Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: pOVcXxoAFUjosd6VdrKtCHW2SlG3mWR/ClWQInmImRU=
Subject key identifier: 3E:FC:E5:56:E8:61:CC:62:2C:B9:BE:68:7E:4D:40:03:82:1F:CF:15
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019D34F6DE34709460DB49263EA07E060A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 15:01:26 +0000
Manifest this update: Sat 28 Mar 2026 15:01:26 +0000
Manifest next update: Sun 29 Mar 2026 15:01:26 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: fhmx11mtyWNwzR4UKGU0zDdNqGazieD/xI9tXofc7cM=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:de:34:70:94:60:db:49:26:3e:a0:7e:06:0a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Mar 28 15:01:26 2026 GMT
Not After : Mar 29 15:01:26 2026 GMT
Subject: CN=3efce556e861cc622cb9be687e4d4003821fcf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:3d:97:38:01:20:07:4f:26:92:d7:1c:1c:
e2:d4:54:ff:11:35:b8:41:a8:d9:b2:e9:07:d7:5c:
ed:4c:82:e7:b4:50:00:a1:49:8d:8d:ec:9a:72:64:
cb:9c:65:07:d0:55:d8:80:e3:96:5b:f0:13:43:cf:
6c:02:dd:69:31:e7:7c:ea:06:db:e6:c5:e2:3b:03:
89:41:d0:b1:0b:c9:79:8b:9b:b3:ae:66:29:2b:87:
d3:81:64:44:91:6b:54:38:3b:15:68:70:96:7b:99:
f3:9c:e5:da:8e:69:0b:b7:16:50:cb:c7:d0:c8:48:
d2:1d:0b:40:22:fb:b9:70:9e:a8:7f:a7:57:aa:51:
d0:3e:e9:5e:3f:47:23:d7:95:49:8d:bd:1a:31:04:
b0:38:33:64:9b:4d:84:30:3c:68:0b:9e:c2:f9:bc:
c0:c8:c7:66:a3:12:b5:11:2b:c0:40:d4:b9:99:88:
81:a8:49:7a:fe:21:8c:26:ab:23:3f:cf:f3:8e:f3:
64:a6:f8:d1:6c:6b:a4:43:ca:5b:5c:19:70:06:3a:
b3:c4:48:49:8b:ac:1a:45:48:d7:55:79:a0:90:0d:
40:6a:a9:62:c9:e8:f2:4f:20:04:b2:31:b1:98:44:
3f:23:7e:97:a3:43:ff:c8:5d:07:e2:4d:d0:b8:fc:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FC:E5:56:E8:61:CC:62:2C:B9:BE:68:7E:4D:40:03:82:1F:CF:15
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8c:4c:71:f8:f7:08:84:8c:88:c9:c4:8f:ea:73:58:87:20:
83:63:a8:3d:0d:e8:91:6d:c4:d5:f5:2b:18:ac:47:3e:c2:9d:
08:af:60:0a:a0:c1:0c:76:92:26:46:5c:2f:c4:f2:cb:d6:d7:
04:cc:28:2b:dc:24:9a:bb:e6:a4:ab:aa:14:05:cd:40:49:c6:
36:00:86:dd:f6:a4:58:4b:df:9e:53:91:e4:74:08:0a:47:a7:
87:80:b0:cc:10:21:f3:25:1e:79:f7:a2:0f:d3:5e:b0:db:60:
f0:2f:06:48:27:c6:27:2d:46:d6:90:6b:43:a4:74:b9:6f:75:
3d:fb:dd:22:b0:75:e9:0d:09:5b:de:fd:f9:86:4d:d3:b8:38:
99:3a:81:24:98:5a:ed:a6:56:79:9a:58:13:0a:bc:7f:3f:c1:
f4:48:a9:e8:d5:7a:bf:8c:c8:2e:53:f7:d3:26:03:55:34:02:
46:39:e7:e4:a3:ce:19:d2:92:49:69:62:d3:ae:b2:b5:d2:a3:
5e:78:ac:58:b9:0f:f9:3f:a9:02:9d:b3:92:95:e5:b9:f0:1b:
5f:95:f6:61:39:16:50:92:e5:0d:4b:7a:53:83:d3:03:95:8f:
11:45:cd:5d:ea:98:b9:80:4c:12:5b:d1:82:6c:2c:cb:5e:7d:
69:dd:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:44:22 2026 by rpki-client