Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: F8cQULjZYwpt7X1iTCtIL7gNMeSYp5oJrH0wDYURtdc=
Subject key identifier: AB:98:63:11:61:09:84:D5:BF:DF:70:39:28:35:A3:28:0F:C1:07:67
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 01A0CEC7FD311BE6602FAA60DE2B285E782D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 15:00:07 +0000
Manifest this update: Wed 23 Sep 2026 15:00:07 +0000
Manifest next update: Thu 24 Sep 2026 15:00:07 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: 6YpL4oT4M4WV+opCvfGUNw9EERVEwRIUscIuaKUBNC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c7:fd:31:1b:e6:60:2f:aa:60:de:2b:28:5e:78:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Sep 23 15:00:07 2026 GMT
Not After : Sep 24 15:00:07 2026 GMT
Subject: CN=ab986311610984d5bfdf70392835a3280fc10767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:1c:de:f7:06:cb:29:c0:bf:6b:cc:0b:df:
97:27:97:a9:f8:83:66:24:31:60:ed:ca:91:e4:4a:
c4:d2:7f:fe:c3:f0:21:8d:9f:fe:f5:56:8d:ed:d0:
6f:59:8e:07:f8:36:5b:00:a7:2b:4c:60:a7:67:b9:
26:dd:bb:0d:9d:05:54:75:a8:5a:3a:3e:31:75:13:
fc:54:86:7b:e5:7e:16:1d:86:17:1c:14:7c:1b:5b:
cf:4c:3b:11:cb:74:1a:d4:3d:c8:a8:7f:b3:8b:54:
26:cc:10:bf:6b:19:65:de:74:9a:63:a3:73:90:31:
9e:d0:50:4e:21:78:18:f6:7d:30:8c:93:5d:92:9f:
f8:ac:59:37:bb:ea:d2:cf:fd:f5:0f:e3:6d:1a:53:
c6:d4:e0:c0:76:7f:f2:f0:7b:47:1d:04:5a:a4:59:
02:a0:3d:92:2b:b2:10:72:30:80:f4:c6:9d:1f:d5:
33:f7:05:20:24:42:3c:20:71:03:d2:31:be:db:d7:
6b:1a:62:4c:27:59:9a:64:fa:75:a3:7f:ad:30:a8:
ad:f2:a0:ed:01:87:af:7b:dc:8b:57:fd:c2:be:e6:
de:ea:4d:80:12:ca:a4:ce:1a:98:b6:be:f2:f1:4f:
ba:22:30:d8:55:90:9a:4e:49:ed:65:d9:70:8a:71:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:63:11:61:09:84:D5:BF:DF:70:39:28:35:A3:28:0F:C1:07:67
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:76:95:35:ed:fc:db:3e:06:56:00:10:d7:19:15:55:23:ae:
b2:28:db:41:ec:00:19:51:dc:92:96:14:49:46:7b:f6:44:a1:
a7:4c:1b:19:29:62:66:71:b4:f0:63:85:d1:2f:ff:cb:70:38:
09:46:0c:65:98:ba:45:bf:2c:e0:bc:8d:4c:bf:4a:94:ab:b0:
25:e9:bc:6a:bc:f4:35:34:e4:fc:75:b0:fe:25:a3:f3:ee:04:
07:99:90:48:6e:38:4c:62:99:d5:57:e2:77:8d:db:23:fe:d1:
86:2f:01:01:4f:e7:91:49:a3:aa:41:71:a6:d3:b4:54:2e:78:
74:9e:17:37:82:f6:44:f5:b2:c3:0d:8a:89:86:36:fb:35:13:
f6:49:12:e9:ea:01:e1:96:91:1a:9b:01:3b:1f:37:ce:48:09:
84:02:83:d3:32:8a:e7:03:9e:ea:64:80:2e:00:97:5c:cc:95:
a7:ff:79:a4:b6:24:df:61:ef:9d:35:ea:1d:2a:52:75:b6:d8:
71:fa:79:a0:b0:dc:de:24:c3:7b:c0:a5:e2:b2:43:b0:e4:eb:
49:e2:6e:1e:70:7b:ae:59:eb:1b:6a:dc:c4:0f:6a:30:45:46:
88:7c:1b:b1:f8:e3:6f:4a:c7:38:c1:73:96:7a:76:96:6f:f5:
d6:0c:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:53:39 2026 by rpki-client