Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: Za9pWia5txgyO04fWBGzzmgH5J2sVkpTjSCvDkBqv9k=
Subject key identifier: DC:E8:87:82:8B:AF:87:F8:8E:C9:47:5D:8C:47:73:ED:95:01:1B:A2
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 019CAD5A3BA0F221D4A1BFAC2949B00DA501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:37 +0000
Manifest this update: Mon 02 Mar 2026 07:01:37 +0000
Manifest next update: Tue 03 Mar 2026 07:01:37 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: S8+RSxzVWWPKi+HDdDXjBcCoRefeUDA0Tf7DTVOJk1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3b:a0:f2:21:d4:a1:bf:ac:29:49:b0:0d:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Mar 2 07:01:37 2026 GMT
Not After : Mar 3 07:01:37 2026 GMT
Subject: CN=dce887828baf87f88ec9475d8c4773ed95011ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:0c:05:4e:c3:05:ee:de:df:77:7a:75:90:
c9:91:f2:6e:83:3e:c4:11:b9:d0:64:a0:2c:83:aa:
af:26:df:c9:76:d2:78:28:42:78:34:0b:d8:a1:4e:
d5:91:e6:9b:77:e9:14:ab:78:d1:5e:04:a5:02:1e:
1d:9d:28:0b:63:fd:b6:7d:f9:83:a5:a4:35:9b:90:
a5:c8:83:68:a1:8d:0e:62:06:ea:21:80:09:15:fa:
e8:18:d6:14:2a:fe:70:99:37:80:28:e6:d4:31:ba:
5b:84:73:22:4d:e3:b0:ce:3c:88:76:aa:be:5c:7f:
17:2d:13:d4:dc:4c:cd:7f:5b:ce:80:d8:a1:6d:c4:
8b:8b:9c:f2:c4:ae:88:d7:4d:06:f8:b5:4b:e6:44:
11:76:32:d9:21:5c:8d:b5:96:f9:f5:a6:db:f9:70:
bf:86:41:70:cc:f2:2b:06:28:74:c2:38:61:87:a1:
53:4e:1b:6e:9f:56:c5:f9:30:f1:c1:08:25:48:cb:
60:9b:9e:01:00:c5:97:b5:3b:90:58:30:bf:f9:c7:
ff:3d:7d:29:0f:58:04:c3:22:10:79:28:f5:05:f8:
5c:aa:4a:65:ad:32:42:ab:74:3c:0d:a9:8a:73:fb:
1d:76:70:89:34:8d:88:57:54:09:c4:1e:28:72:0f:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:87:82:8B:AF:87:F8:8E:C9:47:5D:8C:47:73:ED:95:01:1B:A2
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:56:55:08:ed:7a:eb:c3:ec:6c:85:c4:11:59:e0:33:6e:b4:
75:d3:b7:79:ba:a2:b0:6a:21:0e:73:d7:a1:09:c0:80:d3:f4:
44:24:aa:25:a2:0a:1e:23:e0:14:b6:b7:33:0c:df:82:2e:ec:
52:e0:07:91:3c:ba:8a:eb:66:28:f7:36:d8:9a:e2:e5:db:34:
69:09:b1:e0:73:80:67:81:8b:51:3e:b7:00:a7:ac:2a:a7:a8:
02:c2:13:ab:b0:1d:80:65:74:a8:22:f2:c8:66:75:04:22:57:
b9:39:a2:04:47:56:b4:76:be:c1:a0:bc:7f:b7:a9:c1:67:37:
3c:ed:ba:c4:8b:ff:4f:9e:44:c3:41:1b:8a:34:4c:22:1e:9e:
89:cb:f8:ca:25:f8:97:7f:3c:ae:c3:88:d0:3e:63:0c:a2:41:
56:32:e4:d4:3d:e7:7d:7c:7b:c8:72:ed:1c:5c:68:b2:0d:89:
a2:0f:f7:a7:b6:b9:06:02:b6:60:d9:69:13:ad:f2:54:3e:cf:
cb:ff:21:89:80:e8:cc:82:87:1c:77:e4:57:01:47:79:38:30:
a2:43:43:36:c7:00:67:ae:1f:35:63:36:38:66:29:59:dc:15:
f8:52:86:8a:f4:04:62:8b:ac:91:e8:d0:ea:e1:8f:8e:3f:85:
b2:e1:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:55 2026 by rpki-client