Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: HPSNHJYRYDleRCM4uuf+qsM3yJCfPJRk2J/4QvB94DU=
Subject key identifier: B5:62:0B:55:43:61:CA:A6:C3:C4:82:6D:2D:82:34:C2:1F:3C:2B:54
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019CA9EBAA4C83D75D343FD24E605C63A23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:01:59 +0000
Manifest this update: Sun 01 Mar 2026 15:01:59 +0000
Manifest next update: Mon 02 Mar 2026 15:01:59 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: khekMLVX/OlVpE+AnKeM0LIlshzS/1YpkTw12cieEYA=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:aa:4c:83:d7:5d:34:3f:d2:4e:60:5c:63:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Mar 1 15:01:59 2026 GMT
Not After : Mar 2 15:01:59 2026 GMT
Subject: CN=b5620b554361caa6c3c4826d2d8234c21f3c2b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:da:64:f9:de:df:9f:6f:f3:78:fe:ab:09:
42:24:5a:27:cd:40:a2:51:d0:47:f0:7b:17:38:6c:
d9:a0:26:24:0f:ee:46:82:a0:2d:f7:5c:01:5b:01:
be:8e:ce:92:c6:d5:aa:dc:e3:a0:da:b7:3b:5a:06:
da:95:90:1b:e1:5f:c4:e0:fb:7f:59:d3:c1:b8:f3:
8b:8b:2f:22:74:63:72:85:24:c7:2f:6a:5f:49:6c:
e0:fc:5f:ac:6d:ee:b0:cb:81:91:74:74:ce:05:4d:
2d:5a:75:29:d5:97:2a:2e:c7:7b:b9:fc:5f:db:f8:
b7:ad:90:df:08:37:56:6a:76:70:59:fb:77:12:71:
bd:09:12:3a:c6:23:79:5b:b0:a0:60:53:5f:eb:87:
ec:53:36:db:67:9e:cc:69:92:fb:a3:19:4a:38:72:
05:a5:04:62:23:12:3d:9e:39:f0:90:41:cb:35:89:
63:ef:c6:11:e9:ab:e6:78:5f:22:e5:ae:61:34:5e:
b3:7d:a0:73:b3:43:bf:1c:98:ef:9b:49:89:51:b1:
20:5e:ce:b4:96:38:61:73:8b:bc:04:cb:64:78:3f:
a1:9f:c5:55:34:b6:f7:7b:7a:29:87:75:97:a8:bd:
af:89:c1:29:13:3a:a7:e4:76:5b:50:d9:c3:9d:d6:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:62:0B:55:43:61:CA:A6:C3:C4:82:6D:2D:82:34:C2:1F:3C:2B:54
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:1e:71:d3:d8:fa:85:0c:2f:23:ee:a7:6d:24:0b:59:4c:
69:02:04:a4:a7:82:d3:72:00:42:95:80:49:87:01:79:04:ba:
bf:50:3a:bd:d0:05:6b:10:fd:5c:8f:09:47:9b:36:cf:5c:9d:
32:e4:63:40:33:e8:b9:13:9d:b6:53:64:cf:d9:6c:11:da:0b:
8d:85:62:06:1a:76:fe:e5:b0:03:1d:68:6a:63:98:f0:99:02:
56:03:d1:de:a8:34:72:c9:af:1b:87:07:87:0b:a1:eb:91:52:
21:7b:bd:0c:5b:a7:7a:03:b0:c0:f3:e9:b7:d5:9c:ba:6f:3a:
b4:17:77:f1:f0:fd:5d:84:51:3a:97:06:22:61:35:55:05:19:
70:66:f8:92:41:9b:e0:54:ac:9c:9b:e8:5a:4d:c1:9a:36:eb:
6e:23:d3:a6:3a:da:61:b0:d4:5a:84:15:9a:1e:0d:f4:71:77:
5d:38:3b:fc:dd:9e:da:da:ce:41:86:ed:81:6b:52:93:fc:19:
a8:4b:8d:ec:b9:4e:e2:09:8d:e6:08:2d:e2:7f:02:0a:99:73:
36:36:78:03:2a:f3:24:dd:42:2c:58:fe:d7:a6:06:a0:12:69:
8e:25:41:55:51:b2:f0:b3:59:08:36:47:78:8e:6c:a5:13:ec:
24:11:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:04 2026 by rpki-client