Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: rtaEEuCSPnKvMgMAulCRPcU/aLaS0qb2LxV/sGz+ZLk=
Subject key identifier: 33:23:A1:09:94:31:34:F8:F1:11:15:47:20:03:45:B7:A8:4D:B5:FE
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 01A102ED9A7A14FA9C56128E0CCF8A5F17D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 18:01:28 +0000
Manifest this update: Sat 03 Oct 2026 18:01:28 +0000
Manifest next update: Sun 04 Oct 2026 18:01:28 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: WdeGAbNY/jlpMIbpDUdW7LmSjiWXJfU00Aq6fm6QsEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:9a:7a:14:fa:9c:56:12:8e:0c:cf:8a:5f:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Oct 3 18:01:28 2026 GMT
Not After : Oct 4 18:01:28 2026 GMT
Subject: CN=3323a109943134f8f1111547200345b7a84db5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:6d:c2:ac:36:23:e9:02:03:fd:cd:88:17:
dd:5d:ed:09:77:c5:6f:28:6d:86:e3:ef:61:82:9f:
06:48:6f:76:4c:e3:aa:c6:d3:8f:cd:da:eb:ae:d1:
ae:f3:3b:86:b9:72:55:fa:77:83:67:47:dd:9e:68:
75:6d:93:b4:52:4e:53:51:52:e7:2f:58:3d:ec:34:
b0:b5:b8:48:b6:10:ea:94:78:db:07:f8:6b:f7:27:
7d:02:83:c5:42:b9:b3:34:ae:87:15:43:8f:be:e3:
0e:a2:f9:f4:f6:9c:b0:79:68:79:39:05:a2:9d:01:
29:12:d6:21:b5:3d:4e:2b:4a:54:09:97:d7:c0:fe:
a6:12:41:61:83:37:02:6a:e5:08:52:40:15:b9:20:
68:cc:5a:f0:83:c7:e5:ff:bb:58:e4:b1:bc:48:ff:
21:7e:07:2e:38:09:fc:db:76:b2:7a:08:fb:af:d7:
b4:e1:a4:9a:62:f2:32:d6:9f:a5:20:1e:23:78:c6:
dd:eb:1f:b4:95:0a:aa:be:8b:0e:5d:2e:78:f1:14:
8f:fe:ae:cd:e2:08:17:bd:d7:1a:4b:bc:c6:ce:99:
39:57:31:95:60:02:8d:34:c3:44:38:37:bd:83:76:
c6:6f:05:f8:7e:92:06:ab:18:4a:73:74:49:5d:0c:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:A1:09:94:31:34:F8:F1:11:15:47:20:03:45:B7:A8:4D:B5:FE
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:37:ac:4a:b0:2d:d6:2e:38:0e:1a:9f:81:ab:b3:72:62:68:
e9:a3:73:15:b2:42:38:dc:76:19:0c:52:75:d9:85:ae:34:a5:
0c:69:38:16:c0:d6:6c:69:19:b5:51:3a:cf:8f:72:df:bb:92:
3d:0a:73:50:ce:40:ab:1c:80:14:a4:bb:b4:45:19:41:29:45:
bd:72:cf:f4:af:76:87:30:89:fa:d2:9e:c0:a1:b5:ff:01:39:
fc:a5:f7:5a:7f:91:c2:99:a3:b4:d4:00:bc:a5:6d:73:44:64:
73:08:86:37:e9:f4:ec:28:23:1d:35:e2:5d:8c:7d:e1:35:37:
fd:13:ea:41:6e:6d:e8:b8:b6:fb:5d:cd:91:c1:03:c6:c4:e0:
3d:db:42:cf:63:c4:bb:07:57:ce:69:ff:8e:47:0a:d6:f6:fd:
9b:f6:fc:cd:b5:7b:e3:da:39:ff:38:a3:ea:69:8e:2f:20:1a:
69:34:63:34:e1:ca:ea:f7:a2:a5:53:8d:91:fc:77:cc:f2:09:
a4:6d:d6:62:7a:cc:c4:c2:f1:bb:ba:95:a9:22:b8:0d:2e:8b:
fc:61:e4:61:d0:a2:0c:c2:a2:94:a2:01:89:66:67:30:f5:dd:
12:75:a0:85:fc:17:5e:0b:e6:d9:40:d6:89:0b:42:70:10:29:
4a:ed:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:52:35 2026 by rpki-client