Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: KcDJfZauH3lLk4g1w2lrWXkwiWDvq7BLWpv7WjY+W/g=
Subject key identifier: 07:4A:89:66:FA:81:64:DD:E8:C9:A4:7B:99:7A:DC:05:94:6B:92:20
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019CAA21958C06E503A1979B04F4A0B6EE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 11E9
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: YYlYEujVipof8gv3gjZvptdwCaOl9lMsZrFT+kIMCeY=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:95:8c:06:e5:03:a1:97:9b:04:f4:a0:b6:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=074a8966fa8164dde8c9a47b997adc05946b9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b0:fb:bf:15:dc:98:48:c3:ff:99:c6:17:d9:
54:af:b3:5c:ff:68:f5:88:a8:54:04:d5:98:bb:52:
32:3a:a1:9e:04:c6:54:52:c4:b0:54:c2:f8:38:bf:
b8:0b:8f:dc:a0:5f:6e:f7:4a:25:42:b5:48:c5:83:
3f:58:43:5f:46:6d:f8:cf:f9:0a:4f:5b:0a:df:54:
95:37:8c:31:73:4d:30:68:01:70:0d:5d:32:57:c1:
12:61:a5:25:2c:80:58:34:a1:6d:33:bf:45:28:ad:
66:58:83:00:a8:4a:93:84:a4:4a:cb:7c:9c:5e:96:
1a:1e:dd:7f:7e:47:2b:7d:87:bd:e5:c1:a1:31:84:
e8:34:a3:6b:07:73:79:c9:3e:a8:04:ae:cd:ca:74:
2b:a8:e8:b3:ba:a0:75:20:e7:84:67:31:4e:13:d8:
3d:9b:66:c2:9d:89:ed:70:f3:46:92:a6:92:20:eb:
9f:86:3e:aa:da:b3:88:fe:f8:a7:33:09:87:08:ef:
0f:1f:56:4e:0f:a3:e2:2d:0c:cf:67:f5:62:20:c5:
7d:bc:9d:90:35:43:80:65:8a:c0:9e:ba:9f:48:44:
c8:a0:c8:17:e8:91:4a:85:fe:6b:cb:87:5b:c4:99:
c5:f8:fd:1b:32:30:6c:4f:55:6c:a1:b4:3b:a3:d0:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4A:89:66:FA:81:64:DD:E8:C9:A4:7B:99:7A:DC:05:94:6B:92:20
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2b:59:7e:29:4d:a1:0f:af:2d:c2:6f:51:76:f1:d1:77:10:
0d:db:8f:62:5b:74:d3:86:60:cf:83:6e:6a:a5:67:95:92:2b:
fc:9f:c4:81:fd:cc:cc:98:ca:72:30:8c:99:db:88:cb:28:bc:
5e:3e:3d:e1:e7:aa:9f:5f:7a:dc:5c:f5:65:b2:93:82:e9:8f:
e4:8c:82:af:ba:eb:ee:33:12:bb:ad:67:58:ce:c5:06:d7:a5:
2a:05:81:a4:52:47:65:40:54:03:59:63:a3:98:89:de:6d:c9:
98:19:bf:e5:39:31:28:07:e0:22:d6:55:47:74:b2:af:83:4d:
4e:01:05:cf:36:6f:bc:70:82:4b:db:a6:55:a6:43:99:97:df:
3f:c1:f2:8f:f0:b9:71:76:95:70:3c:f4:66:4f:f6:e6:2c:a5:
61:b1:64:28:27:75:b1:8b:a6:ba:b5:55:44:41:14:7d:76:56:
c3:92:49:08:5c:df:13:6b:1d:ae:84:f8:79:94:ee:7a:ba:8e:
94:90:51:84:30:0b:3e:36:47:e7:eb:66:90:30:00:a2:fa:71:
c9:b5:b9:d9:63:9e:1c:27:47:88:a0:0b:46:96:81:2c:6f:82:
70:d4:cc:53:e3:fe:49:aa:e9:3b:5b:19:ad:d2:95:a5:69:9b:
5a:0a:36:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIZWMBuUDoZebBPSgtu59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjYwMzAxMTYwMDUzWhcNMjYwMzAyMTYwMDUzWjAzMTEwLwYDVQQD
EygwNzRhODk2NmZhODE2NGRkZThjOWE0N2I5OTdhZGMwNTk0NmI5MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rD7vxXcmEjD/5nGF9lUr7Nc/2j1
iKhUBNWYu1IyOqGeBMZUUsSwVML4OL+4C4/coF9u90olQrVIxYM/WENfRm34z/kK
T1sK31SVN4wxc00waAFwDV0yV8ESYaUlLIBYNKFtM79FKK1mWIMAqEqThKRKy3yc
XpYaHt1/fkcrfYe95cGhMYToNKNrB3N5yT6oBK7NynQrqOizuqB1IOeEZzFOE9g9
m2bCnYntcPNGkqaSIOufhj6q2rOI/vinMwmHCO8PH1ZOD6PiLQzPZ/ViIMV9vJ2Q
NUOAZYrAnrqfSETIoMgX6JFKhf5ry4dbxJnF+P0bMjBsT1VsobQ7o9BYtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdKiWb6gWTd6Mmke5l63AWUa5IgMB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCtZfilN
oQ+vLcJvUXbx0XcQDduPYlt004Zgz4NuaqVnlZIr/J/Egf3MzJjKcjCMmduIyyi8
Xj494eeqn1963Fz1ZbKTgumP5IyCr7rr7jMSu61nWM7FBtelKgWBpFJHZUBUA1lj
o5iJ3m3JmBm/5TkxKAfgItZVR3Syr4NNTgEFzzZvvHCCS9umVaZDmZffP8Hyj/C5
cXaVcDz0Zk/25iylYbFkKCd1sYumurVVREEUfXZWw5JJCFzfE2sdroT4eZTuerqO
lJBRhDALPjZH5+tmkDAAovpxybW52WOeHCdHiKALRpaBLG+CcNTMU+P+SarpO1sZ
rdKVpWmbWgo2ew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:54 2026 by rpki-client