Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: HYo7MjOU+QKmJERbQQGYz2oDkGDgckGITDPKRsZBes0=
Subject key identifier: 51:49:9C:08:5A:02:11:37:7C:1C:3A:5D:2E:40:C1:40:3D:57:71:45
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019D9A0735669ED4D4B4852F87F29D78B0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:56 +0000
Manifest this update: Fri 17 Apr 2026 06:00:56 +0000
Manifest next update: Sat 18 Apr 2026 06:00:56 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: R78ySXIlm7JMibiTQX+6Ws3l/52aDQGHERgSxgEJoUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:35:66:9e:d4:d4:b4:85:2f:87:f2:9d:78:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Apr 17 06:00:56 2026 GMT
Not After : Apr 18 06:00:56 2026 GMT
Subject: CN=51499c085a0211377c1c3a5d2e40c1403d577145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:03:75:93:ab:29:f3:aa:43:59:a3:2f:6d:
a7:86:b5:b1:19:93:30:2c:08:c2:2d:d6:a1:1b:29:
74:58:3e:0a:d8:fb:c6:cd:90:57:7e:bd:28:d7:e3:
36:f9:7a:34:b1:b5:ef:4d:10:2c:8a:1a:5e:09:c9:
dd:b4:fd:59:9b:eb:d7:b0:0a:af:ea:c4:e2:f2:cc:
74:68:01:cd:4e:c1:35:dc:f6:3b:03:5b:28:9b:42:
f8:df:99:b0:c0:8d:d3:98:16:19:fc:59:eb:fe:f1:
b9:36:88:95:f6:20:c1:04:01:ed:92:98:28:79:bb:
80:19:b2:80:9e:89:1c:01:f5:22:ea:7c:5c:24:88:
5f:81:37:4c:f2:ca:04:93:e5:72:12:19:97:ba:9e:
9e:17:18:51:e0:70:c5:89:9e:14:ac:d3:47:92:c2:
af:8a:7e:91:9b:df:3a:d1:4f:aa:b3:66:ee:00:69:
ed:80:a0:2d:87:2e:2b:df:c4:7a:25:a9:25:be:8b:
02:5b:bb:d6:4c:0f:3e:1e:86:ff:c0:c4:db:06:52:
46:8e:53:fa:16:3e:d7:21:3d:53:f2:a9:bc:8c:72:
8b:b3:1c:d1:c7:8c:ea:1a:30:e0:0c:6b:aa:b0:43:
05:8e:b1:0b:17:45:d0:7b:a8:e8:4d:10:ee:51:1d:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:49:9C:08:5A:02:11:37:7C:1C:3A:5D:2E:40:C1:40:3D:57:71:45
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9c:29:c2:41:70:cf:ab:55:c1:a6:f0:d8:75:d4:39:ea:d7:
83:2c:75:84:ba:da:8e:b5:cb:b8:da:42:54:d2:0c:31:af:6e:
62:a6:31:fb:3e:56:e4:7d:55:bf:19:53:4f:f8:77:a7:a7:99:
38:e3:3f:ab:a6:da:7e:27:84:28:bd:49:5e:eb:33:f3:d1:ae:
8b:cc:ca:47:a0:34:12:3a:4c:e3:d1:df:83:c2:65:eb:6c:02:
f7:ec:8d:62:fa:d6:05:bb:8c:79:09:b7:05:1d:ab:fa:0d:5e:
23:bf:d5:b0:31:da:b7:ca:0e:29:ea:9b:9e:e5:53:58:f4:32:
05:f1:e6:1a:cf:4a:20:25:90:bf:e3:cd:34:8f:aa:5e:74:17:
46:c1:19:35:08:cc:52:d3:4e:dc:19:2f:39:ac:64:05:fa:ff:
17:f5:9a:bc:0f:91:df:0c:3b:0d:4d:59:ef:8f:b6:58:0b:33:
d8:05:20:a2:b0:26:53:92:8f:63:b2:b1:1d:bd:6d:d7:70:a3:
dd:9c:3c:62:ee:0a:56:09:07:c0:db:75:25:6b:1d:04:35:8d:
1a:99:1f:a6:57:08:0e:56:61:de:a5:d6:b7:2e:23:c8:97:ad:
50:b8:58:81:7b:51:4e:4e:63:a7:60:5a:56:7a:cf:93:23:e9:
78:fd:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:02 2026 by rpki-client