Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: OeYkRYaPZC2i4UHbgPI+6sKeRR6nhU+0hKOJ5EDkZwo=
Subject key identifier: 3F:4F:31:C0:BB:B9:EF:51:A6:32:36:9A:C3:0A:53:1C:D1:DB:11:B2
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019D27A89559058FAFC1BEC505F5099777C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 122A
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: hkOUibMwzh1Bc2XenDWAciwPZIrKYw4cZuAncchHHkw=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:95:59:05:8f:af:c1:be:c5:05:f5:09:97:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=3f4f31c0bbb9ef51a632369ac30a531cd1db11b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:24:41:7e:27:a9:42:17:ec:69:55:b5:da:
42:d3:be:07:7c:c0:27:76:3f:5f:a5:f0:31:9b:eb:
1b:77:a2:e9:07:bb:78:29:30:00:2f:42:4b:1f:07:
12:14:9b:a3:4a:19:1f:d4:18:53:fd:d1:56:22:f7:
e2:2e:a7:23:62:e2:20:71:f8:d9:44:65:89:5c:43:
35:dd:a5:05:f0:a2:66:d1:c0:d3:1f:e6:9e:0e:68:
d5:bc:44:f9:f6:c0:8c:b7:33:d3:ab:88:14:8e:6e:
d5:9c:20:c3:4c:12:bb:8a:d4:8e:61:2f:47:b9:03:
73:cc:4c:de:06:aa:3e:58:ee:bf:56:1a:9a:71:6a:
4a:27:f6:e7:de:c7:2e:1c:b4:4f:b9:0a:6b:b6:69:
c2:77:7e:d1:15:75:73:86:25:0d:4a:9a:66:d7:a3:
a4:15:62:a4:b6:27:08:69:f8:07:14:f6:be:bf:d2:
62:53:aa:cf:38:89:a5:12:0b:c4:66:41:17:90:d8:
fb:07:01:02:49:bc:ee:35:2e:cb:b8:c4:94:af:10:
d5:4f:7a:58:76:a6:8e:a6:46:97:39:7f:c6:ca:a0:
d1:0e:bb:eb:f0:be:1d:84:3e:69:a7:fa:01:b5:49:
c5:0c:e3:78:1c:d4:8e:07:9e:83:7f:8e:71:40:da:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:31:C0:BB:B9:EF:51:A6:32:36:9A:C3:0A:53:1C:D1:DB:11:B2
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:09:33:33:51:2d:95:4e:b9:e1:01:42:20:2b:49:48:db:b7:
f1:74:23:d8:4f:6a:56:73:36:62:5e:33:e8:3b:e7:db:84:cd:
cd:77:07:30:82:58:8c:b3:53:e2:16:12:24:27:12:80:8a:62:
64:f0:0e:45:48:bf:5c:8f:23:21:eb:2b:52:7c:35:e4:f2:44:
49:9b:b5:b0:23:61:c4:84:f9:98:fa:be:4b:03:12:d2:a5:89:
df:f8:92:4f:24:88:be:06:24:b6:d4:6f:2a:9b:73:35:c9:97:
83:2b:46:f6:66:0c:73:7b:d6:e0:af:c9:0a:29:ce:bc:b2:da:
2e:df:e9:3f:a4:8b:f8:e7:f8:58:f5:2d:df:f6:f4:74:50:fc:
b3:5c:e5:bc:b2:c7:e1:28:1c:da:92:6e:34:ed:0c:4b:97:83:
2b:7b:e5:21:14:96:f1:ff:74:dc:85:85:63:ee:c9:d1:79:c6:
da:1d:a1:3f:b5:c2:46:16:4c:84:45:c6:fe:f0:a7:29:76:6e:
3e:96:a5:b4:ab:59:3c:01:dc:7f:c0:42:a0:a4:c3:9f:66:ca:
a6:55:98:6f:6e:b4:8e:35:71:29:1f:a5:ea:f9:7c:91:e3:9a:
e2:6d:33:3f:d6:d4:47:7f:7d:2b:2b:65:0f:71:84:8a:de:5f:
fa:a4:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:10 2026 by rpki-client