Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: BJQfeCXqu6PdZ4P2lPzadhUWH3Sxyg5KpoGFcKoyBNY=
Subject key identifier: 38:BE:74:8E:94:AC:AD:CB:83:F3:5D:33:72:8B:24:6E:33:6D:5A:E9
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019D39098BB9CB68936CE87335794082A3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 1233
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: bJxO1UM9J0bgoyEXYClx6CEkQptBBCdM2R64cAuiOrM=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8b:b9:cb:68:93:6c:e8:73:35:79:40:82:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=38be748e94acadcb83f35d33728b246e336d5ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:03:0d:de:ea:4f:f3:8e:cb:cd:b3:79:4f:
6c:a6:d5:d2:5a:c6:f6:25:dd:eb:60:d5:42:f2:b4:
5a:13:c4:c2:57:3b:e9:d1:8e:f3:41:7b:c4:c0:34:
d3:57:86:53:73:78:97:f2:39:48:38:50:4c:20:75:
b7:aa:26:1a:d0:dc:d4:3f:dc:2d:76:51:b7:f8:6f:
45:2a:06:f4:3b:88:5e:96:11:c6:19:99:15:23:dc:
98:b0:49:66:c6:e7:dc:96:60:7f:cd:ac:6a:a4:f0:
11:3b:23:bb:f6:3b:fe:f5:62:2c:7c:61:bc:dd:86:
25:dd:21:bf:8d:c9:1b:50:4e:40:57:18:c7:52:aa:
f8:0b:56:9a:39:47:85:6c:1c:4b:fa:00:3e:f5:f4:
cf:98:d1:51:63:c3:1a:88:25:29:41:9d:11:21:ef:
60:0a:86:ff:b6:5e:1e:20:a3:21:e4:6e:92:08:17:
2e:d6:ac:51:d7:47:dc:d0:ec:1e:88:6c:09:fd:a6:
4f:b4:4f:78:f2:67:49:7b:5c:04:15:29:1b:67:fb:
69:dc:1b:a9:b2:5b:3a:81:ad:a1:8c:c3:74:51:bf:
54:e3:ba:da:12:dd:c1:e3:ca:3b:ba:67:aa:24:47:
d0:a4:31:7b:02:b6:80:85:2c:5a:e7:44:16:e8:8c:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BE:74:8E:94:AC:AD:CB:83:F3:5D:33:72:8B:24:6E:33:6D:5A:E9
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b9:f5:17:ed:fd:a3:8a:f6:ef:43:b6:6d:d7:2b:fe:68:0e:
b8:06:e9:bf:cc:44:ea:0a:ae:17:d2:13:e8:1d:bc:07:95:dc:
47:7d:52:bf:24:bd:2c:ab:62:20:72:1d:ec:84:ca:0b:df:d1:
c1:5a:23:74:b4:37:3b:17:29:b1:d6:c5:ce:79:03:52:7b:d0:
a8:17:28:7f:bf:40:35:5f:0d:39:30:88:6c:31:4e:c5:13:53:
43:f4:af:64:47:2e:79:8f:a5:89:b8:a8:71:a1:ed:08:db:df:
11:03:26:0e:c2:8a:bc:64:90:68:61:06:4a:83:ff:d5:ff:3a:
3f:f9:c9:cd:34:f0:a8:74:a5:ae:35:4f:1b:1a:d5:30:bb:a9:
07:2e:b2:83:af:85:a4:16:cd:1e:23:9d:9e:4f:1c:75:9f:0e:
46:d9:70:a7:45:a9:40:b5:97:38:74:39:a4:61:3d:ae:6d:d1:
dc:69:77:19:79:6e:6d:8c:eb:bd:43:1a:21:2d:66:91:3a:4d:
2c:ac:f1:3a:43:1e:f9:fb:25:81:51:a5:fb:9b:3e:c1:fd:ac:
8c:87:b9:17:72:f1:89:31:5f:17:ce:dd:3f:d8:7f:69:d7:81:
bd:96:82:c5:5e:8b:bd:79:e8:87:47:29:9e:26:92:1e:82:29:
10:4b:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:39 2026 by rpki-client