Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: 7Sn2oy2W/8c34YxA/WBWP4dy32X/GBeNT0MFSKqCy5A=
Subject key identifier: CC:71:F6:EE:F4:73:B8:4A:57:81:74:36:89:32:6A:53:75:B1:CD:A2
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019FA3052152F2D67AF972C51E2450DB9A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 1373
Signing time: Mon 27 Jul 2026 10:00:50 +0000
Manifest this update: Mon 27 Jul 2026 10:00:50 +0000
Manifest next update: Tue 28 Jul 2026 10:00:50 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: YjZNfuH0MRi7ByyftRlmy12ol8RLfsbD0gDzkVh6zLs=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:21:52:f2:d6:7a:f9:72:c5:1e:24:50:db:9a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Jul 27 10:00:50 2026 GMT
Not After : Jul 28 10:00:50 2026 GMT
Subject: CN=cc71f6eef473b84a5781743689326a5375b1cda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:2e:49:c7:71:b9:58:fb:bb:a5:02:75:8b:
f3:d5:e6:b4:b3:95:a9:7c:5c:96:73:4d:cf:7e:6d:
9d:91:97:06:2d:54:b2:bb:68:27:f0:45:9f:4c:f7:
92:ee:ca:ed:f6:46:ee:6c:38:87:24:00:b8:1a:f9:
df:e3:9e:3d:59:f2:40:0b:83:e1:01:c9:9a:df:32:
eb:d6:a2:c8:f9:40:01:65:ad:e6:49:8c:52:5c:e5:
fb:e8:e7:f3:68:fc:72:9c:41:a5:da:7f:e9:51:90:
39:84:ef:dd:d9:30:a0:47:3f:bd:16:b9:9e:a4:0a:
f6:5f:a6:10:7f:dc:02:60:1d:73:b3:93:6a:ce:83:
91:c9:bc:45:18:b4:27:d1:ce:8a:eb:de:c1:f3:78:
e0:b8:5d:6f:d0:9b:a4:9e:da:4c:61:6e:1c:04:33:
28:f9:7c:59:74:91:5d:39:13:de:b0:13:01:2c:33:
b0:9f:ca:23:85:ab:4a:87:8c:dd:c5:c0:c7:24:1a:
fa:df:91:d7:e6:17:de:10:0e:27:30:c9:56:05:ea:
23:81:4d:aa:7a:f3:44:98:ab:53:53:a4:87:7b:b7:
ba:e1:be:42:ac:1a:6d:83:70:e9:0c:d6:d9:15:88:
4d:e2:f4:2b:7b:db:59:c5:7a:f6:f2:66:dc:ee:4e:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:F6:EE:F4:73:B8:4A:57:81:74:36:89:32:6A:53:75:B1:CD:A2
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:55:4e:19:5b:f2:84:91:42:f2:f7:32:4f:e2:8c:0f:85:12:
fc:b4:8a:76:8b:93:86:9a:0e:65:81:7f:88:6f:31:f1:4a:ce:
76:32:98:68:15:29:da:92:0f:76:2a:2b:b6:07:47:7c:6a:c0:
d3:fa:e6:84:dc:04:05:68:7d:95:7c:7b:f6:2d:e2:8c:39:fe:
18:87:97:c8:bc:03:25:ea:09:24:77:90:8d:d2:d8:39:34:25:
81:f3:59:0a:0e:6e:ed:c3:b6:83:e6:86:57:72:71:f1:65:5c:
f5:a2:a4:8b:81:94:c9:5c:48:2d:e9:32:9f:31:3d:27:3d:d4:
c6:3d:c7:02:f5:61:a7:dc:7c:3f:1b:99:e1:26:02:d8:e2:c1:
81:fb:75:af:80:55:63:c0:ca:58:5a:47:81:f8:29:2d:1e:ef:
cb:45:c8:98:08:75:76:19:8e:ff:3a:e1:1d:32:32:7e:8c:77:
c6:31:4f:1e:5a:53:8b:bf:19:5e:b1:e8:d9:57:d5:cb:90:75:
3b:64:1c:26:1f:1f:00:d9:50:de:bd:4f:a8:ab:c6:bd:b7:4d:
01:69:73:19:60:4e:a6:6a:a0:a6:e5:67:59:17:f8:68:b5:13:
91:0c:21:1d:9d:15:b0:9d:1c:8b:60:7b:d0:6b:4c:34:42:8f:
cc:a7:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:49:41 2026 by rpki-client