Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: mFLbA/sBtNi6PuwwtzZgEKDmS6qr2pd0yL4oYFWL1qE=
Subject key identifier: CC:21:A3:5B:1B:95:DC:2F:24:C6:CB:62:81:A7:C2:27:E7:4A:8B:63
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019D2A04AA85F120FD83B955370B7DC46103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: hKzJve2h8uLWu1N7PZ6JgmzvEyr+NE/O81GBWt1hJJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:aa:85:f1:20:fd:83:b9:55:37:0b:7d:c4:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=cc21a35b1b95dc2f24c6cb6281a7c227e74a8b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:ca:9c:cd:50:e6:82:aa:a9:7c:0a:f2:2e:
f4:f6:03:b5:f8:a5:82:ad:31:44:42:bf:da:22:d4:
63:75:00:ba:b3:8f:7a:04:1b:51:73:6a:51:cf:ce:
21:4d:9f:2d:e2:d6:a0:c3:e1:ac:50:2b:72:fa:a5:
be:26:19:ea:17:b5:33:36:b3:ca:ec:1e:04:39:75:
7b:20:1a:c9:9d:49:8d:0f:cf:a4:e3:cc:4e:d1:76:
2d:de:62:04:62:48:0e:83:9c:02:95:1b:91:6a:e6:
4d:9f:1b:cd:49:b2:f0:e7:ae:18:ee:db:44:e6:82:
a5:22:95:83:ba:c5:11:fc:c5:b6:03:e0:94:82:c2:
83:3c:9c:c0:18:9d:ab:3f:aa:75:2a:7b:48:a1:33:
ca:ca:2d:8c:2e:91:12:dc:23:c9:05:b2:67:75:75:
c8:80:85:0b:f2:09:60:ce:2b:54:c8:73:75:26:7e:
22:ab:9c:8a:65:32:3c:f5:a2:4c:3d:a4:39:8f:62:
bd:e4:cc:d2:92:a3:1f:f4:0b:b2:17:30:75:ce:be:
ba:e0:db:9d:39:ed:b7:ea:9a:74:df:40:56:39:10:
b6:e5:a3:f8:97:87:b0:7c:b0:7b:bd:08:94:a5:f3:
ac:3d:28:8c:59:3a:d8:90:72:d9:4b:e7:a4:15:fd:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:21:A3:5B:1B:95:DC:2F:24:C6:CB:62:81:A7:C2:27:E7:4A:8B:63
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f0:bc:bc:a3:a7:8f:5d:b1:e5:04:89:11:99:e2:e5:f2:09:
d8:ec:13:b0:ae:02:c1:84:ac:ea:98:e9:00:db:92:5a:59:e8:
85:0d:6f:ac:3e:0d:0e:b5:ec:e6:96:73:29:49:29:bd:e7:d1:
27:3a:5d:ba:34:e1:4a:2e:a7:b1:0a:47:b9:4d:f3:52:22:30:
3d:48:5d:b2:79:15:47:b3:d3:6d:f6:77:9e:32:55:10:1a:49:
18:97:be:49:ec:46:2c:c6:88:a1:d5:37:9f:94:a5:dc:11:df:
92:18:d6:f3:27:16:96:7c:79:9e:31:f1:30:3b:36:61:4c:42:
3a:56:c8:f8:78:e4:f0:06:7c:68:91:b3:13:75:e9:f3:50:c6:
b1:76:d0:9b:b9:c8:e8:2d:85:67:70:ad:5d:1a:4d:70:f6:a4:
d1:fa:5f:23:85:82:66:c3:a5:59:59:20:c8:53:f5:4d:3a:16:
32:22:61:3b:f4:6a:12:64:8e:dd:97:43:b3:13:08:d6:7d:1d:
22:fa:87:84:00:8e:7c:40:9b:08:aa:8e:b6:9d:3e:04:04:10:
b0:f5:f4:2c:64:87:3e:56:0a:12:df:82:59:69:24:97:39:8e:
24:8d:a8:01:f1:6c:db:42:5f:93:d4:a4:93:a4:f8:83:c0:b5:
fc:8b:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:15 2026 by rpki-client