Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: m6YEr/HLNYXfKkl1FcDTR79x8YT3bAd5Op17B9I+e4E=
Subject key identifier: DD:2D:3C:C9:43:CD:B6:1A:EF:B4:AA:22:E2:85:E0:8C:49:72:D0:C0
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019FA89A64C8FCD2BF55BD3CC6CAF04EC662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 12:01:58 +0000
Manifest this update: Tue 28 Jul 2026 12:01:58 +0000
Manifest next update: Wed 29 Jul 2026 12:01:58 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: fSTfgrIOnpk7GgB8hX5w5OnsE+FxlafFCDzjRFMYeq8=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:64:c8:fc:d2:bf:55:bd:3c:c6:ca:f0:4e:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jul 28 12:01:58 2026 GMT
Not After : Jul 29 12:01:58 2026 GMT
Subject: CN=dd2d3cc943cdb61aefb4aa22e285e08c4972d0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:e2:bb:99:b0:a1:a6:94:a4:55:b9:d3:16:
93:26:2e:76:a9:72:82:c2:9d:ce:00:5b:f0:22:99:
fe:7f:c4:28:ca:6b:29:79:50:05:dc:3c:6f:fd:65:
b3:6e:1e:67:b1:8f:a5:8d:ee:6e:0c:da:50:fc:66:
16:a3:f3:27:a9:e8:e4:dd:26:21:ce:13:f3:fb:e4:
23:34:33:89:54:7c:c7:b5:d4:fb:28:11:7d:71:a3:
16:2f:d9:45:40:1e:4b:e0:62:40:cd:45:7c:8f:74:
f7:35:64:6d:35:f6:46:9a:9e:5b:7e:6d:1e:70:56:
1e:80:69:af:50:5e:3c:52:26:a1:79:15:3d:8c:34:
ba:d7:b1:34:f1:9a:46:26:d9:c7:4d:31:16:96:81:
5f:62:e9:ec:d9:51:8a:82:4d:2c:f1:f6:45:18:19:
a4:46:bb:bc:56:19:5a:ed:f7:e2:c3:0d:27:89:c6:
08:77:44:6f:20:2b:81:e6:dc:73:96:22:61:27:33:
a9:a6:4f:4d:70:1a:98:b8:f5:e1:24:55:e8:9a:7a:
06:80:49:1f:04:34:52:bc:3c:cf:36:71:e3:d4:70:
b5:36:3d:a7:16:04:ae:a3:6a:3b:f5:cd:43:da:e5:
24:94:9c:08:ba:fc:6a:2f:29:81:7b:e4:7c:d3:48:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:3C:C9:43:CD:B6:1A:EF:B4:AA:22:E2:85:E0:8C:49:72:D0:C0
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4c:9f:70:be:b1:b7:d2:20:86:e0:4f:4a:da:08:28:7e:e7:
90:33:c4:51:44:ca:28:29:99:cb:be:71:40:88:b5:92:5c:39:
24:7b:02:81:b7:f3:9c:46:93:1b:7c:d7:9b:57:a3:4f:73:f2:
3c:2f:65:0a:60:4c:21:c3:12:6f:5f:d6:d4:4d:34:c5:96:83:
44:66:59:f9:11:60:c4:ff:73:d0:71:84:3b:7e:2a:91:c4:f7:
38:3d:f5:42:0f:7e:37:4b:9c:5a:ec:04:e0:db:52:6b:8d:87:
19:44:85:78:e5:e0:ef:0c:4a:df:32:3a:75:8e:77:b6:5c:2d:
25:c9:cb:50:a1:37:8f:c7:f2:1f:d4:8d:82:7c:df:8d:3c:78:
a2:7c:b6:de:b6:8b:ec:39:be:ed:89:79:22:88:6d:cc:d5:ef:
c0:9f:f6:5a:3f:97:89:d8:1d:8a:f2:ac:30:2e:94:fe:ff:c1:
5b:c2:22:60:ab:87:c3:9a:22:a8:63:3b:d4:2b:5d:0e:03:63:
5d:1b:75:81:fe:64:cd:8e:f8:15:5e:3b:68:d8:7c:f2:63:d1:
cd:27:bc:0f:cd:18:43:55:7b:a8:c8:1a:76:26:b1:bd:f7:2e:
ad:2c:3e:81:a9:6c:b7:f4:a5:be:ed:05:5b:31:f4:4e:e2:8a:
d1:5a:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:12 2026 by rpki-client