Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: 3lfIJiGQnPHDodQ9j+AC4jGy9z83g+ukwn/8i9YMGAc=
Subject key identifier: 3B:34:7D:B2:EF:79:A7:82:D3:64:F8:BB:B7:E3:97:59:3C:0A:59:C5
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 019D3866844E65DB94CB9C97FF55CE85B7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: xBTJzmVsP31VeA9gW6Cf66fMt7TbqrzeK3bQ3jqBHiY=)
2: Sjx8Db6pkn2_X7XkTkVkrHu39II.roa (hash: L70KZEVpZd+9Yn8XtQUD7ShK+v4vhSOp8udCniXBES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:84:4e:65:db:94:cb:9c:97:ff:55:ce:85:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=3b347db2ef79a782d364f8bbb7e397593c0a59c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:d2:94:6b:87:2e:85:bc:a2:23:82:d8:12:
5b:8c:75:b1:4d:a5:07:80:f6:c8:74:3e:7c:2a:32:
4c:c8:29:76:d2:27:c5:c1:c2:b6:4d:51:d3:e1:06:
e9:96:29:60:3b:ee:c3:d7:7d:9b:53:6a:ec:65:7e:
45:99:26:a8:d6:67:d4:d5:9e:48:ef:69:36:37:c6:
90:3f:3a:81:f5:ed:f1:c2:44:04:3d:cf:1e:74:23:
ae:df:fe:42:3c:61:33:c1:a6:68:fa:5b:06:69:6a:
20:16:f0:1b:9e:a7:72:7f:34:b1:94:83:f2:e7:0f:
18:52:f2:0b:21:d9:16:01:f4:98:d6:4a:7b:73:7b:
ad:83:4c:a1:88:6d:58:80:5c:20:71:c3:7d:0b:5e:
80:2e:98:e0:2d:c9:0e:af:c0:dd:6c:58:32:9b:84:
98:48:4d:ca:7a:09:b5:67:20:fe:bd:48:11:5b:45:
16:f0:46:9a:0d:28:b3:1a:5e:8a:e5:6f:bd:c8:11:
b1:ae:e7:8a:bd:8f:0b:77:a0:4f:51:c2:0e:01:22:
b9:15:de:5d:73:11:8f:76:15:52:a5:f5:33:33:0c:
ee:29:0f:ff:ff:8f:96:23:8d:9b:86:c7:d9:64:3e:
12:ad:d6:b3:d8:c6:3b:3f:ca:e6:f7:5b:2c:4a:12:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:7D:B2:EF:79:A7:82:D3:64:F8:BB:B7:E3:97:59:3C:0A:59:C5
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3b:b9:21:93:8c:2b:dd:4b:8c:7a:fd:6d:73:6f:af:15:6c:
9f:9a:f0:30:d8:88:87:93:72:41:50:43:ca:5a:82:98:c2:79:
14:b8:8b:12:ef:2d:11:39:79:79:51:10:2f:95:8d:44:25:d6:
7f:73:03:6d:f7:4a:cb:38:8b:40:d4:e5:d7:59:73:e7:5c:42:
8c:97:f0:0d:76:ac:ea:24:34:aa:56:a1:ea:bd:36:1a:20:b5:
71:dc:d2:b3:b3:1b:d6:75:72:ef:60:5e:52:b6:78:7c:21:73:
80:eb:48:74:97:89:69:eb:cf:4d:bf:17:6c:68:af:57:f4:ad:
68:26:49:3b:07:15:6a:be:24:20:a3:19:9d:06:5f:89:ea:69:
99:4f:e0:81:a8:3a:e7:e1:0e:88:6c:cf:21:1c:67:5d:e1:20:
a2:12:ae:35:b6:cf:29:f5:48:fd:4e:b5:71:ae:ff:df:4c:8c:
67:a7:ad:7a:0c:7c:db:67:d5:ff:97:0c:b3:59:0d:fb:87:d6:
a8:8b:5c:47:14:23:35:7f:2f:23:bb:d9:bf:9d:16:45:09:29:
58:84:5f:d3:14:fb:78:20:8c:54:06:5a:35:b0:1c:f2:07:bf:
64:55:0c:42:2d:24:f0:24:fa:32:a4:9a:3e:80:bb:79:d5:af:
5c:57:95:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:07 2026 by rpki-client