
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: 4jCPkxyFgTczCQPfk3POO0++hRIxIsNokgpEaiP9TrQ=
Subject key identifier: C4:CD:BD:9B:2A:DB:C5:AF:2D:3D:2C:CB:94:10:8D:58:DF:C1:34:90
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019FAA8864DFA94178B8F1F234E8C50DC5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 21:01:33 +0000
Manifest this update: Tue 28 Jul 2026 21:01:33 +0000
Manifest next update: Wed 29 Jul 2026 21:01:33 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: srqAx6PE0X9l4necoOvS1C5BeZkBoH2z6roRBWdyePE=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:64:df:a9:41:78:b8:f1:f2:34:e8:c5:0d:c5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jul 28 21:01:33 2026 GMT
Not After : Jul 29 21:01:33 2026 GMT
Subject: CN=c4cdbd9b2adbc5af2d3d2ccb94108d58dfc13490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:d7:1c:12:e5:c8:6c:36:f5:7e:98:43:86:
11:3f:ce:d4:6f:59:8d:c7:8d:94:c5:4e:92:86:41:
d8:31:0f:74:91:ff:c3:28:de:3d:da:52:21:b4:d4:
60:2d:9a:5d:ad:fc:dc:97:c1:ac:75:44:74:67:38:
77:91:10:0e:5b:0f:c1:58:68:06:fd:07:02:b2:3d:
bb:dd:d9:a6:c4:f3:e8:4b:ab:cf:03:fc:a4:6a:a9:
cf:e1:c4:7e:e2:1c:85:4f:6a:32:20:87:ad:d2:c7:
4a:b5:20:3b:86:06:1f:25:6b:0f:d3:da:59:9b:15:
0c:15:d3:0f:71:8c:91:cc:89:b0:11:63:7e:79:f6:
85:65:c8:23:df:32:be:71:90:47:be:6b:0e:6d:4b:
c4:e6:7b:d3:8c:a7:30:76:fb:d7:70:09:9b:ad:88:
4c:75:4d:e3:54:d3:ac:c5:a1:99:41:11:bb:00:99:
e7:36:98:d1:33:8d:d6:de:72:2d:4c:c3:cb:d4:4a:
f7:0e:80:1d:64:f0:7c:3d:17:1e:9d:58:2b:1a:d2:
6a:4d:4f:38:1d:f8:d4:44:f2:46:6d:32:fa:c0:82:
11:22:15:4a:09:18:b7:2b:33:45:71:ca:24:4b:59:
fe:d8:35:9a:c6:bb:cc:60:7d:cd:07:9b:84:f9:36:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:BD:9B:2A:DB:C5:AF:2D:3D:2C:CB:94:10:8D:58:DF:C1:34:90
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:45:00:89:cd:98:c6:3a:c5:e3:d0:49:80:83:c4:9b:4c:
d2:3a:7e:e7:ff:bf:d5:53:22:f9:0c:48:1c:87:04:f1:76:98:
f4:a5:00:d3:67:d5:74:d6:da:1f:f6:0b:40:23:b6:22:41:49:
ea:4d:f4:41:2c:94:14:33:40:b3:d5:b0:4c:15:0a:65:20:ad:
5e:9e:f2:20:5b:b3:4a:54:b1:4f:de:91:d9:8a:c0:d6:36:e6:
de:7d:7f:43:2f:3e:cd:13:86:39:b2:0e:cd:f1:51:b3:25:13:
95:d0:1c:30:c8:6a:99:ec:71:2d:f7:2b:2f:f4:2d:db:06:03:
67:3c:ac:aa:15:5f:72:e1:24:c9:a3:45:fa:4a:5c:fa:01:b5:
d5:74:04:0b:92:81:f7:19:0e:b4:25:dd:fa:9d:df:a4:8d:0d:
e7:c3:aa:1d:f3:eb:3d:0c:66:08:15:9c:e2:e2:55:6c:4e:03:
0e:f4:3b:0a:73:93:5d:95:eb:c0:2e:e0:64:5d:b3:9d:83:07:
9d:5c:b8:1c:a8:73:85:47:0d:d9:62:e1:b9:fe:1e:63:c2:af:
90:82:45:42:0a:81:9b:9e:da:9c:46:bc:06:9c:2d:82:84:ef:
fc:74:df:5a:9b:53:61:11:d3:09:28:5e:af:b0:ba:7b:cb:eb:
e8:51:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:14 2026 by rpki-client