Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: rOyOzAkxS+OkIGfwTHWSQ0C2pU99enNab27yuRZxGoQ=
Subject key identifier: C2:F3:E6:84:20:50:30:54:5E:EE:AA:FD:98:F6:BB:CD:64:F1:6B:8F
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019E1D5979A7C3883D1B65D23FE8C2CFF2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 18:01:03 +0000
Manifest this update: Tue 12 May 2026 18:01:03 +0000
Manifest next update: Wed 13 May 2026 18:01:03 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: jU1LAHJBJ/hDxU5g+SEI59JeOlPwOH98Cd0SXynsSwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:79:a7:c3:88:3d:1b:65:d2:3f:e8:c2:cf:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: May 12 18:01:03 2026 GMT
Not After : May 13 18:01:03 2026 GMT
Subject: CN=c2f3e684205030545eeeaafd98f6bbcd64f16b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:d5:18:1c:ee:ce:b4:76:cb:f0:87:0e:ce:
d7:d7:c5:07:60:ac:98:cd:ef:7f:be:ba:32:b8:6f:
76:e6:bd:31:a8:7e:c8:10:72:8b:23:88:a8:06:4f:
02:bb:26:d1:eb:e5:5d:62:bd:b4:d1:6f:77:7c:8e:
65:a8:16:59:ef:e9:0b:3c:b8:51:ba:ef:6e:97:b6:
4e:af:ca:55:8c:06:26:bb:d5:e5:62:a4:3c:2e:85:
d8:b7:2a:ef:4c:14:08:79:50:09:26:56:56:c6:98:
c2:b1:37:e2:7d:6c:56:6a:f3:47:d5:7a:81:ba:04:
22:5a:92:95:fd:00:9e:6a:62:e4:a3:83:87:52:72:
c1:9a:5a:33:0c:fd:b9:03:7d:ba:e5:c2:a7:05:ac:
d9:a7:60:73:5c:b6:51:23:90:27:e5:b6:06:1c:73:
1c:44:b4:a9:42:9f:51:ff:46:5a:cd:c4:1e:7c:87:
c1:36:37:17:bf:65:93:65:20:13:d4:2d:02:77:34:
78:46:15:a3:16:ac:b1:e6:c0:af:92:5b:97:0e:9c:
91:96:0a:d9:6c:2d:d8:32:64:07:69:ba:0a:8a:1a:
60:b4:c4:d8:d7:1e:49:e7:89:d8:0f:7e:de:d6:32:
4a:43:ce:85:4d:4d:6e:40:9e:90:f5:8d:f9:04:b3:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:E6:84:20:50:30:54:5E:EE:AA:FD:98:F6:BB:CD:64:F1:6B:8F
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ad:7d:71:7b:2f:2d:0c:63:4b:ad:28:76:60:b1:ea:fb:62:
4c:d6:c5:7f:8d:23:09:f8:10:ce:d6:69:68:32:94:a9:78:7c:
c1:49:53:e9:78:ba:01:d3:ea:9d:d2:8f:ae:f1:50:57:57:41:
37:4d:f3:88:3b:33:83:8c:46:88:2e:83:db:be:6e:36:b3:88:
15:b0:b0:b5:b2:c6:03:92:7c:55:9c:9e:2c:3b:79:bf:9f:e2:
42:f8:98:3f:b8:5f:b3:08:23:20:c6:d2:89:55:03:d9:d7:b0:
c8:20:8b:50:15:5f:33:64:dc:bf:6c:a7:85:55:40:10:28:be:
41:8c:63:aa:10:40:09:0d:66:6d:9f:3b:5e:70:3e:24:f0:e3:
bd:c5:e9:8e:cd:a8:cf:fb:02:d0:c8:24:ee:7d:8f:b8:57:64:
18:08:05:04:9b:a2:4c:df:5b:d6:60:75:53:58:98:5d:64:05:
7f:11:64:ca:5b:1b:45:be:ff:aa:d0:07:fa:75:3c:b4:84:24:
14:d7:37:9e:d7:90:23:48:b2:56:92:e5:ca:b1:da:e4:25:48:
28:98:a5:38:4b:79:24:a5:06:60:2b:70:ce:53:74:a3:cd:ef:
c6:4a:49:bd:50:a4:79:90:8a:8c:aa:b5:32:d3:80:e0:83:17:
ce:6f:f3:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWXmnw4g9G2XSP+jCz/KpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx
ODk0ODkwHhcNMjYwNTEyMTgwMTAzWhcNMjYwNTEzMTgwMTAzWjAzMTEwLwYDVQQD
EyhjMmYzZTY4NDIwNTAzMDU0NWVlZWFhZmQ5OGY2YmJjZDY0ZjE2YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHjVGBzuzrR2y/CHDs7X18UHYKyY
ze9/vroyuG925r0xqH7IEHKLI4ioBk8CuybR6+VdYr200W93fI5lqBZZ7+kLPLhR
uu9ul7ZOr8pVjAYmu9XlYqQ8LoXYtyrvTBQIeVAJJlZWxpjCsTfifWxWavNH1XqB
ugQiWpKV/QCeamLko4OHUnLBmlozDP25A3265cKnBazZp2BzXLZRI5An5bYGHHMc
RLSpQp9R/0ZazcQefIfBNjcXv2WTZSAT1C0CdzR4RhWjFqyx5sCvkluXDpyRlgrZ
bC3YMmQHaboKihpgtMTY1x5J54nYD37e1jJKQ86FTU1uQJ6Q9Y35BLO6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLz5oQgUDBUXu6q/Zj2u81k8WuPMB8GA1UdIwQY
MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt
NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl
LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea19cXsv
LQxjS60odmCx6vtiTNbFf40jCfgQztZpaDKUqXh8wUlT6Xi6AdPqndKPrvFQV1dB
N03ziDszg4xGiC6D275uNrOIFbCwtbLGA5J8VZyeLDt5v5/iQviYP7hfswgjIMbS
iVUD2dewyCCLUBVfM2Tcv2ynhVVAECi+QYxjqhBACQ1mbZ87XnA+JPDjvcXpjs2o
z/sC0Mgk7n2PuFdkGAgFBJuiTN9b1mB1U1iYXWQFfxFkylsbRb7/qtAH+nU8tIQk
FNc3nteQI0iyVpLlyrHa5CVIKJilOEt5JKUGYCtwzlN0o83vxkpJvVCkeZCKjKq1
MtOA4IMXzm/zEg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:29:35 2026 by rpki-client