Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: TDchxPAns+uZFYliH4pRCN7TmN53Z9GoXq3StBdzjxo=
Subject key identifier: A7:70:2C:24:08:B0:C4:BE:A9:57:81:99:64:1E:29:49:21:DB:73:65
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 01A104DB9F6961208FD9913EBC7392C8293C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1A86
Signing time: Sun 04 Oct 2026 03:01:04 +0000
Manifest this update: Sun 04 Oct 2026 03:01:04 +0000
Manifest next update: Mon 05 Oct 2026 03:01:04 +0000
Files and hashes: 1: GJoQFJBAUel6rYIBbJgsPhkwe_A.roa (hash: HOtquw/PCD26da1r/Hhwzv9o3k0BD3tCMbqRt5V2lmc=)
2: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: aJCT0Mj6jQVpTr5Z1Un/ye189/hgP+JMvALPijTZuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:9f:69:61:20:8f:d9:91:3e:bc:73:92:c8:29:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Oct 4 03:01:04 2026 GMT
Not After : Oct 5 03:01:04 2026 GMT
Subject: CN=a7702c2408b0c4bea9578199641e294921db7365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:8d:e0:dd:94:57:74:24:62:80:6a:c0:71:
6f:dd:1b:45:0d:6b:57:7d:f4:63:08:33:f7:39:81:
21:4d:a1:98:4d:04:5a:96:6b:03:d0:4e:c9:ef:ea:
32:e5:79:7c:c4:1f:6a:39:d8:8b:14:a7:16:7a:42:
8f:ee:19:a2:61:ce:2d:15:92:0c:fa:51:f8:e9:ad:
29:c9:73:0c:86:2c:83:86:b7:82:85:ae:45:5b:da:
e7:69:4d:7d:2b:f6:84:8c:87:52:4a:39:91:ca:1c:
e7:30:52:26:5b:1a:dd:36:97:74:73:33:ab:8a:05:
d0:3a:1a:74:a5:a2:93:38:46:e2:82:cf:00:f2:f0:
21:c7:bd:b6:90:ca:e4:5c:45:4c:96:a0:b2:a4:d8:
4b:50:bd:1e:41:78:f3:ff:08:4d:9f:63:c0:ac:40:
8b:16:a3:b2:de:aa:36:95:52:72:8a:4c:67:1a:8c:
cd:d6:4f:49:25:18:85:e2:47:e1:e1:1d:6c:93:7a:
17:7c:31:89:07:c3:ec:2b:17:36:d2:d5:89:3d:cd:
25:91:3f:84:9b:44:34:4a:b0:13:93:51:48:b7:a0:
d5:22:57:59:fd:74:68:ac:9a:3c:84:19:65:f7:2f:
71:81:06:3e:85:94:2c:e1:93:56:b7:a8:24:34:0a:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:2C:24:08:B0:C4:BE:A9:57:81:99:64:1E:29:49:21:DB:73:65
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a8:c5:51:47:c5:49:42:c2:3d:72:a0:9c:2d:09:30:7a:65:
d9:a1:01:21:20:52:2d:d3:e4:4f:ab:42:10:f4:f1:90:7e:8e:
82:12:32:02:2e:c5:ab:df:98:cb:af:07:7e:d7:91:08:26:f9:
60:71:e1:d0:0c:13:c6:56:b1:12:39:25:24:3a:48:01:9c:9f:
e0:dc:7a:d9:ae:b6:34:b5:3d:a3:06:8c:b0:28:eb:8c:b3:75:
a0:aa:a0:35:8d:df:7c:e8:60:44:6f:fb:c3:9e:d2:81:61:d9:
4f:31:4f:bd:f5:86:76:46:6f:11:8e:27:1f:d4:1b:a2:60:30:
cf:6e:67:4a:29:33:27:28:ad:24:07:73:18:9e:92:25:97:39:
f7:8e:84:b2:25:b0:f0:54:47:12:96:92:83:21:38:35:35:e9:
72:22:3d:d0:80:c7:8c:6d:06:8d:c6:97:19:13:27:b6:7e:df:
d0:12:5e:b1:9e:82:aa:eb:d9:8e:f2:c1:c0:da:cb:14:f2:b4:
2d:41:40:12:33:6b:cb:96:ce:b4:79:ca:9f:5a:71:db:5a:be:
4c:32:7a:38:cc:e5:ca:e3:81:30:28:dc:26:b0:c4:66:b8:fe:
65:d9:c2:54:42:48:44:d2:11:91:12:a6:9c:40:70:f8:18:24:
2e:87:29:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:21 2026 by rpki-client