Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: q6IGdHpj4uHRdWEUCXt+kHlIb/QHFCmhBmtQLjYb7YQ=
Subject key identifier: A5:EE:30:E6:F8:8F:39:63:F0:04:6E:B1:37:9F:7B:70:39:84:56:A9
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019FA93E5DE3C7290DF638DEEC9A9EB2F90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 15:01:04 +0000
Manifest this update: Tue 28 Jul 2026 15:01:04 +0000
Manifest next update: Wed 29 Jul 2026 15:01:04 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: 4vkeOJ6zWBfYjoZcHdHfnrOjcoU62M/+9aHtMXydF/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:5d:e3:c7:29:0d:f6:38:de:ec:9a:9e:b2:f9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Jul 28 15:01:04 2026 GMT
Not After : Jul 29 15:01:04 2026 GMT
Subject: CN=a5ee30e6f88f3963f0046eb1379f7b70398456a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:b2:4b:2e:6f:7b:7f:ae:84:94:da:31:c6:
9a:33:a3:7f:27:c9:28:c9:c7:02:4c:10:d4:01:3f:
de:be:81:c7:10:f5:ba:7e:69:a0:c1:c3:dc:c4:8e:
58:a8:94:a5:da:58:48:c5:b3:18:05:ce:c0:d1:c6:
b3:f4:14:e7:48:c2:80:e6:48:18:a4:8a:d4:e9:45:
49:c1:04:c6:9e:69:12:e6:c7:ab:fb:58:ad:8f:62:
5a:fa:9c:fa:64:64:42:54:69:c4:0a:2e:74:9e:34:
26:76:12:ac:9c:12:04:1b:bb:4a:38:79:7e:6b:c2:
ca:6c:a8:3e:d1:a4:72:50:27:92:53:6a:d7:de:23:
d6:9e:43:e8:03:22:38:13:3c:9f:c4:56:c8:ef:71:
31:fa:70:95:c8:a0:84:7b:c0:57:0a:0b:f6:4b:2f:
bb:9e:a5:8a:95:98:c5:d9:bf:f3:4e:e9:03:83:e2:
22:cf:fb:81:db:12:1a:53:3a:18:51:0d:1e:1b:bd:
ea:a6:37:04:e7:95:66:dc:70:f5:e9:c0:dd:23:f5:
41:3f:e2:53:ee:99:c7:06:73:65:a4:4b:5d:78:61:
a9:10:09:56:bb:d2:86:e3:c3:54:95:49:18:97:c5:
2b:c5:0e:ab:6e:1d:19:92:78:f3:25:7c:e0:36:a8:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EE:30:E6:F8:8F:39:63:F0:04:6E:B1:37:9F:7B:70:39:84:56:A9
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:76:8d:11:5b:a6:c4:ab:43:fe:a4:45:cc:00:9a:e4:6f:df:
08:2f:d4:b3:d4:3a:ca:06:53:0a:0d:6d:0a:b0:fe:b9:5b:37:
91:8f:99:10:5b:26:a1:22:51:35:7d:bc:44:0b:79:4c:72:dc:
23:9f:ed:94:df:d9:80:4f:3e:62:21:76:cc:ad:12:a8:b3:a4:
4d:77:3e:87:c6:dd:9b:0f:f1:c1:75:db:6c:5a:e6:cd:35:11:
fa:9d:0c:34:8e:bf:49:6a:55:01:ea:f1:fa:e1:11:34:5d:64:
ad:53:0f:b7:5f:36:79:90:fb:d0:50:9b:dd:41:2d:da:0a:c7:
64:2e:be:49:24:6a:a6:58:50:47:53:6f:c5:1a:3e:a1:b4:90:
1f:54:ac:31:90:21:94:f0:03:ca:ed:76:ad:44:43:95:46:71:
76:11:b2:e8:b9:f4:b0:27:2b:2d:32:68:ef:55:4e:d2:f4:33:
7e:da:39:b6:3f:74:a9:59:3b:c9:6a:f0:3d:c3:f4:00:38:24:
2b:e9:a9:dc:41:6a:10:6b:e9:7f:95:f0:86:51:60:5c:52:92:
43:df:a8:79:9b:a1:de:93:49:a8:30:4b:3f:fc:e9:04:32:53:
c1:fa:83:7d:77:c8:3b:9d:69:8a:e1:e1:60:07:82:5c:17:a3:
6d:76:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:36 2026 by rpki-client