Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: s+X4HEHmVPVNJ1D/h6P56BTyPcE6jDhNXHPaMQIGbUU=
Subject key identifier: B9:46:09:A2:64:98:6F:6F:76:5E:D3:D3:11:F5:2B:6E:D6:7B:FD:D6
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019CAA9003F6E495A8D114078E8C81FBE6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:30 +0000
Manifest this update: Sun 01 Mar 2026 18:01:30 +0000
Manifest next update: Mon 02 Mar 2026 18:01:30 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: Gt8Ji9w+y5nqWcwRRCltfOQyzbI8zdcxtiJsOURIICw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:03:f6:e4:95:a8:d1:14:07:8e:8c:81:fb:e6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Mar 1 18:01:30 2026 GMT
Not After : Mar 2 18:01:30 2026 GMT
Subject: CN=b94609a264986f6f765ed3d311f52b6ed67bfdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:4e:83:2b:8e:8d:1f:b7:c8:09:79:2e:b5:
e3:f8:6e:e5:25:d5:cf:ea:78:ac:9e:1f:cf:fc:34:
b2:7d:74:4a:93:9f:1a:cf:f2:f0:6e:b1:c5:ba:47:
89:1b:14:9a:e6:30:22:4c:92:a5:90:1b:80:30:ac:
02:d1:8f:a0:a1:40:3f:46:46:3a:21:29:ff:17:1a:
2a:03:15:fc:1c:8b:ee:da:63:f2:fb:ff:dd:22:d2:
75:16:0a:46:1c:af:16:50:eb:bd:5f:52:71:63:b2:
a4:a2:37:8e:c3:72:65:4d:a3:52:44:44:15:75:74:
a3:55:ec:fc:e7:05:93:43:a9:a4:d2:3d:af:b6:99:
a0:d4:20:04:a5:6d:ef:cf:5e:72:06:26:cf:e1:79:
23:e6:15:2c:69:bb:6f:81:cf:23:e3:da:3c:9d:a6:
4f:2c:0b:1e:ce:2f:a5:91:3b:2d:bf:3c:37:48:41:
15:ed:43:c8:26:40:4d:1e:46:a5:dc:6e:b4:5a:ca:
76:2f:ef:3e:97:8d:b7:f4:49:94:13:bb:54:07:0f:
84:84:43:ab:d1:6f:08:7a:c9:ba:a2:97:f4:01:df:
66:d6:d6:8b:40:cb:a7:b5:03:c9:77:a8:08:a1:74:
cf:64:94:e1:20:2a:97:27:78:4e:7b:c2:8c:ba:f0:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:09:A2:64:98:6F:6F:76:5E:D3:D3:11:F5:2B:6E:D6:7B:FD:D6
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ae:51:82:f3:5a:8f:11:a8:07:6f:57:44:db:3f:94:c7:45:
06:1f:37:b6:3d:a5:2c:56:dd:d5:fb:2b:75:43:da:31:19:77:
0c:27:1a:49:b0:69:f8:c0:c4:ff:f9:1c:96:d6:57:2d:e1:5f:
91:91:39:98:ed:01:d6:a3:6c:48:9a:6f:fe:5d:38:eb:15:da:
d3:5f:17:1b:f2:9b:d1:cd:97:7f:e4:99:dd:b5:61:bb:40:1a:
09:24:83:cc:79:43:05:fa:68:dd:6b:f9:be:1a:8d:04:11:94:
45:b2:94:9d:10:90:d3:a5:a8:93:f2:13:f2:73:6a:c2:29:6b:
e9:02:18:c3:f4:6c:90:c9:14:02:57:4f:37:81:aa:e3:12:cb:
6d:72:8e:a7:e5:4d:55:d5:31:15:c3:4d:4d:ee:0f:5e:56:42:
c9:4f:20:ed:4b:e3:1e:06:0b:95:a0:f0:5d:26:0d:3e:64:b7:
bb:38:10:ff:fe:9d:fc:5f:20:2d:ad:aa:79:46:e1:69:07:b8:
7a:5a:52:c7:20:e9:7f:f9:f3:a6:a4:bb:46:e3:e8:f0:b7:59:
0d:0c:85:a8:f4:d0:17:c4:cf:bb:03:89:18:7b:7f:9c:5d:18:
67:5d:76:04:4a:42:e6:ff:59:3d:4a:c4:07:45:ed:30:e2:4f:
ce:85:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:13 2026 by rpki-client