Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: PfpMYg6A3/LcU7ewm1/8k89VJ4A6hZJH+L9gG9pXTJw=
Subject key identifier: 56:B0:8B:8F:7C:EF:E5:AC:77:7E:B4:A6:3E:F6:E8:79:59:82:E6:6D
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019EB7D7EEDB68F5BE28A0D2F924DA189DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 18:00:42 +0000
Manifest this update: Thu 11 Jun 2026 18:00:42 +0000
Manifest next update: Fri 12 Jun 2026 18:00:42 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: oHTqK4vCVPtKFOd9BifS+OnX0L6pMDQB1pl1qouTITU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:ee:db:68:f5:be:28:a0:d2:f9:24:da:18:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Jun 11 18:00:42 2026 GMT
Not After : Jun 12 18:00:42 2026 GMT
Subject: CN=56b08b8f7cefe5ac777eb4a63ef6e8795982e66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:c5:03:e9:2b:92:83:12:b6:bd:52:46:53:
9f:06:77:a8:7b:fd:7d:94:f5:11:1a:19:fb:4d:d3:
77:c2:36:f4:1f:3e:90:0e:19:11:ca:b0:6c:1a:61:
88:b2:2b:19:8d:90:f9:ff:44:02:40:be:ac:68:25:
bd:32:a4:f9:e2:58:a8:37:3c:2c:4c:a4:ec:0f:2e:
3e:37:bb:fc:54:a7:ef:eb:15:2f:ea:dc:51:4e:65:
2c:0c:a2:6d:0b:93:12:93:cf:67:06:32:f8:97:13:
41:41:85:9e:9e:b4:58:3d:3f:27:aa:27:4c:fa:d8:
62:8f:16:38:d8:aa:6a:bb:c4:3a:ab:86:42:1f:f5:
5d:fc:29:c3:76:e1:7f:fd:99:89:80:ac:cc:d0:63:
57:a4:4b:bd:68:04:ac:e5:df:1f:64:fa:98:81:54:
f3:31:cf:d6:02:b6:2e:8b:09:ed:14:bb:25:aa:cd:
f9:19:50:70:84:d6:ed:cd:6a:55:92:ac:74:ef:cc:
1b:08:28:b1:08:97:ec:96:11:22:d7:99:c6:01:ee:
56:a5:af:7a:de:16:05:b3:c8:d2:86:63:2e:96:81:
24:0c:30:a7:aa:a3:ee:e3:f1:7d:c5:84:72:8d:c0:
b5:e1:d9:4d:0d:44:b2:32:ec:56:42:6e:de:7e:fc:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:8B:8F:7C:EF:E5:AC:77:7E:B4:A6:3E:F6:E8:79:59:82:E6:6D
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dd:26:e4:04:ef:4b:0a:3e:25:33:36:ba:4f:67:10:10:eb:
0a:09:75:62:db:45:93:9f:96:a3:04:34:71:eb:3b:74:af:3c:
7c:36:31:4e:de:24:80:ac:72:58:14:9a:a6:30:4c:1b:67:0e:
19:d3:80:e9:1a:d7:ff:28:65:ab:6a:90:e4:81:f6:4c:c7:48:
aa:8d:5c:6a:69:e1:4b:1c:ec:04:68:84:29:cd:83:c3:4e:e9:
f3:f0:6b:7d:d1:ed:28:c2:db:ea:57:76:a9:08:75:37:b3:97:
80:ae:ed:c4:5f:4d:d8:21:85:1b:93:51:20:83:ab:d7:22:eb:
e0:67:b7:fe:3b:86:ab:2d:93:7a:4a:15:31:6e:f1:87:38:31:
31:f1:97:1c:c3:60:c2:8d:7e:8c:df:7d:13:12:64:dc:11:d7:
ae:62:ad:1c:11:58:d0:76:4f:25:74:23:20:43:aa:6f:da:6c:
cb:7f:14:20:3c:e2:39:93:19:80:4f:63:32:1b:28:fe:37:cd:
d6:6f:80:ee:9b:74:04:3a:a0:19:4a:96:2c:59:c0:35:dc:b4:
59:3b:4e:e7:45:70:6e:d7:3e:65:ef:d1:60:02:d9:94:89:1f:
85:da:ff:c6:36:78:ef:04:a4:8d:69:fe:f5:c8:e3:de:2e:74:
c2:18:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:03:56 2026 by rpki-client