Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: 2E9FrXh82Ekz7lY9xn+RHFouzjSDpHJfYlaPyPMTkhQ=
Subject key identifier: 87:FE:6E:04:B2:4C:22:F9:84:18:B4:B8:67:88:F0:4A:CD:42:AA:5E
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019D265F2D8F8B5A91D76904919F9B98E04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 0394
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: dMPMeF96k7n3z+x4+K3cgIWt3So+C92LHUBu4FRI+24=)
2: NZcLGrLahjEtjP7fLNWfO9mZoLE.roa (hash: zL4AvdmqKuWo9f0HM/Qoz6/mOwYwWcYK23qO3ml73Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2d:8f:8b:5a:91:d7:69:04:91:9f:9b:98:e0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=87fe6e04b24c22f98418b4b86788f04acd42aa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:60:2a:98:ec:c4:3e:0f:51:47:91:84:73:
7a:6e:5d:b2:8a:35:28:b0:69:b0:d3:45:1f:f7:78:
54:4e:e3:54:31:e9:45:50:43:dd:f8:4d:25:75:04:
e3:4b:de:a4:5c:af:cd:88:07:bf:6c:02:1c:23:b8:
6b:15:88:c7:92:61:c6:b8:72:42:eb:78:d3:ba:fe:
6f:10:b4:b6:be:1c:11:0d:fc:7f:d0:dc:37:4c:64:
ad:9b:0e:cd:fc:15:07:06:2d:2b:17:df:33:f4:4c:
07:0e:fe:dd:bd:46:b5:63:e9:46:52:79:ed:1f:9b:
3b:e4:9b:90:35:cc:59:9b:40:b9:b9:83:42:5b:41:
b2:8e:0d:2d:7e:81:fe:e9:3b:1d:ba:3b:c1:b1:b7:
32:21:72:1f:fd:39:31:d8:91:59:8a:24:70:64:7d:
53:2a:a4:3a:fe:88:bf:f3:00:ce:4d:0d:61:78:12:
1f:59:ed:d4:08:65:b2:09:dd:be:a1:47:61:7a:98:
b6:34:58:3e:af:ea:54:fb:a7:67:4b:03:e6:53:06:
21:4b:6e:3e:d4:57:de:9f:3b:c5:e6:8f:68:20:d3:
6f:af:61:b4:79:b3:78:0f:5d:4f:7b:a0:ed:79:93:
be:b2:34:ef:44:02:0f:70:cd:d8:a6:c6:89:67:eb:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:6E:04:B2:4C:22:F9:84:18:B4:B8:67:88:F0:4A:CD:42:AA:5E
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:aa:9e:72:73:a4:7c:2b:b0:54:ec:21:98:06:b6:30:49:5c:
f2:06:dd:eb:38:d2:b3:a7:ce:42:df:e9:0c:c2:fe:71:90:50:
98:0e:17:cc:9e:68:29:10:f9:28:b4:19:bd:b4:e3:5d:fa:35:
54:1f:35:21:c5:8e:9e:b5:5d:7f:d8:1a:20:f2:a8:2c:21:8c:
84:d4:7e:c3:74:c0:36:62:b3:e7:de:ad:9c:7b:b5:45:ee:06:
cb:fb:3f:30:37:44:c8:c4:da:ae:66:db:9a:cf:a2:7b:da:3c:
9f:7c:30:0e:e8:14:bc:ae:a1:27:60:8e:96:02:ac:c1:60:dd:
cf:64:84:76:00:22:97:0a:6d:bc:67:8e:e7:32:81:ec:df:39:
6b:a7:5d:ec:72:01:3d:52:7b:54:6e:f2:d4:85:70:9e:43:a2:
da:89:5a:a9:d9:4d:34:e3:dc:e9:04:e2:fd:b5:98:1a:a4:21:
c5:58:79:fa:77:0f:bc:62:40:7e:b4:1a:26:ca:d4:4e:e0:21:
18:e8:50:98:79:45:15:65:64:84:50:2e:72:ea:06:e6:69:ad:
df:fc:7a:52:5e:ad:db:15:65:9e:93:03:cd:fb:07:9d:93:68:
fc:f5:d7:38:ef:3a:ee:64:81:d4:d4:40:83:95:48:23:f8:a7:
39:c8:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:31 2026 by rpki-client