Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: 0blDjMpKAWuRvVbbiRvU7q8Vk5fDAuWfDpCAhgWGLXg=
Subject key identifier: 93:D9:31:1E:AD:01:27:FD:83:6D:C0:87:02:38:72:B2:90:4A:B5:E1
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 019D273B02F46EA60D6C9646C681B769E8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: CXw4IiYcMMsq5Ub-2HQJVH14IxY.roa (hash: W9tE5EUHkQFTRiFxznT+ictJcHvJ5wZk3oWmLH3VHTs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: 6V7t4VNwoeykrIMpYug8c5M3KPebRva8CqGB0YwMROg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:02:f4:6e:a6:0d:6c:96:46:c6:81:b7:69:e8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=93d9311ead0127fd836dc087023872b2904ab5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:92:58:13:28:b5:e1:74:49:57:36:0f:e1:
02:96:21:54:55:f6:d1:32:a6:ac:51:66:fd:11:e6:
2d:07:b8:f0:3b:db:62:2f:45:ef:14:71:5e:3e:58:
35:63:07:47:95:0c:63:4f:ba:c5:3c:eb:17:bd:a0:
e9:f7:ce:e1:4c:de:23:53:ed:48:04:b9:1e:1b:7c:
45:0e:aa:db:b8:9c:6a:5c:d6:0f:ee:3a:cb:6c:e7:
ef:ed:d6:41:3e:f1:43:cd:fc:2f:8a:54:c5:e3:87:
a5:0e:ec:78:fb:ec:ea:7d:9b:66:aa:26:7c:3f:ed:
9a:7e:f5:17:5d:c3:6b:e7:4f:42:f9:00:3f:72:d4:
ad:1c:43:33:08:dc:5f:ff:d9:5c:c9:be:2c:25:91:
61:50:10:06:c1:b8:79:98:67:1f:a8:69:7f:46:bd:
07:33:7d:22:a9:dc:95:f4:43:ac:39:39:ee:95:af:
8e:4d:3e:93:ad:b3:ef:b8:f8:cd:a1:94:49:bc:10:
5d:90:bc:38:9e:7a:b1:ed:cc:40:d7:0e:44:d5:db:
45:20:5d:26:ab:bc:41:0f:4a:91:57:bf:94:52:bb:
28:3a:0b:53:47:32:ca:f3:85:e3:a9:2c:98:d3:d2:
22:43:f4:e4:12:6c:13:b1:18:3e:48:dc:83:63:2b:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:31:1E:AD:01:27:FD:83:6D:C0:87:02:38:72:B2:90:4A:B5:E1
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d3:b8:f4:0f:97:9e:52:7c:30:d8:86:62:a0:b3:a5:b0:26:
6f:56:2f:dd:41:64:30:fe:51:77:a3:2b:f3:a7:d2:dc:97:03:
a1:e1:80:07:75:28:0f:fe:8b:6d:e1:f2:30:2f:d7:56:74:cb:
e2:a6:c5:9b:e9:84:7f:3b:bb:00:7e:5a:81:de:54:85:50:87:
73:15:46:1c:f6:07:21:ab:2c:07:62:14:14:33:ad:47:09:41:
b3:22:05:eb:55:8e:06:5f:1c:b3:a0:4c:ca:d5:47:0c:04:39:
bc:3e:54:b1:15:b8:21:65:f9:8c:f9:a3:fd:52:9e:4d:f3:b4:
b5:01:0b:47:21:03:0d:18:86:88:ac:3f:a6:94:45:ab:84:b8:
f3:87:e6:95:11:8a:62:0f:10:9e:e4:e2:76:55:aa:e0:4a:1a:
3e:3f:ad:9e:f1:73:9c:25:74:a0:5e:6d:a4:57:23:25:81:d4:
b7:c3:6c:e2:b4:16:87:c2:ba:f4:e7:d4:6f:6b:91:69:5c:e4:
61:d7:f0:a3:c2:15:a2:59:1d:28:0a:d3:64:24:eb:27:c9:eb:
fc:0f:e2:37:87:0a:97:b5:cd:55:1a:90:90:08:d7:7d:90:b4:
8d:db:0c:79:5f:f4:fa:53:47:08:25:7d:47:f9:1e:4a:7d:24:
71:e3:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:52 2026 by rpki-client