Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: OzxxIyy4Q/xUNr7qvk8icqeuGG3yDHq5XKSyTmHD8z8=
Subject key identifier: 77:4D:C2:1B:A2:C0:CE:D2:31:57:D9:AA:28:EB:9B:BB:01:C7:D2:47
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019F11F85EDAD82B617EC822FA22291C5700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 062C
Signing time: Mon 29 Jun 2026 06:01:57 +0000
Manifest this update: Mon 29 Jun 2026 06:01:57 +0000
Manifest next update: Tue 30 Jun 2026 06:01:57 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: 1MCKCXawZBYbbNdhgJ4uOfE06dTWZomQoR6S6wH/fxs=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:5e:da:d8:2b:61:7e:c8:22:fa:22:29:1c:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Jun 29 06:01:57 2026 GMT
Not After : Jun 30 06:01:57 2026 GMT
Subject: CN=774dc21ba2c0ced23157d9aa28eb9bbb01c7d247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:57:7a:9b:a8:80:5e:e9:5f:93:2e:25:f8:
11:6f:e7:15:93:c3:12:ed:a5:a6:10:2f:44:70:82:
e0:ec:04:1f:b6:29:3f:32:df:a5:d2:10:27:8e:2f:
1e:1f:63:00:1f:f2:5a:14:02:93:a6:eb:2a:7b:43:
a3:75:87:fd:40:3b:3b:dc:4c:d7:cf:4a:e9:3c:ef:
a0:2b:f0:84:a5:5a:ee:66:05:02:d5:3f:2c:e7:9f:
44:4d:31:5d:2b:88:58:36:c6:41:96:31:8a:49:c6:
16:be:50:3c:8e:be:7a:43:cb:3f:e2:de:6c:ae:1f:
e4:4e:bc:ac:6b:62:cd:78:a1:6c:a3:51:9e:08:fb:
83:f4:7a:27:0a:4e:f5:04:5c:3c:c8:05:74:75:0b:
32:8c:27:c8:5f:24:65:47:df:0e:64:41:8b:56:d6:
30:a3:a2:5c:94:41:e2:ba:81:44:54:af:d4:87:8d:
1b:99:46:54:0b:94:45:b1:a7:bc:86:4f:b3:d9:09:
f4:e8:95:71:29:66:12:a8:ab:70:29:2f:1a:a6:98:
38:06:4f:7e:5d:22:d0:28:a2:fe:5d:42:96:b3:48:
62:6d:9e:df:c9:bb:70:15:0d:69:85:92:87:b4:f1:
8c:fb:43:54:85:7f:2b:4a:c6:c8:f2:3d:ae:0a:11:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4D:C2:1B:A2:C0:CE:D2:31:57:D9:AA:28:EB:9B:BB:01:C7:D2:47
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:da:82:35:b3:26:22:0b:15:41:da:e3:eb:73:36:b6:ff:6b:
41:7b:7a:55:df:b3:74:28:93:a5:da:5f:50:02:ba:95:87:35:
cf:8a:da:2f:63:79:87:9d:ca:b6:ce:76:f5:e2:21:c0:86:ae:
6a:9e:3f:e3:a8:32:1b:62:ad:b1:54:17:fc:24:d1:39:f4:29:
25:23:4f:a8:44:19:5c:60:6a:51:a1:ea:96:ea:f8:a5:a3:f9:
94:d0:4b:7f:75:b3:b1:dc:fc:e2:4b:aa:3b:1f:36:9f:cc:1d:
6a:b1:09:48:fc:c8:2b:96:77:5b:cc:94:81:ed:53:ca:99:66:
ed:61:32:1d:2a:f4:db:d9:55:27:6e:5d:7c:99:15:c7:b7:db:
61:d8:55:8e:d8:88:a6:18:51:61:51:e3:db:e5:78:41:f3:97:
a9:4c:c1:de:f2:be:a8:37:24:79:c0:0f:12:f2:28:dd:14:a9:
e9:43:57:b0:dd:42:fc:cf:ea:df:e5:82:ac:9b:a8:8c:8f:24:
d8:89:10:8e:2e:40:8f:2d:04:b9:12:99:2a:18:e9:fe:56:74:
f8:67:8a:90:4c:8c:c0:52:5f:3c:87:64:81:26:44:34:04:e4:
67:93:79:3b:34:c8:07:8d:39:7c:7f:ed:00:bf:d0:78:50:86:
34:d5:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:56 2026 by rpki-client