Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: ZAvSNbT58tJmXlOgFWXlGDsv4HRqkpVF9fDy+mGJzyI=
Subject key identifier: 6A:AD:CC:30:83:F8:49:A2:58:29:2E:53:94:17:37:B0:E0:13:F6:AD
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 01A08AC360F55C0571DD2D159B2285EF4939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 13EB
Signing time: Thu 10 Sep 2026 10:00:55 +0000
Manifest this update: Thu 10 Sep 2026 10:00:55 +0000
Manifest next update: Fri 11 Sep 2026 10:00:55 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: kLG3yeAeUL+jwUcAQ7IRgmerM04XTZpLMIMJD7qAL8g=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:60:f5:5c:05:71:dd:2d:15:9b:22:85:ef:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Sep 10 10:00:55 2026 GMT
Not After : Sep 11 10:00:55 2026 GMT
Subject: CN=6aadcc3083f849a258292e53941737b0e013f6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:ad:e0:2f:ed:94:37:01:34:40:c3:5c:fc:
0a:1f:6b:06:52:cc:90:b6:fa:00:cb:e5:f3:0d:88:
ef:27:88:8a:7a:44:db:04:ff:80:ca:7f:97:45:93:
d5:ba:6d:ca:dd:25:1c:68:a1:65:74:c6:97:81:2c:
12:5c:9a:bb:84:8a:7f:82:f1:f4:cd:cc:0d:61:8a:
73:a5:97:08:bb:59:74:3c:2d:25:e7:1c:14:81:79:
2a:e9:c3:86:d1:72:92:87:4d:a0:14:1c:16:a1:00:
6b:38:2f:70:2d:01:e2:27:09:ed:78:83:2a:55:78:
88:7b:e6:ce:bb:44:c1:3e:8f:9a:e6:53:5f:c6:bf:
5d:1b:e3:05:26:c6:f0:17:ce:73:8d:3d:47:67:69:
3c:b1:0f:f1:3d:33:2f:5c:39:3b:a2:67:d3:06:7d:
d3:5a:4c:ce:0b:ee:a2:56:44:b5:2c:b0:8e:6f:d3:
03:5b:76:97:49:3f:52:5b:9a:a5:9c:db:e5:9c:26:
8a:72:17:82:2e:72:32:17:f2:8e:38:c5:70:36:06:
3b:48:89:cc:4a:a3:49:5c:b5:8b:0e:7f:b4:4e:21:
95:21:67:01:a0:44:dd:8b:85:d3:58:6e:61:88:7e:
ae:12:60:44:9d:86:b3:96:36:33:8f:5e:b7:a5:d5:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AD:CC:30:83:F8:49:A2:58:29:2E:53:94:17:37:B0:E0:13:F6:AD
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:17:49:df:33:04:27:82:ab:b4:61:87:a8:47:85:c8:dc:
8d:9f:6f:f3:df:b2:bc:2b:f6:b7:10:1a:49:87:b9:9a:5b:11:
23:33:aa:7f:5f:d8:21:4f:9d:a6:a7:77:e7:b9:66:8c:ec:79:
ec:7c:dc:b6:5b:98:4b:fd:20:a9:2f:df:1a:a8:78:f8:43:1c:
f6:bf:01:24:8e:9d:de:e4:9b:3d:dc:09:d8:34:e3:2e:3b:87:
4c:ac:93:4a:71:92:1f:a8:56:97:cf:d8:03:da:89:8d:0f:96:
8d:32:49:53:be:71:07:cb:22:b8:ed:85:f8:03:aa:eb:cb:21:
71:78:b4:dc:4a:2f:f2:80:82:6d:e7:09:93:38:01:a2:df:21:
39:25:a6:c0:ad:b6:5e:05:b3:02:ac:fa:09:89:b1:50:01:eb:
8a:80:04:15:a3:d5:1f:aa:4c:75:eb:3c:a2:55:54:f8:c0:64:
8e:d1:a9:86:f8:ca:ba:ef:ff:68:61:38:48:e3:20:73:36:26:
6a:5e:a0:7a:8d:63:9c:73:d6:97:76:5e:09:e2:80:dc:5e:2b:
a2:9a:64:83:e8:2b:7f:63:c5:d5:04:66:a0:89:c1:7d:ed:cc:
30:89:ed:4c:78:39:f1:81:28:2c:6a:99:b1:45:83:3c:3c:f4:
ba:65:0d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw2D1XAVx3S0VmyKF70k5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjYwOTEwMTAwMDU1WhcNMjYwOTExMTAwMDU1WjAzMTEwLwYDVQQD
Eyg2YWFkY2MzMDgzZjg0OWEyNTgyOTJlNTM5NDE3MzdiMGUwMTNmNmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnOt4C/tlDcBNEDDXPwKH2sGUsyQ
tvoAy+XzDYjvJ4iKekTbBP+Ayn+XRZPVum3K3SUcaKFldMaXgSwSXJq7hIp/gvH0
zcwNYYpzpZcIu1l0PC0l5xwUgXkq6cOG0XKSh02gFBwWoQBrOC9wLQHiJwnteIMq
VXiIe+bOu0TBPo+a5lNfxr9dG+MFJsbwF85zjT1HZ2k8sQ/xPTMvXDk7omfTBn3T
WkzOC+6iVkS1LLCOb9MDW3aXST9SW5qlnNvlnCaKcheCLnIyF/KOOMVwNgY7SInM
SqNJXLWLDn+0TiGVIWcBoETdi4XTWG5hiH6uEmBEnYazljYzj163pdVbNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqtzDCD+EmiWCkuU5QXN7DgE/atMB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZEXSd8z
BCeCq7Rhh6hHhcjcjZ9v89+yvCv2txAaSYe5mlsRIzOqf1/YIU+dpqd357lmjOx5
7HzctluYS/0gqS/fGqh4+EMc9r8BJI6d3uSbPdwJ2DTjLjuHTKyTSnGSH6hWl8/Y
A9qJjQ+WjTJJU75xB8siuO2F+AOq68shcXi03Eov8oCCbecJkzgBot8hOSWmwK22
XgWzAqz6CYmxUAHrioAEFaPVH6pMdes8olVU+MBkjtGphvjKuu//aGE4SOMgczYm
al6geo1jnHPWl3ZeCeKA3F4roppkg+grf2PF1QRmoInBfe3MMIntTHg58YEoLGqZ
sUWDPDz0umUNXA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:57 2026 by rpki-client