Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: u6O6STEMqKrCm6EfALnKvrDFeMwr3aCE7rlotUqT1tE=
Subject key identifier: 7C:1C:62:A9:20:E1:3F:A2:0D:B3:28:47:C4:17:7E:59:9D:F4:42:AA
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 01A17E183B1578BA4AE99C8FFB627AA913ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 1469
Signing time: Tue 27 Oct 2026 16:01:19 +0000
Manifest this update: Tue 27 Oct 2026 16:01:19 +0000
Manifest next update: Wed 28 Oct 2026 16:01:19 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: N9dxVkVtgS+TVDa47dE8HUzjr3GC5MKi3jtdlrD7tdk=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:3b:15:78:ba:4a:e9:9c:8f:fb:62:7a:a9:13:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Oct 27 16:01:19 2026 GMT
Not After : Oct 28 16:01:19 2026 GMT
Subject: CN=7c1c62a920e13fa20db32847c4177e599df442aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:4d:72:6c:37:7b:42:75:c2:af:40:0b:51:
e0:3a:14:fa:92:7a:4e:c9:cd:81:ca:4c:27:19:67:
92:09:9a:a7:23:58:7f:41:a4:ac:30:54:bf:15:35:
71:b9:16:3d:30:ea:e9:01:cf:e1:09:2f:50:90:69:
b7:ab:c4:53:4f:67:06:8d:6a:52:2b:22:ec:7a:d2:
3b:16:bc:d5:8a:5f:15:32:41:ab:af:dc:27:84:0a:
6d:cc:dc:77:7c:3c:7a:e0:c4:3a:f4:80:1b:d0:07:
99:25:f7:94:65:21:ae:33:dd:59:b3:e4:5c:37:8f:
53:af:e0:d2:0c:17:c6:30:a9:b8:cc:a7:78:e5:ed:
56:ac:17:38:86:f2:3f:49:eb:e4:6e:6d:02:18:fc:
b8:75:81:c2:bc:89:6e:ca:e1:9c:97:c4:27:53:15:
3f:a1:7f:46:6d:61:28:fc:2a:6d:8a:42:cf:91:c4:
09:75:ad:d3:89:a4:6f:db:28:a4:b1:dc:1e:67:e7:
81:bc:c3:db:10:fc:88:83:c1:e2:0d:13:3b:b8:5e:
fb:eb:da:09:f5:db:39:9b:59:0d:34:0b:5f:ca:9f:
8d:c5:59:71:9e:4b:27:32:dd:ac:b0:ac:7f:0d:16:
4b:72:76:59:71:4c:fb:6c:48:43:1f:f0:40:3e:96:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:62:A9:20:E1:3F:A2:0D:B3:28:47:C4:17:7E:59:9D:F4:42:AA
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b3:09:e7:3b:ad:20:4c:13:4c:77:47:70:1c:ba:b7:ac:91:
3c:75:23:65:39:ba:66:06:79:b6:87:2e:21:78:40:69:2c:0f:
68:9b:26:48:c7:f4:4d:96:3e:7f:60:02:d7:57:65:97:fd:98:
10:98:fb:14:d3:a8:9f:ab:d0:e7:8b:cf:b1:23:5b:91:bb:4b:
3c:a1:2d:57:a9:49:a7:1f:ce:10:e8:12:50:17:55:ab:f3:cb:
7c:fe:78:d7:d7:77:49:7f:d3:35:86:59:28:59:27:60:f8:5a:
8d:28:43:01:71:cb:be:91:1f:d2:25:30:a4:ee:be:ab:f3:5b:
c8:d3:f2:2e:d8:e9:02:fd:e9:5e:cf:1a:23:97:00:c9:bf:9d:
82:c6:33:d7:36:35:6d:02:2f:6b:dd:f5:1c:dc:ef:86:8c:2c:
84:19:73:b5:a6:24:e9:ba:4a:21:db:39:8a:cd:40:d0:b1:19:
65:f6:ef:bf:9a:47:75:65:cb:c4:64:85:f2:07:c8:c2:cb:f6:
62:da:27:b4:0a:d3:31:e3:6a:0b:37:90:f0:03:34:07:01:28:
ad:23:a5:90:0a:ec:84:b4:e4:e2:29:54:27:7a:07:05:12:24:
b3:69:b9:67:64:ef:f4:55:c9:23:9b:56:05:f7:7d:d2:5e:2e:
1c:e5:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:48:23 2026 by rpki-client