Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: Mqq5PD0/hrb8M8h853Chz+m6pBu2QJBRbxnyNn61gDw=
Subject key identifier: 10:49:81:57:DA:26:56:B5:42:94:C2:57:89:68:30:FC:6D:45:52:36
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019CE47F4CEFCF48C6BE35AEAB7E5343ADCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1863
Signing time: Fri 13 Mar 2026 00:01:13 +0000
Manifest this update: Fri 13 Mar 2026 00:01:13 +0000
Manifest next update: Sat 14 Mar 2026 00:01:13 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: wQSh9+hlvYcyca76C9wD/F+9zTWcAMrxfNITP1vqkrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:4c:ef:cf:48:c6:be:35:ae:ab:7e:53:43:ad:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Mar 13 00:01:13 2026 GMT
Not After : Mar 14 00:01:13 2026 GMT
Subject: CN=10498157da2656b54294c257896830fc6d455236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:71:78:e3:77:16:73:96:65:5f:9b:16:23:
70:72:18:c3:3b:00:58:e2:ef:f5:2f:2f:50:96:98:
e9:20:1b:a6:e4:3d:ff:a4:c2:ed:d1:ec:98:d0:e4:
c9:45:10:4a:a4:da:be:53:d2:a2:6c:3e:1b:90:b7:
19:7a:76:b6:32:27:bf:2a:f4:d1:19:f8:6d:0d:f8:
ce:32:d8:ff:98:14:2e:32:cc:20:01:ef:8d:f9:3f:
b5:ab:3d:6f:80:f3:1c:0c:cb:3f:53:dd:c3:76:8e:
82:97:48:af:4f:01:e8:19:01:79:95:d9:cf:a3:3e:
6a:48:11:aa:f8:f3:ec:58:04:ca:13:19:14:a8:b7:
6a:f0:f1:02:6d:d8:0e:f5:49:a6:bc:f6:da:d1:42:
6b:da:4c:cc:f3:e3:e8:78:19:9c:23:65:4a:9a:9d:
fd:82:a1:44:a9:9d:24:04:13:9e:96:44:fd:5e:61:
23:03:b5:8f:cd:79:9f:b3:8d:be:e7:f3:45:24:01:
9c:73:c3:32:93:38:9b:ba:0e:c9:be:05:6e:4b:50:
14:ef:58:fc:9d:ac:22:48:70:a8:bc:85:31:09:9e:
0d:1f:44:6e:57:28:dc:90:4a:a9:6e:21:e2:06:70:
0d:20:84:36:86:bb:7f:f3:1f:bc:18:e9:c5:5d:e8:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:49:81:57:DA:26:56:B5:42:94:C2:57:89:68:30:FC:6D:45:52:36
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:15:2f:1d:f1:f3:c2:68:16:18:83:0a:a9:c7:2d:b9:96:72:
d5:c9:12:b2:67:90:0c:9d:bf:45:35:d5:e3:f3:f2:98:e7:13:
22:13:64:ed:b6:7f:99:20:50:f4:57:f5:de:4d:e2:b9:b5:c5:
6c:fa:99:6b:25:8c:87:61:4f:25:30:a6:99:5f:73:0d:d9:08:
6f:f7:ae:99:5f:f5:3e:f3:40:12:04:59:4a:c5:37:17:52:2c:
1e:ba:0a:bf:b9:fa:15:c7:09:12:66:3a:a4:c7:35:9f:92:0c:
e7:fc:0a:27:69:2b:60:1a:1c:52:df:df:9a:aa:94:48:56:a9:
e6:ff:59:f9:5c:bc:c2:cd:39:ae:ff:d4:60:83:91:6f:2a:5c:
76:f3:cd:33:b8:63:56:e1:ac:75:92:52:5e:d9:2d:6e:e4:f7:
c4:2a:42:2f:50:db:30:82:0c:b1:23:d7:d3:c5:84:54:d2:90:
82:38:f2:9d:57:ab:63:70:03:8b:ac:ca:00:14:e0:06:00:a7:
44:f9:d3:48:4e:02:c6:0f:cd:2d:b0:ac:8c:f8:0c:bf:7b:3c:
d4:7f:66:c5:89:6f:8b:bb:6f:96:4e:b5:c6:aa:44:72:2b:ba:
22:eb:25:13:88:43:89:63:15:09:6e:a4:60:f2:c9:60:26:bb:
ea:36:c3:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkf0zvz0jGvjWuq35TQ63LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx
ODk0ODkwHhcNMjYwMzEzMDAwMTEzWhcNMjYwMzE0MDAwMTEzWjAzMTEwLwYDVQQD
EygxMDQ5ODE1N2RhMjY1NmI1NDI5NGMyNTc4OTY4MzBmYzZkNDU1MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZVxeON3FnOWZV+bFiNwchjDOwBY
4u/1Ly9QlpjpIBum5D3/pMLt0eyY0OTJRRBKpNq+U9KibD4bkLcZena2Mie/KvTR
GfhtDfjOMtj/mBQuMswgAe+N+T+1qz1vgPMcDMs/U93Ddo6Cl0ivTwHoGQF5ldnP
oz5qSBGq+PPsWATKExkUqLdq8PECbdgO9UmmvPba0UJr2kzM8+PoeBmcI2VKmp39
gqFEqZ0kBBOelkT9XmEjA7WPzXmfs42+5/NFJAGcc8Mykzibug7JvgVuS1AU71j8
nawiSHCovIUxCZ4NH0RuVyjckEqpbiHiBnANIIQ2hrt/8x+8GOnFXehWYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBJgVfaJla1QpTCV4loMPxtRVI2MB8GA1UdIwQY
MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt
NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl
LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxUvHfHz
wmgWGIMKqcctuZZy1ckSsmeQDJ2/RTXV4/PymOcTIhNk7bZ/mSBQ9Ff13k3iubXF
bPqZayWMh2FPJTCmmV9zDdkIb/eumV/1PvNAEgRZSsU3F1IsHroKv7n6FccJEmY6
pMc1n5IM5/wKJ2krYBocUt/fmqqUSFap5v9Z+Vy8ws05rv/UYIORbypcdvPNM7hj
VuGsdZJSXtktbuT3xCpCL1DbMIIMsSPX08WEVNKQgjjynVerY3ADi6zKABTgBgCn
RPnTSE4Cxg/NLbCsjPgMv3s81H9mxYlvi7tvlk61xqpEciu6IuslE4hDiWMVCW6k
YPLJYCa76jbDAw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:15 2026 by rpki-client