Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: ZXD8V+ei2gXAvfViJ9wuA57W03g66nxv+2GfPF+2iWU=
Subject key identifier: 75:00:33:20:94:BB:DD:F9:68:C0:29:95:3B:D5:C6:B7:06:DE:C9:7F
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 01A12B0D84B2634B87CBF477C6F3D6706E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 143E
Signing time: Sun 11 Oct 2026 13:01:08 +0000
Manifest this update: Sun 11 Oct 2026 13:01:08 +0000
Manifest next update: Mon 12 Oct 2026 13:01:08 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: WBcRcgiHdfOnX5ijE0qM9J+J8wEMueY1A1QbwXrgHn4=)
2: lHZ8No0oVWAfgTGUjjZGtyRZhWo.roa (hash: XY5Vcv+RR5CpckRK8/VMlpNGWq4j8wxQj8pmKCvhpds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:84:b2:63:4b:87:cb:f4:77:c6:f3:d6:70:6e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Oct 11 13:01:08 2026 GMT
Not After : Oct 12 13:01:08 2026 GMT
Subject: CN=7500332094bbddf968c029953bd5c6b706dec97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f4:49:09:10:f7:e6:24:20:05:94:7a:6e:d8:
c8:08:6c:65:75:77:90:1a:39:01:b7:77:44:63:88:
1b:f1:f1:a6:d6:ce:c7:78:fa:1d:e6:90:c0:58:59:
74:72:e1:b4:37:68:96:e9:34:22:84:ba:1c:1e:f8:
d3:11:3a:2b:59:7a:c9:6a:d3:ac:d2:7a:c1:bf:3f:
49:9f:a5:e8:b2:90:3c:c3:50:97:50:ad:3d:84:2c:
d3:e5:c8:bb:47:b6:38:14:c0:56:e8:2d:80:38:6a:
20:f9:e0:f0:a7:9b:24:1d:e0:c8:da:95:94:0f:91:
6f:31:06:fd:2d:95:1f:9d:8a:89:73:9c:01:ae:4e:
2c:a1:52:e6:e8:90:7e:71:55:4a:d4:a8:4d:74:bb:
24:70:f4:c6:f5:36:37:6f:fa:d8:12:f2:26:7a:59:
01:bb:47:4a:ae:08:c5:ad:83:e4:e6:77:22:a0:4f:
b9:2c:86:93:6b:84:2a:30:7c:a3:26:22:d2:c0:d7:
fd:0d:8c:6e:ec:06:bf:5f:5a:a7:34:00:c2:a6:23:
7e:20:a0:9e:92:74:1c:60:61:0c:5f:29:a4:50:cb:
d5:3a:f8:5a:c5:3e:d6:45:c6:82:07:64:7e:98:77:
dd:49:e9:8c:16:89:6d:55:73:f5:23:9c:13:ed:24:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:33:20:94:BB:DD:F9:68:C0:29:95:3B:D5:C6:B7:06:DE:C9:7F
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b7:78:54:18:e7:35:88:bb:77:44:0a:bb:c9:75:f8:70:f6:
98:41:e9:92:ff:1c:30:e0:c0:fd:ef:7c:86:63:5d:94:a2:bd:
30:11:db:f5:f1:54:d4:db:3f:bc:ae:1c:fb:d0:0f:ec:9f:97:
c9:e1:4b:ff:96:ae:58:9b:c6:9e:96:e3:c1:2f:fa:a7:1a:ce:
36:7f:34:72:28:83:5b:55:1f:f6:75:44:3b:a7:80:bd:e0:fe:
d6:98:5a:7a:8b:e9:13:a2:09:57:4c:16:78:76:c1:d8:17:ee:
44:e6:ee:51:fd:09:4b:62:9f:99:33:66:da:9b:01:ea:3b:dd:
83:d4:42:0c:18:23:3a:5d:d2:65:c6:7f:bf:14:b8:17:a0:a8:
2e:55:57:a5:45:29:94:89:17:50:11:ec:ca:39:ec:84:44:86:
b3:0d:b6:fe:62:ed:33:89:77:23:8f:a6:3d:77:92:08:47:e4:
9c:86:9f:b1:49:8a:f0:a2:c9:cf:9d:68:4f:fc:db:34:9c:10:
f9:55:8b:09:08:a9:0d:72:f8:0f:46:db:a7:2f:bf:db:9e:19:
f0:d2:0c:98:05:19:39:57:9a:95:67:86:48:f4:3c:be:9e:9b:
da:df:00:ce:c1:fa:3c:38:85:3e:e2:1d:69:24:b2:09:70:c7:
98:45:b0:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErDYSyY0uHy/R3xvPWcG4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjYxMDExMTMwMTA4WhcNMjYxMDEyMTMwMTA4WjAzMTEwLwYDVQQD
Eyg3NTAwMzMyMDk0YmJkZGY5NjhjMDI5OTUzYmQ1YzZiNzA2ZGVjOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PRJCRD35iQgBZR6btjICGxldXeQ
GjkBt3dEY4gb8fGm1s7HePod5pDAWFl0cuG0N2iW6TQihLocHvjTETorWXrJatOs
0nrBvz9Jn6XospA8w1CXUK09hCzT5ci7R7Y4FMBW6C2AOGog+eDwp5skHeDI2pWU
D5FvMQb9LZUfnYqJc5wBrk4soVLm6JB+cVVK1KhNdLskcPTG9TY3b/rYEvImelkB
u0dKrgjFrYPk5ncioE+5LIaTa4QqMHyjJiLSwNf9DYxu7Aa/X1qnNADCpiN+IKCe
knQcYGEMXymkUMvVOvhaxT7WRcaCB2R+mHfdSemMFoltVXP1I5wT7STb2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUAMyCUu935aMAplTvVxrcG3sl/MB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7d4VBjn
NYi7d0QKu8l1+HD2mEHpkv8cMODA/e98hmNdlKK9MBHb9fFU1Ns/vK4c+9AP7J+X
yeFL/5auWJvGnpbjwS/6pxrONn80ciiDW1Uf9nVEO6eAveD+1phaeovpE6IJV0wW
eHbB2BfuRObuUf0JS2KfmTNm2psB6jvdg9RCDBgjOl3SZcZ/vxS4F6CoLlVXpUUp
lIkXUBHsyjnshESGsw22/mLtM4l3I4+mPXeSCEfknIafsUmK8KLJz51oT/zbNJwQ
+VWLCQipDXL4D0bbpy+/254Z8NIMmAUZOVealWeGSPQ8vp6b2t8AzsH6PDiFPuId
aSSyCXDHmEWwlg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:18:38 2026 by rpki-client