Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: CW3KXM6wxk4tTGW0ziLD3NHj4P4wvEYmsQDIcJB8yE8=
Subject key identifier: 88:5A:A4:52:79:79:0D:EE:3E:90:F4:AB:EB:39:98:5B:A1:C6:05:6B
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019DCE2BCC840CF24C773B638808AFFA75B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 09:01:10 +0000
Manifest this update: Mon 27 Apr 2026 09:01:10 +0000
Manifest next update: Tue 28 Apr 2026 09:01:10 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: wJpNWbtzeFYOXF1FhinNAB6AImBl8ERALsPUEeQdZyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:cc:84:0c:f2:4c:77:3b:63:88:08:af:fa:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Apr 27 09:01:10 2026 GMT
Not After : Apr 28 09:01:10 2026 GMT
Subject: CN=885aa45279790dee3e90f4abeb39985ba1c6056b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:48:17:0a:2f:10:34:8a:a8:ae:a9:38:32:
90:1e:85:e1:f6:57:35:74:97:5f:dc:03:c4:43:62:
70:6c:08:03:18:df:93:35:2e:93:ec:ee:4d:b4:f6:
19:d9:ed:40:f2:18:44:25:04:70:b3:c4:0f:5f:01:
4f:41:6d:e0:e7:9e:e6:67:cb:54:3e:79:c0:68:f2:
b3:07:88:8b:98:ee:53:43:30:2c:b2:6b:c2:0b:7b:
73:3f:6e:ee:27:86:b8:a8:df:aa:95:5f:9f:b6:f4:
18:cf:29:34:d2:e4:3f:b6:0a:62:e8:17:f7:e4:24:
b6:5b:c8:bd:de:72:e0:cf:40:c5:95:21:e4:da:fe:
74:78:85:9c:0f:cb:f1:73:82:a6:69:00:52:77:0e:
36:ca:4e:c0:ff:97:6c:ed:c9:9b:c6:e4:4c:f7:c0:
5b:fd:35:13:6a:5e:98:3b:b7:91:81:ff:80:8a:42:
81:31:45:59:75:7e:0d:27:f3:2f:e8:9e:57:99:6f:
c3:9f:4b:b4:60:bb:44:18:dd:71:14:c9:46:98:45:
8c:b2:57:33:d9:f9:89:83:7b:0a:5f:6d:bc:13:68:
74:01:32:51:51:b1:4a:60:b8:9c:41:3a:3e:37:5a:
0f:e3:17:40:f7:a7:8c:d1:7f:ca:4e:93:4d:96:00:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:A4:52:79:79:0D:EE:3E:90:F4:AB:EB:39:98:5B:A1:C6:05:6B
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:39:1c:49:f1:83:74:61:25:4d:c9:79:df:5c:b2:a2:9a:
5a:18:ca:d5:b5:28:de:9c:41:e5:0a:10:be:2d:06:9f:e9:4a:
35:eb:f5:45:e1:55:96:42:18:b6:92:d4:51:75:75:f4:52:f8:
3e:2c:71:a5:6a:dd:4a:18:a7:50:11:f0:2e:dd:7c:a0:18:f7:
8d:8b:49:1c:02:a7:36:d6:4c:f9:19:a8:7f:7a:51:d3:b1:ec:
2d:a2:58:0d:c4:b4:89:da:9f:42:d4:00:2f:9c:67:d6:03:06:
c5:13:a2:c0:5d:c8:8e:58:b2:81:91:dd:fd:63:97:5b:8c:fd:
df:94:e1:53:a5:cf:f6:a5:7e:ab:53:ff:58:5e:02:35:a4:1c:
8a:7b:2b:92:bc:90:54:ee:11:c4:52:ea:c8:e1:26:bc:13:c8:
ee:f9:06:dc:b3:83:e4:98:cb:e5:42:b6:7f:53:0f:9a:cb:df:
64:63:59:ad:8a:50:1d:c9:27:47:9d:62:0c:a2:d3:f1:95:7f:
a7:29:a2:03:af:8f:39:38:07:bd:3d:f7:df:cd:42:c4:13:7a:
56:79:61:9b:46:7c:d4:f8:c5:09:e6:49:e2:3b:60:f3:bf:0c:
04:1c:49:40:29:6a:7c:2d:3d:43:9a:a5:eb:cb:08:04:73:fd:
ed:da:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:47:41 2026 by rpki-client