Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: vtPaybniqDg8zjhXCTAcAcomRyqCZbjw9x8wglTUqK8=
Subject key identifier: A9:C5:3D:55:38:82:16:0D:BB:4D:05:D9:0D:AA:60:F6:F6:44:5F:F5
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 019D3A545C2E12E5E5967B70173199839FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 16:01:40 +0000
Manifest this update: Sun 29 Mar 2026 16:01:40 +0000
Manifest next update: Mon 30 Mar 2026 16:01:40 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: P2/oMM8fjXyPC41J8y0M2WZcTmJovLPPE+QlN8kZI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:5c:2e:12:e5:e5:96:7b:70:17:31:99:83:9f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Mar 29 16:01:40 2026 GMT
Not After : Mar 30 16:01:40 2026 GMT
Subject: CN=a9c53d553882160dbb4d05d90daa60f6f6445ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:8e:e5:cf:db:23:59:3f:0d:94:45:73:7e:
58:b1:e3:f4:6b:80:61:e1:62:a2:55:bd:75:97:6b:
35:c1:52:6d:0b:63:6e:f7:6b:4f:32:b5:ce:ef:98:
ee:06:ab:4b:9a:88:01:2c:9d:2f:d0:62:45:82:d4:
24:fb:3f:3b:02:e6:22:ca:ae:30:8e:a3:35:2f:06:
79:93:22:26:12:db:8f:62:eb:7c:22:5b:57:24:f6:
a7:01:48:f4:69:72:b0:ae:ab:e0:3e:9f:99:82:a2:
09:f5:0e:e4:1a:79:9f:a6:d1:c4:39:2b:7d:b8:b2:
60:3f:36:da:45:ca:ef:40:5d:4b:93:07:52:a0:a1:
83:cc:ef:5d:7e:18:dd:d9:06:34:91:99:93:1a:b2:
8b:58:54:55:b0:e3:f9:b1:c3:50:e8:ea:57:05:5d:
a3:9e:7e:a3:58:df:0a:53:b5:b4:14:49:44:b1:75:
4d:1d:02:1d:05:43:96:3b:a8:01:64:6d:85:0c:ff:
67:56:83:39:53:ca:fe:5e:d2:a7:6c:c5:8b:f1:df:
1a:6d:06:52:5b:ca:dd:b9:53:b8:86:7d:ac:17:6e:
f6:78:21:fe:00:05:40:35:f0:7e:49:49:39:a7:f6:
d0:2e:47:51:1f:22:c2:d3:0c:e7:0a:98:23:ec:77:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C5:3D:55:38:82:16:0D:BB:4D:05:D9:0D:AA:60:F6:F6:44:5F:F5
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:79:27:b7:3b:fa:4d:85:78:4e:b5:68:3c:e7:ea:32:32:46:
af:3d:98:b8:f8:ab:8d:83:df:c1:ed:5c:b1:88:32:fa:97:4e:
b1:f7:27:7e:00:73:99:79:19:f3:06:cc:ce:77:3e:76:5b:a1:
70:5b:3d:ee:c2:91:7d:ef:39:d5:2e:87:53:50:33:9c:97:22:
69:96:4c:37:45:2a:44:3b:c8:4c:69:34:f4:9e:82:ab:ed:91:
6e:9d:ad:d1:aa:6f:5e:92:4f:b5:be:f5:f3:ca:7e:11:57:36:
c5:1d:25:4c:c9:6f:25:fc:20:07:1c:be:7e:60:0b:ab:62:bd:
a0:58:4b:6f:05:01:4b:4a:72:1d:68:ea:6d:7e:0b:81:d4:58:
da:8a:d1:6e:64:94:f2:5e:4a:ed:9b:da:b1:64:d4:ca:5c:e6:
15:fa:f0:30:9a:db:de:29:80:20:90:c8:f0:51:c9:8a:43:8f:
1f:a6:1e:a6:e6:fb:00:e9:32:80:82:0f:3a:62:57:32:bf:f9:
c9:1a:8b:47:82:3c:5e:7f:9e:cd:f0:de:f9:2f:5d:33:96:f3:
29:eb:67:38:21:7e:c0:32:b4:19:1a:c2:26:d3:1d:c2:94:85:
ad:58:7c:2a:d7:1a:24:ca:e7:53:a3:50:a3:11:3d:33:b0:5e:
26:70:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:48 2026 by rpki-client