Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: TMPeZdrHDnqFlkqsEqHy+hr2Ba8mO3KGyRhufeLx3Js=
Subject key identifier: 0A:B2:07:E3:3D:1A:F8:E5:B3:28:9D:C0:92:EB:72:F3:4D:49:22:DF
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019EB958DD16BD51CFDF8B5CAEE4A414AC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 12FA
Signing time: Fri 12 Jun 2026 01:01:09 +0000
Manifest this update: Fri 12 Jun 2026 01:01:09 +0000
Manifest next update: Sat 13 Jun 2026 01:01:09 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: GIGXsHaCXND0c7fKouSMI+alH9JiscyDtE9a5K2WSFI=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:dd:16:bd:51:cf:df:8b:5c:ae:e4:a4:14:ac:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Jun 12 01:01:09 2026 GMT
Not After : Jun 13 01:01:09 2026 GMT
Subject: CN=0ab207e33d1af8e5b3289dc092eb72f34d4922df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:2b:c6:05:c9:31:cb:db:bb:36:55:ff:55:
8d:99:81:45:26:4e:c4:e1:96:07:6e:e7:98:13:a9:
ea:98:c0:7f:8e:0b:3d:c2:d5:7f:03:ff:f9:f7:7e:
7a:2f:5d:5c:bb:41:c6:6f:89:45:19:89:04:d3:87:
5f:03:00:4c:21:91:6a:b7:f6:91:ce:c2:76:41:a9:
69:25:c2:f8:f9:7e:fe:95:ed:6a:f1:08:f8:3d:53:
88:50:33:02:a5:0c:35:21:d7:91:50:bc:6f:f8:16:
96:40:e1:c7:9e:04:c1:54:c6:8a:61:48:a6:2f:50:
f1:fe:14:0d:0a:81:9b:ef:d9:f1:d2:16:03:d5:d4:
c4:69:59:cc:38:49:bd:ce:49:3c:ae:86:5d:75:07:
77:97:06:a6:9b:43:56:ad:87:1a:78:0c:a2:27:48:
3a:bd:38:b0:1d:e5:6e:92:c3:c7:77:26:8b:03:c9:
ef:26:17:19:42:bd:7c:cc:af:e8:04:b4:eb:5e:7f:
01:ed:90:97:b8:64:f4:ee:eb:cc:a3:19:17:20:b7:
f0:4a:31:34:c4:98:d9:2f:6e:b0:cf:07:38:ee:e9:
b3:ad:1c:0f:dc:5c:c6:9a:2d:5f:c3:63:1e:62:3c:
0f:7c:61:22:72:91:16:83:e6:86:e6:2c:c7:ce:6f:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:07:E3:3D:1A:F8:E5:B3:28:9D:C0:92:EB:72:F3:4D:49:22:DF
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c1:c8:7e:ae:2d:9b:56:a1:f9:ee:f6:24:7d:94:f7:2c:8d:
ae:fc:4e:f7:07:ef:eb:d8:35:55:24:04:c6:32:5d:f7:18:5a:
a0:27:23:2f:7b:76:9e:c3:01:68:ae:45:a3:44:3a:90:95:53:
62:dc:e8:34:d8:80:5b:3d:d8:ed:45:73:0d:1f:97:5c:bd:2c:
1a:18:a3:eb:08:2c:5d:7f:bc:e2:c6:63:13:2c:70:f9:c7:6c:
6f:e5:13:44:c7:a6:fa:64:ca:3a:42:14:fb:5b:d5:5b:d5:37:
3c:01:0a:b9:2c:f6:24:0b:0c:1a:49:f7:15:29:9e:28:26:23:
93:92:06:83:08:39:77:f2:cf:17:a0:ea:4b:46:98:d6:74:f1:
27:81:1f:8a:92:be:ba:91:28:16:b6:9a:01:21:ad:50:d0:16:
e5:71:ad:8d:34:d3:93:db:58:a2:6f:97:b8:c5:a0:92:01:90:
0d:ee:a5:6f:29:a5:94:8c:bb:96:59:9e:f6:0c:7d:3a:1e:75:
30:8d:2f:b3:75:0f:ea:01:f1:98:4f:44:14:1e:f1:02:b9:f4:
ca:47:34:e6:c5:cd:37:61:f7:65:42:3f:f5:47:79:0d:cd:87:
6f:ae:6a:ee:17:30:2d:7a:10:32:15:ec:c4:d2:d8:b3:7e:1c:
f8:06:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:27 2026 by rpki-client