Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: QN+ssw3KjzqLQ/yuNksBx5LdM5m35YN1q5eezN0Yjp8=
Subject key identifier: 5B:D1:63:43:CA:D8:B3:2C:AD:1D:82:0D:2D:5D:21:D8:FC:E4:74:29
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019EC0DAF86D489F00B4E4CEAB5717C76410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 12:00:36 +0000
Manifest this update: Sat 13 Jun 2026 12:00:36 +0000
Manifest next update: Sun 14 Jun 2026 12:00:36 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: EhX9G2M3HTy7xL3lN6Esvi5UTOYJJAmM5tQJWf7n7lM=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:f8:6d:48:9f:00:b4:e4:ce:ab:57:17:c7:64:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jun 13 12:00:36 2026 GMT
Not After : Jun 14 12:00:36 2026 GMT
Subject: CN=5bd16343cad8b32cad1d820d2d5d21d8fce47429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:48:92:1a:6d:0b:ef:66:2e:a2:c2:7d:0a:
4f:a9:a1:a4:16:3f:8b:28:d4:c9:5a:8c:3e:10:03:
cd:22:05:5c:06:dc:eb:17:31:f4:62:a5:d9:d4:f8:
41:e7:1c:25:d2:33:89:01:6d:0a:75:08:a7:d4:d0:
17:47:7b:9b:eb:1d:85:10:49:b6:f2:ad:cd:38:85:
01:2d:6c:52:b6:e1:cf:a5:b0:b8:e4:b4:3c:78:1a:
74:93:08:7c:75:f0:6e:a8:88:59:29:00:cf:03:cb:
b2:eb:f0:9c:d5:5f:02:fe:73:41:99:17:35:0e:49:
3d:a7:52:68:76:37:fb:53:cb:5b:82:1d:bf:7e:12:
a7:63:32:a0:6e:44:67:90:3c:8d:8a:f9:ae:29:05:
3c:36:18:70:3a:f8:ba:9f:03:4c:00:45:93:0a:79:
39:ba:ec:16:35:44:04:d5:3c:bc:86:b6:7a:45:99:
55:62:4b:3f:7a:8a:c4:b6:b6:77:be:4b:34:a8:7f:
c9:95:27:d7:1e:9d:2a:4d:b0:81:c4:bc:88:f2:ea:
d9:83:73:b1:21:7c:d1:1b:59:c0:11:11:ef:ca:fa:
40:b2:cf:89:78:8f:b9:15:e1:27:52:42:e5:68:63:
bf:48:02:48:25:3c:f8:c1:03:d9:a4:e3:92:3d:34:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:63:43:CA:D8:B3:2C:AD:1D:82:0D:2D:5D:21:D8:FC:E4:74:29
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:69:94:44:fe:b6:31:4f:10:62:db:af:d2:56:b1:9e:87:
f4:58:28:f4:43:64:8a:51:41:85:af:df:2f:a6:d7:80:99:47:
a3:61:6b:49:30:83:5a:6e:c8:11:83:6a:e3:71:42:df:d1:04:
a4:0a:ca:a8:6e:63:6f:89:11:23:8b:13:7a:af:16:f8:cb:e4:
ed:1d:56:8c:d6:5d:e5:9f:d2:5d:a5:9b:49:81:f0:12:d5:b8:
b5:b5:f7:9f:51:98:c8:6d:33:cc:2f:f7:4b:a2:ae:a4:fe:e3:
87:8c:3b:4b:2a:95:96:06:4a:23:32:36:a8:e9:7a:27:6c:33:
e4:50:72:50:e8:7b:ea:2f:59:35:87:1a:35:f3:00:15:56:4e:
6f:bc:b7:94:56:43:da:91:45:c4:8f:24:6b:e8:79:a0:d3:cd:
9a:d0:95:66:b9:da:5e:73:d2:d8:18:d8:ed:7f:e2:dc:18:f7:
ce:3a:c3:47:64:5e:e2:ce:4e:90:7e:38:fd:7a:9d:3c:65:2b:
2b:3b:40:39:7d:e2:31:06:f0:9b:8a:dc:b2:c4:15:3b:1b:76:
49:f3:98:27:ae:c0:a7:32:6e:1b:8c:30:8c:3f:94:09:df:57:
23:03:a7:e4:2a:15:c5:e7:3e:b4:a1:b4:90:58:f9:56:61:74:
6b:96:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:58:43 2026 by rpki-client