Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft
File: MSJY70M2DehMJcJvn7V6t-ePkWI.mft (raw, json)
Hash identifier: ei9bC6HQbkJSP1VQ2IO0OGxRLZxkMKwNK53LTsTIun4=
Subject key identifier: 2F:A8:44:14:89:A3:02:18:29:C3:95:96:C9:F7:C5:73:75:24:09:07
Authority key identifier: 31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62
Certificate issuer: /CN=312258ef43360de84c25c26f9fb57ab7e78f9162
Certificate serial: 019D26CD5384D090611137453A5473E3E70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft
Manifest number: 0158
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: MSJY70M2DehMJcJvn7V6t-ePkWI.crl (hash: HX7FvpeueCGvp7uZhqUHRyI6B+dwSOq+NopW+pxkrLw=)
2: fRMGJKOe0wfDiw0unFc85k7409g.roa (hash: GV5bf/rfa9++OBIl1skLL/HbQ9UpbL8R7W4YlnOIOl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:53:84:d0:90:61:11:37:45:3a:54:73:e3:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312258ef43360de84c25c26f9fb57ab7e78f9162
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=2fa8441489a3021829c39596c9f7c57375240907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:f2:dd:4c:33:be:99:c8:7b:7c:75:e7:5b:
11:3f:90:7e:52:91:82:57:20:ec:a3:2e:fd:16:a0:
8d:f5:e4:6c:b4:d1:2a:84:c4:0f:5c:09:14:e8:da:
67:2e:83:06:d1:f7:5a:1c:fe:a3:40:de:05:39:4f:
cc:9e:ed:04:b2:34:eb:4c:96:16:ea:4d:5e:e9:97:
ae:fc:d8:44:cb:34:49:ff:e5:6a:08:cd:2f:f0:10:
f2:43:58:73:ea:5e:dd:b2:bc:51:2f:55:a4:1d:8c:
14:57:58:12:62:d1:a7:f4:62:6e:c4:10:8a:00:55:
c5:46:d8:23:4d:03:39:24:a7:bc:fe:74:ed:86:4a:
51:e5:a6:30:d8:3d:82:16:7d:b1:1e:73:c5:7e:0b:
50:65:b2:6b:c4:27:ed:48:53:67:90:c3:09:d3:f8:
fb:73:f9:e4:12:d6:f6:2f:80:ff:b3:f5:83:74:c9:
4c:14:29:df:12:d8:b9:98:a6:1a:6a:eb:91:2c:1d:
26:4c:74:0c:b4:85:61:25:57:50:06:a0:02:75:d8:
e7:8a:fc:45:93:7a:88:16:f8:6c:47:7f:51:9c:93:
90:86:1b:77:31:6f:e7:e0:0a:dc:a2:86:da:e0:23:
a6:7f:5b:d3:57:60:b1:f5:16:a8:31:0e:8f:42:1f:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:44:14:89:A3:02:18:29:C3:95:96:C9:F7:C5:73:75:24:09:07
X509v3 Authority Key Identifier:
keyid:31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7a:28:22:4e:e3:bb:58:af:6c:c4:f1:dc:19:0c:94:74:95:
41:05:a6:4c:dd:1a:36:f4:bf:bb:94:e9:49:71:e1:de:83:6f:
76:9c:0e:40:55:85:31:a3:a1:9d:4c:8a:1a:84:be:71:73:18:
e7:e7:7b:26:c5:22:b9:7d:4d:8e:8e:c9:f5:ed:9f:51:1c:08:
a8:98:a6:1c:b2:e0:4b:fc:c6:82:d6:24:cf:aa:64:35:c0:1d:
05:e3:01:91:18:05:8a:81:1c:a5:8e:60:9a:35:0d:27:ca:d5:
74:36:fd:7e:b7:c8:cd:77:3c:eb:32:d6:a4:cb:b7:86:17:4e:
34:36:30:d8:05:80:f6:64:c2:4a:94:cf:62:55:38:bc:32:f0:
d7:26:6d:86:bf:d8:f4:0a:56:6f:de:5b:f8:28:7b:21:91:33:
7e:e0:ff:62:6f:ea:0d:50:2d:71:43:9a:1a:0d:94:a7:0c:e5:
23:7d:e9:37:a5:86:8e:ba:ec:a2:94:12:7a:58:49:28:02:61:
4e:52:d6:e5:76:53:87:2b:c7:e5:0d:c8:0e:e8:56:ba:f5:f9:
67:94:df:0e:9b:79:4a:75:21:3f:df:c3:b3:bd:b7:6f:37:28:
43:38:fa:48:3c:06:5b:b1:2a:21:b4:5a:1b:80:80:a5:a1:e6:
dd:8d:8e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVOE0JBhETdFOlRz4+cLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjI1OGVmNDMzNjBkZTg0YzI1YzI2ZjlmYjU3YWI3ZTc4
ZjkxNjIwHhcNMjYwMzI1MjEwMTIzWhcNMjYwMzI2MjEwMTIzWjAzMTEwLwYDVQQD
EygyZmE4NDQxNDg5YTMwMjE4MjljMzk1OTZjOWY3YzU3Mzc1MjQwOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj7y3UwzvpnIe3x151sRP5B+UpGC
VyDsoy79FqCN9eRstNEqhMQPXAkU6NpnLoMG0fdaHP6jQN4FOU/Mnu0EsjTrTJYW
6k1e6Zeu/NhEyzRJ/+VqCM0v8BDyQ1hz6l7dsrxRL1WkHYwUV1gSYtGn9GJuxBCK
AFXFRtgjTQM5JKe8/nTthkpR5aYw2D2CFn2xHnPFfgtQZbJrxCftSFNnkMMJ0/j7
c/nkEtb2L4D/s/WDdMlMFCnfEti5mKYaauuRLB0mTHQMtIVhJVdQBqACddjnivxF
k3qIFvhsR39RnJOQhht3MW/n4Arcooba4COmf1vTV2Cx9RaoMQ6PQh8JHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+oRBSJowIYKcOVlsn3xXN1JAkHMB8GA1UdIwQY
MBaAFDEiWO9DNg3oTCXCb5+1erfnj5FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEt
Yjc0Mjg0ODdhYjNkLzEvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEtYjc0Mjg0ODdhYjNk
LzEvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHooIk7j
u1ivbMTx3BkMlHSVQQWmTN0aNvS/u5TpSXHh3oNvdpwOQFWFMaOhnUyKGoS+cXMY
5+d7JsUiuX1Njo7J9e2fURwIqJimHLLgS/zGgtYkz6pkNcAdBeMBkRgFioEcpY5g
mjUNJ8rVdDb9frfIzXc86zLWpMu3hhdONDYw2AWA9mTCSpTPYlU4vDLw1yZthr/Y
9ApWb95b+Ch7IZEzfuD/Ym/qDVAtcUOaGg2UpwzlI33pN6WGjrrsopQSelhJKAJh
TlLW5XZThyvH5Q3IDuhWuvX5Z5TfDpt5SnUhP9/Ds723bzcoQzj6SDwGW7EqIbRa
G4CApaHm3Y2O5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:26:59 2026 by rpki-client