Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: GR8Z/lXX7XLfRdPIR4mGgSIROLLVVvvGfjmrXHCQguc=
Subject key identifier: 2D:6F:29:52:98:83:FF:BB:2F:D3:EF:02:8B:E0:2C:F1:63:EC:87:8F
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019CEB942E49D0E002A9DCAEADAB3F23792A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 050F
Signing time: Sat 14 Mar 2026 09:01:22 +0000
Manifest this update: Sat 14 Mar 2026 09:01:22 +0000
Manifest next update: Sun 15 Mar 2026 09:01:22 +0000
Files and hashes: 1: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (hash: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: nKECuFfJAKamzUrWpM2UhHQxHtD0/BzrHDd0SsLqbWY=)
3: u7jMNIMMII00JBcKO8wDUJlUVU4.asa (hash: zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:94:2e:49:d0:e0:02:a9:dc:ae:ad:ab:3f:23:79:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Mar 14 09:01:22 2026 GMT
Not After : Mar 15 09:01:22 2026 GMT
Subject: CN=2d6f29529883ffbb2fd3ef028be02cf163ec878f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:a8:97:2e:2f:ba:40:54:8d:4e:92:9f:ed:
1f:8e:5a:1e:b3:54:86:b4:cc:f0:b7:67:6b:bf:1e:
4b:61:53:c1:ac:b9:8f:b8:8a:23:28:bb:35:3f:92:
ad:49:45:f8:8f:98:9d:2d:d9:70:b1:11:ed:64:2f:
ea:c4:b8:21:0f:92:5e:1e:f4:70:bd:41:d7:cf:84:
fb:e5:ff:fb:34:9e:0c:6a:13:80:50:a2:09:4d:c8:
17:35:af:0f:5f:c9:51:4f:12:1b:2b:7d:5e:86:4e:
b3:4b:6f:22:cd:f6:eb:6d:41:c6:f5:3a:7e:a2:c2:
8b:26:a7:9a:b9:f6:99:4c:31:b1:7b:75:fa:0c:17:
65:c4:ac:48:11:70:cb:4d:c8:5f:ac:07:ad:74:dc:
65:0c:bd:bb:15:62:2f:4f:d3:f4:e9:40:ff:61:ac:
ce:91:f5:81:b8:20:e5:41:2c:c6:ed:ff:d9:e8:99:
fd:5a:ef:8f:c2:28:2d:24:17:d3:9f:64:50:26:f2:
6e:98:eb:00:ff:e7:36:13:20:a6:85:c8:6a:ca:70:
44:9d:76:6a:41:1b:d9:8d:05:1c:bf:26:49:51:51:
8b:7f:2b:a6:99:14:39:43:4f:e0:a9:4c:fc:99:e3:
fc:b1:51:dd:75:0f:50:cb:15:3a:47:b3:63:7c:4d:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6F:29:52:98:83:FF:BB:2F:D3:EF:02:8B:E0:2C:F1:63:EC:87:8F
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:56:41:02:33:da:e4:fa:12:d2:41:e9:17:da:b8:42:8c:e4:
43:f1:c6:de:04:29:0b:d8:7f:e4:48:7b:40:0f:ce:38:65:fc:
fc:40:e6:42:f9:24:c7:9b:eb:33:71:82:6e:49:a5:c7:9b:90:
f3:b5:83:26:17:a5:4e:15:28:e5:cb:37:eb:a6:9e:e7:8e:65:
a8:5d:02:ba:dd:09:e7:9f:d4:5c:6f:da:97:2b:03:78:31:e0:
36:f5:d9:af:ea:45:2e:11:ea:dd:b4:c7:4f:f8:97:7c:97:d9:
8b:7e:4a:31:6b:2a:ea:94:ce:fc:77:fe:cc:32:be:2c:af:ed:
f2:7a:c3:6b:25:21:0f:5e:7b:a7:55:b3:3a:70:1c:00:b8:2d:
e3:c5:bc:f9:65:94:a0:79:f5:a2:eb:0b:f3:a5:2d:38:08:19:
3b:ad:12:f7:87:02:21:d4:c0:98:8a:54:f1:4c:08:d3:ef:57:
52:d3:af:05:e5:8d:3e:a5:45:0d:8c:77:0a:4b:4c:f4:4c:24:
96:27:02:4d:3b:9e:66:99:5e:07:a9:bb:4f:fc:27:7a:2f:9c:
cf:a4:99:6a:2a:ee:34:49:cf:78:96:d6:0e:08:70:0f:a8:8a:
83:e9:31:e1:1b:1b:b2:b1:6c:d1:78:b0:8f:6d:2b:69:13:83:
18:6b:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 16:48:26 2026 by rpki-client