Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: AIi50ImxLC70d2MON32lCswwamXbMuP7Iz43exN3Q20=
Subject key identifier: 0B:C8:42:39:7D:9D:8C:0F:B9:78:A9:CC:17:8D:B5:0D:F0:FA:D3:D8
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 019CABA1C62F24946A14D1D54F68DD7A51A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: CXw4IiYcMMsq5Ub-2HQJVH14IxY.roa (hash: W9tE5EUHkQFTRiFxznT+ictJcHvJ5wZk3oWmLH3VHTs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: AF1hea9j9IHeFaq2vHbC1TNw651rYqIIDTXh8s9c9JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c6:2f:24:94:6a:14:d1:d5:4f:68:dd:7a:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=0bc842397d9d8c0fb978a9cc178db50df0fad3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:df:60:23:0d:a9:e0:d9:4b:71:f8:ef:4f:
b8:fb:fb:c2:e5:d4:23:f4:d1:60:fb:f1:f7:42:0c:
dd:c3:ac:e8:c1:85:f7:1c:55:8e:b3:a6:1b:e7:bb:
87:53:c4:ac:be:8b:e2:82:e1:a7:75:32:d1:a0:01:
74:f7:78:0b:10:cb:bc:8c:d0:a3:09:8d:cd:92:53:
47:a5:17:41:d6:de:43:5a:a9:a6:1a:10:b4:fb:9d:
72:09:71:01:32:83:21:55:46:bc:ca:4c:74:74:5a:
19:0b:e0:1a:fb:9a:91:bc:12:8e:31:fd:cd:55:74:
60:f9:e0:05:21:73:af:cc:05:13:3d:63:e6:1e:a5:
2a:80:24:d4:cc:af:c7:e0:b6:b7:11:a8:8d:23:64:
16:71:f1:37:ce:0c:c0:21:71:10:63:db:15:4d:6e:
6a:81:a3:49:0e:70:a4:d4:cb:8f:a2:92:cf:24:f5:
c2:dd:93:0c:98:fe:e0:6f:84:f4:4b:65:15:63:3f:
42:ee:32:e4:55:96:b0:2a:7f:85:3f:9c:2b:ff:75:
46:f2:03:1a:7b:d8:98:8d:d1:4b:f9:1f:6c:1a:9c:
7b:6d:e7:7f:8d:13:0e:79:f9:2a:8a:21:f1:c3:28:
de:7c:b2:8e:9c:81:67:68:cc:cd:17:1f:ff:f3:b3:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:42:39:7D:9D:8C:0F:B9:78:A9:CC:17:8D:B5:0D:F0:FA:D3:D8
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:df:cc:30:11:dd:cf:3b:6c:98:e6:df:61:a6:a6:7b:03:5f:
d6:ff:59:9b:83:e8:83:a5:c4:7a:35:ef:f4:31:9a:61:68:0e:
93:00:bb:de:cf:0f:1c:7e:f0:98:29:82:ac:ac:c8:64:5e:e0:
3c:0b:b2:4d:0b:3a:46:9b:93:7e:8a:9c:67:20:bf:56:d9:bb:
d4:fe:75:b2:1a:eb:a4:15:91:67:d9:99:aa:d8:03:d4:3a:a5:
85:eb:a9:00:eb:ab:ee:84:3f:86:92:d0:fa:ad:e2:d6:23:58:
92:1d:de:63:21:0c:72:b3:09:24:a7:e0:69:6d:bb:2e:19:2f:
a9:6c:b3:0d:ff:4b:f3:7a:4a:b5:49:79:ab:5f:b7:f3:77:96:
18:8f:69:d1:45:4d:7a:86:ff:c7:c6:28:22:4b:4f:a7:d4:99:
4c:6c:78:f0:cd:b1:a6:4a:3d:9c:26:6b:26:33:d8:21:50:59:
71:a4:57:5c:b8:f5:f5:4b:3c:32:e4:70:57:36:11:0a:86:db:
4a:39:9a:71:09:71:69:08:ce:cd:e9:37:4f:ea:fb:30:7d:ee:
b1:27:e6:a2:03:5a:1e:36:14:2c:42:da:1d:66:f8:d1:b0:76:
7b:00:7e:e4:af:33:eb:6e:c3:30:36:01:29:a0:72:d1:bc:94:
3e:02:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:26 2026 by rpki-client