Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: 6UrwptGE7ZGRyPPfv/ev5SwKKmGLcPlVfYKqQl3xEVc=
Subject key identifier: E7:36:9A:B6:ED:59:BF:E4:1B:51:88:86:80:56:C6:25:E5:35:89:24
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 019D992B6092DFE2C3CAF7E12E1EF476A30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:49 +0000
Manifest this update: Fri 17 Apr 2026 02:00:49 +0000
Manifest next update: Sat 18 Apr 2026 02:00:49 +0000
Files and hashes: 1: CXw4IiYcMMsq5Ub-2HQJVH14IxY.roa (hash: W9tE5EUHkQFTRiFxznT+ictJcHvJ5wZk3oWmLH3VHTs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: fLUyLffiGxwtnk/jF1mtMYh95GjmUFaM5hwbiMA0icA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:60:92:df:e2:c3:ca:f7:e1:2e:1e:f4:76:a3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Apr 17 02:00:49 2026 GMT
Not After : Apr 18 02:00:49 2026 GMT
Subject: CN=e7369ab6ed59bfe41b5188868056c625e5358924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:85:a0:5c:b0:8e:f0:a7:74:12:71:69:6a:
49:5d:58:62:5a:35:af:73:f8:0b:38:e5:30:ae:b0:
3f:5f:91:02:a6:1c:6c:b8:a1:d2:92:18:72:8b:59:
86:63:3b:a4:ad:c7:2d:68:b6:e2:37:c0:cc:23:57:
9e:34:12:07:77:c9:d6:b7:a3:19:0a:f6:15:8b:c0:
4b:55:2f:8f:41:d1:6c:65:4f:8f:e3:8c:d0:58:99:
7b:32:ab:c9:af:49:85:6c:26:70:46:9b:c9:08:26:
f1:45:57:29:06:25:85:ee:d6:46:f7:43:ca:7b:e4:
dd:25:59:e4:24:5c:a1:63:31:64:81:8c:6c:af:ae:
83:44:b4:48:1b:c1:68:bc:bb:61:af:36:22:e1:bf:
75:b9:84:a2:83:dd:d2:c4:dc:54:5d:8c:b6:22:22:
d1:f9:40:7e:f1:b4:25:bb:d7:2d:d7:ca:64:00:cd:
39:e1:f5:d9:9c:6d:c7:15:bf:88:2b:44:67:27:bd:
5d:41:1f:23:3f:f4:48:fc:46:10:de:b6:2b:e8:de:
40:95:d0:60:26:90:f0:03:eb:6a:3d:be:e9:a9:23:
e4:98:a2:ca:15:9b:62:4a:bc:da:18:60:6b:bd:ca:
0e:48:81:a0:9e:31:56:0e:33:ab:14:a2:eb:15:02:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:36:9A:B6:ED:59:BF:E4:1B:51:88:86:80:56:C6:25:E5:35:89:24
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:52:f5:08:8e:e5:f2:fb:b3:5c:c3:2e:1e:91:77:39:04:
10:30:12:eb:2b:02:3b:3d:75:6f:45:bc:ac:a9:d1:81:96:c7:
a8:30:57:e9:0f:3b:7e:b4:ff:67:ec:68:7e:49:c3:90:fe:49:
ea:a4:30:4d:d1:ee:f6:93:23:88:15:07:42:bd:4a:56:d2:8c:
2b:6c:3b:46:62:5b:4d:b1:dd:d5:59:e5:97:58:13:ea:8c:27:
a0:e3:6d:ff:1e:df:23:56:b8:53:be:67:05:16:98:a2:db:b6:
84:df:c8:08:c2:86:25:05:0d:61:2b:25:57:ef:f7:5a:bb:7c:
f9:8d:12:93:b7:2f:1b:4c:06:47:74:b7:a4:f2:72:12:99:b9:
a0:1d:24:fb:30:25:d7:b2:07:58:d1:22:f5:f9:6c:ef:8f:ac:
c8:37:25:50:ee:3f:eb:dd:2b:2b:a9:70:ca:18:77:47:a1:18:
32:d2:05:71:cd:97:8e:a4:2c:58:06:e3:91:10:5f:66:c2:40:
c2:d9:c3:9d:b5:d7:8d:48:ff:68:0b:cc:7f:9b:73:e2:9f:a4:
d4:ca:c9:47:93:6f:b1:32:98:12:ae:72:25:0a:77:0a:cf:f3:
71:2f:57:85:16:c7:f9:d5:85:31:90:c8:e6:57:a3:68:67:b1:
72:80:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:05 2026 by rpki-client