Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: xYxR5dp62AAOooR5YnocROwGRtjbyyRr7L58/h1+XZQ=
Subject key identifier: 0E:B7:01:87:B3:E8:F1:EE:FA:96:CE:CF:F7:6B:8B:E9:A2:0F:16:C8
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019D27726BF7C25D130AED73EDC9D4485C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:43 +0000
Manifest this update: Thu 26 Mar 2026 00:01:43 +0000
Manifest next update: Fri 27 Mar 2026 00:01:43 +0000
Files and hashes: 1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: 0JruNRKCPhB2NrY1ukKNaXnMY4H8wLlvu+uVB+D/cx4=)
3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6b:f7:c2:5d:13:0a:ed:73:ed:c9:d4:48:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Mar 26 00:01:43 2026 GMT
Not After : Mar 27 00:01:43 2026 GMT
Subject: CN=0eb70187b3e8f1eefa96cecff76b8be9a20f16c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:52:52:15:e5:fb:c3:8f:21:c9:4a:42:cc:
4c:e8:85:8b:88:fc:56:c7:cb:25:cf:85:5d:20:00:
04:0f:38:cf:aa:80:d2:2a:10:53:00:c9:f2:16:1b:
7b:3f:0c:42:54:68:01:3b:e1:2f:f4:47:08:47:82:
81:e2:9a:af:c0:de:4f:92:b7:87:60:f8:74:34:32:
76:da:0d:42:7a:20:2d:c3:c6:37:24:37:91:f1:09:
c0:7e:fb:c4:f0:d1:c3:4f:33:07:2b:58:a3:7d:9d:
b1:58:d5:9f:d9:af:bc:7c:08:b0:89:3e:74:89:fb:
5d:6f:df:ca:61:bf:aa:e1:4f:86:1f:0e:3c:23:09:
a0:89:84:b7:a1:ac:86:05:86:1c:c7:29:ec:60:5b:
d0:4e:d3:18:36:71:d9:0e:35:70:f4:ce:85:7d:b2:
44:b5:b9:9d:60:1f:3d:c7:d7:73:f3:d3:b1:4f:2b:
07:5c:28:07:19:9c:11:50:f7:ce:16:03:8d:20:94:
01:58:59:a1:b2:41:85:02:6c:e0:37:7c:d3:f0:b6:
4d:ea:e2:b7:6c:33:03:32:90:00:d1:ad:df:84:e5:
a6:8e:40:c3:42:e2:30:28:ed:7b:83:e3:e2:a2:31:
1a:dd:91:59:b0:ae:e3:9d:eb:7a:78:db:b5:e5:ec:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:01:87:B3:E8:F1:EE:FA:96:CE:CF:F7:6B:8B:E9:A2:0F:16:C8
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:3b:e3:c9:bf:d1:f5:7c:f3:da:c4:33:74:9e:99:44:3a:
45:a3:b3:99:86:4b:65:53:02:b2:15:90:62:35:cb:cf:59:0d:
3e:1a:97:48:0a:4a:a5:71:b0:a4:af:49:54:ba:65:01:f6:68:
20:57:4c:aa:7a:1c:59:2d:da:82:b3:96:13:64:a4:ed:f8:ba:
1e:5d:af:4b:89:92:aa:2e:ec:67:6c:96:80:af:ec:4e:cf:9d:
9b:68:e9:bb:cc:1d:77:31:c5:c9:30:fb:fc:41:a3:80:7e:68:
a0:7b:44:bf:85:c2:8b:46:f2:67:36:1b:ab:a9:f4:4d:c4:a4:
93:a3:b0:54:82:25:c0:8a:ca:b3:47:4d:67:cc:e9:76:e0:10:
1e:b0:ed:08:52:ce:64:e3:5a:72:a8:df:82:41:7d:48:66:a4:
8c:8e:9f:ec:4d:1f:ba:f6:c0:d2:76:e1:e3:9a:06:8a:5e:e3:
07:bc:a0:d3:69:0b:2b:1c:30:3c:d5:32:e2:ee:9a:80:93:00:
62:01:5c:82:03:e2:0a:79:49:13:7f:5c:86:fd:6d:8a:46:4e:
1c:87:34:d4:be:76:2b:ef:b0:de:b9:84:b1:cd:8f:db:66:0f:
7f:32:d2:83:98:ce:57:a2:b4:ba:f1:28:b0:23:a5:75:e6:c2:
a6:89:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:38 2026 by rpki-client