Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: VE1Q4gdb89hG43Jc5Nvqk3qpSIG3ni/pg2DWP5TBjB8=
Subject key identifier: 00:5D:0C:27:5F:B0:CF:4A:C3:A0:10:3E:0F:5B:7E:95:57:0B:86:35
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019E284BAE2DED2C5C6BE823AE5D67CFADD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 05B3
Signing time: Thu 14 May 2026 21:01:48 +0000
Manifest this update: Thu 14 May 2026 21:01:48 +0000
Manifest next update: Fri 15 May 2026 21:01:48 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: p1xeK9GPhsWxIb1M/olmi9rQPwm9ZIDE6ru4OrQUshc=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:ae:2d:ed:2c:5c:6b:e8:23:ae:5d:67:cf:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: May 14 21:01:48 2026 GMT
Not After : May 15 21:01:48 2026 GMT
Subject: CN=005d0c275fb0cf4ac3a0103e0f5b7e95570b8635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:5e:37:c7:35:14:ec:22:a0:f9:3d:8f:0d:
54:4d:e9:4b:53:e7:69:67:41:ee:1a:18:57:61:93:
74:1a:55:8c:5e:1d:39:16:80:9e:7e:fd:ec:97:3a:
cc:6f:6e:de:dd:8d:4e:11:ac:49:81:b4:ec:4a:1b:
5f:cd:b9:90:20:2c:9d:6f:2c:b9:bb:16:d1:10:e3:
24:a4:9e:95:f2:5e:95:51:4c:d3:be:3e:67:20:bf:
1e:4a:63:27:ae:77:0c:22:dc:c9:69:25:47:eb:d8:
41:68:dc:45:5e:ad:3d:0b:2d:26:47:97:11:33:99:
8a:a5:4b:8e:49:86:6d:42:0c:bd:89:0c:a2:7e:02:
4d:86:83:61:f6:4b:8f:25:8b:3b:14:da:33:b5:24:
3f:94:13:fa:65:2f:a6:b1:91:d4:18:1f:cb:8a:41:
04:c0:c6:52:71:79:d1:eb:eb:77:4e:6c:29:22:ae:
c3:19:40:ea:2a:ac:0d:ca:03:ce:a8:97:4a:86:43:
af:b6:e5:e6:ac:e2:74:ae:16:47:71:41:a1:83:fc:
2f:44:1d:a0:41:01:d2:f2:1a:1e:cd:a2:55:04:ac:
87:ec:06:d4:eb:14:16:31:62:c9:8e:bf:99:22:58:
2c:13:f2:9b:4b:42:1d:e7:fc:a6:ec:72:53:f8:2b:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5D:0C:27:5F:B0:CF:4A:C3:A0:10:3E:0F:5B:7E:95:57:0B:86:35
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a6:20:4a:f0:0f:3b:5d:17:ed:30:71:09:b9:74:70:95:be:
20:12:44:ab:9b:1d:ce:08:e0:54:8f:d5:34:c4:c9:3d:9e:2a:
45:f2:eb:40:f7:c5:33:81:ba:eb:4e:b1:01:21:c4:78:c0:ed:
6e:81:bd:93:60:bb:74:9f:c2:0a:c8:2e:ad:82:dd:5a:af:c7:
76:49:07:ab:4f:1a:37:cc:3a:95:a7:11:1c:0f:e2:69:0c:78:
30:3e:bb:da:28:c9:07:be:29:5d:8a:a5:b7:64:81:af:cb:6d:
70:37:62:62:52:4c:d5:77:fb:12:76:bb:8b:ee:65:1d:40:b9:
c0:6e:aa:0c:00:77:38:89:dc:f3:40:be:09:15:d2:2f:e8:82:
67:7f:04:f1:29:28:12:f8:2d:71:13:2b:24:e9:28:ba:3d:77:
2d:19:0f:2c:1d:a6:f1:ac:2f:fc:12:d2:80:23:e0:b4:4d:6d:
ec:02:51:49:6c:49:02:c5:18:9c:06:3a:a8:f6:d8:f0:08:13:
9f:80:2f:7f:ec:41:16:6d:b1:b8:f1:e7:c1:62:5c:e5:09:95:
90:e9:22:5a:2a:a1:d8:26:05:7f:b5:ad:99:f1:9c:03:c6:73:
6b:4a:65:6a:5c:1d:f6:f6:5e:bc:27:9c:b8:a1:92:00:5f:2b:
8c:8a:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:15 2026 by rpki-client