Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: bvCdXl64uefKhXDdU7C8q+gO2brKUwn0o/GvmnQ4rrc=
Subject key identifier: 53:7D:53:B1:00:95:26:7B:E4:3F:7E:2A:0B:AD:7E:3A:DA:C3:CA:14
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019FA37329BB10D6C835FA7B6A0B747F80AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 12:01:01 +0000
Manifest this update: Mon 27 Jul 2026 12:01:01 +0000
Manifest next update: Tue 28 Jul 2026 12:01:01 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: tiB7bE90g22mhqM/H0dWyfXmilhJgoLM2IRgbhv574s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:29:bb:10:d6:c8:35:fa:7b:6a:0b:74:7f:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Jul 27 12:01:01 2026 GMT
Not After : Jul 28 12:01:01 2026 GMT
Subject: CN=537d53b10095267be43f7e2a0bad7e3adac3ca14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:2e:a5:2f:1a:92:a6:e8:84:47:1a:9d:f9:
57:c7:83:d5:bc:39:18:47:c4:b7:c4:07:23:6a:92:
c4:3e:dd:eb:87:51:07:a7:12:b2:86:74:2d:a8:15:
0e:99:4a:a0:03:a0:d8:2c:d6:46:4f:e7:e5:81:22:
7e:aa:54:56:ac:53:6b:d5:54:af:fb:7b:3e:77:a2:
eb:0d:87:26:df:26:60:4c:f2:e6:e6:a9:98:fb:78:
cf:cf:2a:e9:14:51:52:ea:d2:e0:7e:ce:5c:cc:a5:
b1:ec:6e:c7:16:ac:cb:f4:23:cb:74:3b:65:dc:15:
0f:3c:ad:10:6d:b4:f1:82:4a:e2:24:c9:3a:8b:d3:
da:34:7a:91:35:39:03:ab:00:19:58:12:6c:4a:4e:
5c:d0:67:e8:00:0d:4a:17:da:58:97:3d:b1:5b:ec:
67:fd:fe:59:19:f8:05:c3:9a:a2:7a:0a:69:fe:e8:
a7:4c:2d:58:e7:8f:30:17:dc:57:23:f0:63:b1:c2:
4a:73:10:ac:22:56:de:de:00:9f:2c:a5:95:63:51:
3d:4a:c8:5a:69:22:88:05:6f:d2:8f:be:5d:9f:e5:
98:9d:8b:d3:a0:39:38:b7:7b:48:b6:dc:1d:1d:86:
32:3e:ce:37:14:fe:a1:f0:78:23:9e:6f:43:a6:66:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:53:B1:00:95:26:7B:E4:3F:7E:2A:0B:AD:7E:3A:DA:C3:CA:14
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:04:83:1d:41:d0:7b:8f:3a:31:d3:b9:9c:da:60:6d:07:e5:
9a:cf:6b:a9:5b:69:78:22:fa:a2:63:1e:0c:f3:e2:35:25:d8:
01:57:b8:12:f4:43:a9:f1:5d:77:5a:38:0c:ef:43:5d:f0:c6:
07:5f:0d:96:d3:3b:95:cf:d0:a0:22:e6:eb:bb:9e:5a:64:7e:
5a:5a:50:c7:9f:fb:a4:72:48:8e:43:36:7d:7c:26:aa:5a:b9:
16:00:e0:b3:e9:98:60:22:f3:00:b7:23:da:9c:c1:aa:6c:7e:
f8:32:39:2c:4d:84:94:88:73:a4:6d:87:23:e8:62:7a:52:14:
90:2a:72:cd:2d:f7:17:97:4c:60:4f:22:34:f7:69:d7:52:3a:
d4:cf:84:53:b0:79:de:0e:be:6d:9b:3d:39:0b:fd:bd:47:22:
ea:43:37:54:16:12:70:13:77:a4:0e:da:bd:4b:b1:e0:6d:40:
e7:f1:b8:94:ac:f6:8d:a8:b2:a4:9b:a5:b9:fc:79:89:cd:7e:
b3:8e:79:de:41:b7:8a:b0:98:a0:58:63:83:7b:60:9a:d6:a7:
f4:58:85:31:bb:4d:4b:4e:e1:ab:47:48:ce:07:73:73:3d:0a:
5d:1d:f7:73:c9:cf:18:28:0b:68:af:94:28:f9:5a:7e:ef:9c:
7a:b3:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:17:36 2026 by rpki-client