:6e:09:18:6c:77:8c:70:03:ec:9e:30:e4:
4a:3d:59:3c:eb:55:44:c0:d8:50:39:5b:aa:08:dd:
09:eb:a2:10:f9:19:53:c0:b4:de:1d:a9:af:67:fe:
32:21:5d:7a:d2:19:2e:a9:f5:23:0c:56:41:8e:06:
5d:06:8e:0b:74:a1:91:ba:0b:1a:88:57:14:0c:ed:
9f:6d:71:a3:10:bd:16:25:11:21:90:c5:85:a2:3d:
c4:8b:c2:c4:d5:8a:c1:90:40:1c:ee:91:76:f4:0c:
4d:c8:53:12:36:54:d8:9f:4e:76:a2:4c:76:e6:f8:
88:8d:18:c5:a2:1d:f1:89:65:35:29:e4:d6:08:84:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:B1:8E:70:74:63:A1:11:0A:FA:E1:28:22:8C:AE:88:D2:1B:16
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:61:63:15:ec:d9:94:92:0c:d9:74:8a:78:d7:ae:5d:b3:
10:3b:95:b0:a8:f2:04:84:4c:0c:11:b7:36:7e:88:e9:9f:30:
1f:70:25:9f:16:71:4e:eb:54:22:fe:36:80:a4:5a:09:b1:d2:
48:33:35:5c:a2:5a:ee:0c:5e:0a:12:35:77:0f:7b:f4:90:b2:
91:2a:21:ff:4c:5d:8e:62:68:24:5d:5d:3c:8c:65:da:bc:57:
cc:df:34:08:1c:94:ff:75:b5:52:46:24:78:cc:36:b8:70:e9:
31:79:e9:d6:11:f9:c3:9b:87:51:41:3a:01:cf:f0:7b:2b:85:
58:07:eb:cd:d4:00:7d:2f:78:c8:f3:1c:49:44:fb:ea:90:0d:
be:7c:4d:87:1f:c3:28:e6:52:65:32:f3:48:ef:72:8b:17:24:
43:17:6c:53:bc:18:07:4b:4c:dd:8c:d2:6e:76:c5:b4:b0:42:
91:c2:f7:1a:88:22:60:88:79:63:35:3b:fe:85:b5:2a:30:ba:
38:8a:f2:2b:92:49:ed:e4:b2:01:5f:59:ae:a3:89:d2:90:4a:
1b:41:6d:87:ab:f4:29:94:6b:04:cc:5e:1c:52:0e:08:64:ea:
81:dc:08:1c:4a:40:34:c5:85:8f:aa:c4:45:66:48:be:6d:c2:
2f:a3:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:20:38 2026 by rpki-client