Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: JITODn8CwPYPaTpDXY6FTnoSvYgdoFSBwCN4UQ3ZfwU=
Subject key identifier: 09:E6:77:94:79:AC:0B:C8:45:F3:70:CB:4F:32:FB:A6:DB:D8:C9:0D
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019D38D3CD04110142EFD9E6652665767822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 0537
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: Z0L4syKE9AsnRPs04KjZa656eQExLzc/rjJFn/fB1MI=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cd:04:11:01:42:ef:d9:e6:65:26:65:76:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=09e6779479ac0bc845f370cb4f32fba6dbd8c90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:79:f8:08:e9:3c:97:97:d8:2e:ed:00:40:
4d:a5:74:80:77:8c:64:e1:8d:ee:95:6d:ff:21:67:
75:db:2d:a8:d8:fd:f0:c3:53:3f:ea:45:30:6c:73:
a0:34:39:d1:d7:43:b1:89:55:e7:24:22:c1:cc:2e:
35:af:39:3f:09:2c:5f:43:95:01:7b:f1:fe:57:b8:
dd:e3:cd:42:5a:fc:80:66:1f:a5:9c:83:74:84:66:
b7:96:b8:11:18:38:d1:2a:59:61:fd:b4:f1:a3:81:
c9:56:69:86:53:d0:2e:c1:bc:7d:bf:9e:02:3f:7c:
9e:6e:4d:eb:af:10:b8:da:a9:27:e2:18:5c:fd:96:
ba:5b:eb:d2:16:3f:0d:89:6f:47:be:a6:8a:5a:d1:
36:66:58:65:8b:fb:a0:83:86:7e:14:b9:b7:b9:f0:
82:76:55:90:a7:ed:89:55:8c:1e:37:12:e2:36:26:
74:a4:54:9e:48:8b:9a:28:10:50:4a:db:ba:ee:12:
40:d0:a0:80:a1:01:e4:12:5c:65:b2:35:3b:bf:14:
4e:8d:c7:ae:83:2f:d8:a2:90:4e:16:e8:4d:27:a0:
80:e1:02:69:a9:60:e2:63:89:7a:99:b3:92:f8:0b:
9f:00:32:ec:6b:d1:49:be:dc:b2:33:b3:43:78:aa:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:77:94:79:AC:0B:C8:45:F3:70:CB:4F:32:FB:A6:DB:D8:C9:0D
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fc:47:3c:82:d6:8f:06:9f:7c:93:af:1e:8e:b5:01:3d:78:
4a:f6:49:9e:b1:b4:42:28:57:2b:ae:90:4c:d7:0b:db:99:57:
5f:ff:69:1b:1e:ff:c4:83:a0:a3:48:63:1b:08:af:90:e8:ed:
71:aa:59:24:f6:c7:61:3e:8e:cc:e5:88:1d:f1:21:2c:0d:15:
8e:6a:36:9e:05:47:7a:44:67:4c:57:9a:73:ab:a2:cf:97:a5:
da:55:c8:ae:9c:bc:47:ff:3b:64:b0:47:93:53:45:19:18:b2:
80:30:b7:7e:17:8f:dd:bb:e9:ca:88:ee:a7:f7:5d:92:0c:01:
c1:0a:3f:7f:0b:c0:f1:8d:f1:56:1c:19:c0:3f:38:53:52:e2:
42:17:8a:3f:0e:45:33:bf:0a:6f:3a:05:c6:a3:93:37:e1:e5:
61:d7:7d:db:84:e4:5b:ea:ff:70:6d:c6:76:c0:71:41:c2:4f:
68:f6:03:1c:50:a2:f2:2f:f0:d7:18:07:2a:c3:ab:d8:20:78:
e6:00:0d:e5:b6:aa:b7:eb:b0:6f:84:5f:7b:b2:36:64:16:f0:
0e:34:c9:b9:ba:fb:6a:8c:41:d6:55:03:c1:7a:7b:0e:82:df:
92:9a:08:5d:2a:bd:eb:4d:29:cf:77:11:68:1a:e2:25:55:d0:
3d:c7:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:33 2026 by rpki-client