Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: Xk6QyGAWFzhrgeMvUqese/MQ4QFK9TX0Ron0T/ILsac=
Subject key identifier: 24:33:A0:8E:21:E2:D1:67:37:6A:3E:3E:7B:9B:C8:F8:CA:BC:9E:61
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019D9962006526D2588DF18569C984CF6574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:29 +0000
Manifest this update: Fri 17 Apr 2026 03:00:29 +0000
Manifest next update: Sat 18 Apr 2026 03:00:29 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: +B62FzY2TPQFhxkehKte3ogxgLzKnEa6EUrFtr/gLFQ=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:00:65:26:d2:58:8d:f1:85:69:c9:84:cf:65:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Apr 17 03:00:29 2026 GMT
Not After : Apr 18 03:00:29 2026 GMT
Subject: CN=2433a08e21e2d167376a3e3e7b9bc8f8cabc9e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:84:54:35:f9:b4:29:da:58:47:50:73:aa:
1b:92:79:20:94:82:3e:b3:34:62:e9:ca:1f:aa:11:
5a:26:31:59:d5:dc:90:bb:9e:47:5c:08:f6:ff:67:
0f:7c:3b:16:82:49:e1:dc:93:1b:08:52:96:fc:49:
74:1b:ad:1d:60:bc:e8:7e:82:66:28:63:cf:a1:dc:
fe:09:d1:83:4e:9b:2d:62:d7:b4:ea:8c:67:39:07:
7b:a2:24:ec:14:50:65:e9:84:42:c0:5a:27:69:d5:
36:48:13:e7:5b:b5:57:f1:a9:ce:0c:94:f3:38:2e:
02:d3:7a:8f:50:5c:00:da:04:cc:f6:b5:1a:f7:fc:
e7:e6:39:8d:e1:94:56:a1:1a:0d:1b:83:cb:5c:f2:
2e:40:cf:dc:b6:40:f2:dc:10:5e:c7:32:62:7c:77:
93:f0:0f:32:70:63:38:67:32:07:95:b9:ae:a8:e4:
ef:84:31:a6:e3:88:67:a1:79:ed:e0:e0:26:8d:7b:
57:2d:e3:d4:37:c9:52:5e:68:bc:fd:2c:11:d3:5c:
be:78:e5:a6:8a:bb:23:e0:7d:3a:e2:04:a3:7e:81:
72:1e:6f:b6:4e:d7:d7:44:df:5f:99:51:33:88:bd:
8f:ed:c9:8e:e1:52:01:e2:84:06:40:53:d0:bd:b1:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:A0:8E:21:E2:D1:67:37:6A:3E:3E:7B:9B:C8:F8:CA:BC:9E:61
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:7b:fe:f6:f3:60:3d:a7:a9:69:f8:36:05:27:fc:c7:a6:
d0:d7:d3:48:60:56:b2:cf:c4:9b:b0:40:03:35:33:96:21:f4:
c4:8b:51:56:d0:3f:0f:6f:8f:8a:ba:06:8e:5f:dd:6e:f2:6c:
6d:ed:6b:71:74:f5:8a:1a:bf:6c:9d:7c:74:a5:1a:26:f2:68:
3f:bf:9d:d4:65:9c:38:6c:5d:f1:84:77:14:6d:a4:ba:85:ee:
75:18:82:db:80:aa:29:eb:81:77:b4:72:0a:e9:63:a2:30:79:
dc:28:97:d1:29:e5:ff:b5:5e:53:79:b5:94:62:0f:9b:e1:f3:
c0:c8:d9:2e:73:75:2e:cd:8a:62:7f:b2:c6:8d:9f:00:38:4d:
ad:d8:66:33:a5:65:4f:07:b8:2a:1a:66:06:da:bc:b1:10:25:
34:02:6f:be:35:af:e2:f0:5b:20:93:1e:0a:d1:6d:f1:85:29:
00:e7:3c:3e:c3:76:32:72:5f:c4:bc:dd:9c:35:22:da:19:21:
7e:19:e9:bc:55:08:38:31:64:8e:8c:52:cc:af:d4:48:51:52:
4d:15:ab:9d:54:b7:84:62:d3:30:99:20:4c:a1:2d:8f:bb:86:
41:8f:60:01:3b:87:b0:df:2e:c1:6e:eb:9a:d3:59:cb:b4:8c:
26:1e:02:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYgBlJtJYjfGFacmEz2V0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjgyZDc3YzY2MmU2OGJiODdlODMzMzhiNzZhZDZiZWFk
OTMxODUwHhcNMjYwNDE3MDMwMDI5WhcNMjYwNDE4MDMwMDI5WjAzMTEwLwYDVQQD
EygyNDMzYTA4ZTIxZTJkMTY3Mzc2YTNlM2U3YjliYzhmOGNhYmM5ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLOEVDX5tCnaWEdQc6obknkglII+
szRi6cofqhFaJjFZ1dyQu55HXAj2/2cPfDsWgknh3JMbCFKW/El0G60dYLzofoJm
KGPPodz+CdGDTpstYte06oxnOQd7oiTsFFBl6YRCwFonadU2SBPnW7VX8anODJTz
OC4C03qPUFwA2gTM9rUa9/zn5jmN4ZRWoRoNG4PLXPIuQM/ctkDy3BBexzJifHeT
8A8ycGM4ZzIHlbmuqOTvhDGm44hnoXnt4OAmjXtXLePUN8lSXmi8/SwR01y+eOWm
irsj4H064gSjfoFyHm+2TtfXRN9fmVEziL2P7cmO4VIB4oQGQFPQvbGbuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQzoI4h4tFnN2o+PnubyPjKvJ5hMB8GA1UdIwQY
MBaAFJkoLXfGYuaLuH6DM4t2rWvq2TGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGIt
MDU2YjljMjMxZjM0LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGItMDU2YjljMjMxZjM0
LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGt7/vbz
YD2nqWn4NgUn/Mem0NfTSGBWss/Em7BAAzUzliH0xItRVtA/D2+PiroGjl/dbvJs
be1rcXT1ihq/bJ18dKUaJvJoP7+d1GWcOGxd8YR3FG2kuoXudRiC24CqKeuBd7Ry
CuljojB53CiX0Snl/7VeU3m1lGIPm+HzwMjZLnN1Ls2KYn+yxo2fADhNrdhmM6Vl
Twe4KhpmBtq8sRAlNAJvvjWv4vBbIJMeCtFt8YUpAOc8PsN2MnJfxLzdnDUi2hkh
fhnpvFUIODFkjoxSzK/USFFSTRWrnVS3hGLTMJkgTKEtj7uGQY9gATuHsN8uwW7r
mtNZy7SMJh4C+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:53 2026 by rpki-client