Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: GGJxakNwICcpCzlR6l8rekjSaFG7ePeWAMVoSdavwVo=
Subject key identifier: 73:4F:2B:D7:EB:D2:69:83:C9:21:F7:D1:C8:AF:52:D1:0E:31:61:4E
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 019D2AE115F61BEF23F34676F882AB0517C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 16:01:27 +0000
Manifest this update: Thu 26 Mar 2026 16:01:27 +0000
Manifest next update: Fri 27 Mar 2026 16:01:27 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: Dj9tAj1K1jnkzi3xGVMWIHlA0cuPKpmFX8eekUBbeEc=)
2: Sjx8Db6pkn2_X7XkTkVkrHu39II.roa (hash: L70KZEVpZd+9Yn8XtQUD7ShK+v4vhSOp8udCniXBES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:15:f6:1b:ef:23:f3:46:76:f8:82:ab:05:17:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Mar 26 16:01:27 2026 GMT
Not After : Mar 27 16:01:27 2026 GMT
Subject: CN=734f2bd7ebd26983c921f7d1c8af52d10e31614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:a2:a3:e8:ae:bf:39:b6:89:1e:c9:df:2f:
32:1b:20:4c:83:a4:e9:c0:1d:22:ad:a5:5d:e3:2c:
6d:c6:00:56:59:c7:29:06:c1:af:be:a7:54:bb:4c:
96:9e:a1:2d:63:70:93:08:3f:fc:fb:48:7c:7b:cf:
04:49:a9:d9:12:63:bb:15:54:ed:f0:a1:cf:5c:85:
45:3f:af:94:ae:9b:44:f6:f3:ca:d7:2f:82:d2:6e:
37:40:8b:08:c8:e3:7f:26:6a:02:bc:4c:9a:8f:4d:
36:9b:40:3b:d0:2d:9c:c8:42:59:69:35:2c:34:11:
78:a7:ba:2f:05:31:d5:95:b9:59:61:92:20:ae:f0:
52:74:70:5d:07:c3:d7:a2:2a:f9:79:d2:68:30:55:
b5:1d:f2:51:2f:93:ea:02:5c:19:50:f7:61:2c:e7:
11:da:a6:18:1c:b5:65:cf:1e:92:0d:82:51:63:cd:
36:9b:2d:0b:c3:35:f2:7a:ed:5f:89:dd:e8:3c:55:
f4:9c:cd:e6:9c:ba:2b:12:52:10:b0:be:7d:10:17:
2e:31:6d:ef:d5:8e:de:cd:0a:b6:5e:5c:0b:30:7f:
95:39:5c:07:5f:e8:93:9f:72:47:00:10:14:8a:f4:
d8:60:1a:8c:3b:c7:1a:61:38:12:3d:4f:45:63:5a:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4F:2B:D7:EB:D2:69:83:C9:21:F7:D1:C8:AF:52:D1:0E:31:61:4E
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:16:03:6e:af:3c:69:ab:10:4e:2f:5e:65:ae:f4:92:ff:a7:
52:43:6d:1c:b9:ed:eb:ed:96:fe:a9:8a:b6:f8:58:fd:cd:44:
fc:c5:63:8d:14:eb:c6:cf:36:5d:a7:b1:ab:fd:a4:e4:7c:90:
78:7b:98:8d:2b:13:25:71:23:61:b8:11:11:9b:da:38:e2:d2:
87:3e:3f:58:94:59:d2:08:e2:89:9e:9c:dc:cd:d5:dc:7f:8d:
8a:39:ce:ed:78:32:87:71:15:84:f2:94:92:8f:8c:e3:df:82:
a1:f1:e5:7e:e1:b3:f1:80:f1:7d:19:85:a8:9b:8e:fc:f8:50:
ce:13:73:a8:a3:46:e1:20:c1:19:26:d8:b0:ec:66:2d:b5:35:
f6:ea:fe:10:f1:4f:b4:69:ba:d7:de:d4:70:8d:43:5f:2e:1f:
96:e0:5b:a1:77:63:b3:54:7d:5b:c3:8b:a6:46:65:24:e1:6d:
77:1f:a6:78:e5:64:a9:17:2a:25:79:62:17:e9:14:45:9d:6b:
0a:79:df:50:98:8d:b2:27:9e:84:e8:42:90:0c:f7:4b:c7:0a:
5b:a7:7d:4c:18:32:2e:a4:73:ea:eb:37:72:d1:02:d7:00:df:
10:53:11:cb:61:69:62:fe:ec:20:e4:d1:93:e0:5f:f3:28:a9:
37:34:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:44 2026 by rpki-client