Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: A1Ff+w9GpmEhsuWrnsSZn0Qd8AWAFVnuw4Y65y0rRzA=
Subject key identifier: 93:4C:4A:99:E6:65:24:9B:74:F0:9A:1B:5D:53:D7:50:1D:7C:11:83
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 019D0930951CA91A1A9197E93B365F16F92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1809
Signing time: Fri 20 Mar 2026 03:01:12 +0000
Manifest this update: Fri 20 Mar 2026 03:01:12 +0000
Manifest next update: Sat 21 Mar 2026 03:01:12 +0000
Files and hashes: 1: GqI-mzxc1fhTm5OyOP_m5TCCnVA.roa (hash: U8EEHo9hb/0j3nnEWBKaK1c26NGcKjSMcfvdjuvCGRQ=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: doyRFt8D/E2uAEmO64qQev1JTEyBIWVRruyVhSzlgYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:30:95:1c:a9:1a:1a:91:97:e9:3b:36:5f:16:f9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Mar 20 03:01:12 2026 GMT
Not After : Mar 21 03:01:12 2026 GMT
Subject: CN=934c4a99e665249b74f09a1b5d53d7501d7c1183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:05:b6:88:8d:99:63:42:19:23:21:51:47:
03:4a:20:1d:25:ef:3f:49:b2:bc:00:6d:4c:6d:75:
f9:d2:4f:e9:fc:46:3f:96:52:96:3f:9d:c8:78:b4:
15:16:ef:65:88:6b:ab:53:87:19:86:57:f5:75:60:
2e:26:3d:46:fa:92:e3:e1:b8:bd:d5:c8:bc:e0:e4:
53:8d:23:c6:ea:15:9e:da:f0:92:cd:56:53:0c:d2:
f0:16:fa:ed:ca:62:66:9a:3c:fe:7a:d1:77:5b:4f:
8e:46:d4:58:73:60:37:bb:36:eb:fb:22:e8:6e:24:
f9:e1:43:01:9c:15:3a:13:41:aa:f4:85:94:ce:e3:
0c:f7:88:7e:f8:7c:76:c2:e3:1d:0c:53:6b:a3:af:
6e:3d:de:18:25:46:a6:6e:d5:a3:ee:b0:e5:1c:ba:
16:9d:4e:b5:72:17:75:f5:10:73:c8:98:88:3d:9c:
38:95:83:8c:1e:b3:d4:cf:f4:5c:df:55:68:ee:a7:
9e:65:63:e9:42:bf:98:7b:71:a5:cc:8c:36:49:03:
06:8c:b4:b1:ca:0e:ae:0f:45:cc:34:7c:8b:ba:95:
3f:33:98:c5:47:e5:16:60:c3:1e:dc:bf:14:c6:34:
09:c2:75:2a:23:9e:ac:ba:0b:9a:e4:27:ee:c9:ed:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4C:4A:99:E6:65:24:9B:74:F0:9A:1B:5D:53:D7:50:1D:7C:11:83
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:50:04:51:ba:0b:9d:18:45:48:15:eb:34:1b:8f:f7:1f:31:
93:96:7d:7b:cf:90:ca:01:88:78:dd:b9:86:bb:ec:97:35:fe:
53:a8:cd:d5:bf:37:f7:d8:cd:b0:85:26:90:9d:a3:95:0a:0c:
e0:c0:38:9d:81:a8:a9:14:61:c8:99:de:7f:a6:87:ad:7c:5f:
a6:3e:14:d0:82:d5:88:03:02:16:b7:6b:25:97:0f:ad:ef:5b:
c4:06:6d:84:4c:c7:2c:34:1e:08:1b:5a:af:2b:08:97:f6:94:
c3:d4:fa:b1:ec:99:0f:6b:96:e8:19:44:56:f8:98:0d:84:82:
fc:f3:79:92:9e:9b:d0:ac:b0:34:bd:4d:d7:12:a6:7c:08:b0:
47:de:db:29:fd:c5:b0:db:e0:c9:32:33:ea:66:47:f9:5b:a1:
1a:cb:15:44:66:d7:fe:a6:00:43:04:10:fe:8b:46:e5:ff:ed:
1e:6b:fa:cb:3d:e1:46:a2:aa:0e:4d:60:a9:ba:d0:0e:3d:0f:
c8:c5:fc:ab:a9:71:ea:7e:db:27:0e:c4:be:9c:55:a3:f7:d8:
fc:d2:02:88:90:20:96:9d:2c:13:d7:56:23:bf:72:2f:02:0d:
81:01:d5:03:56:06:94:0f:fd:e6:88:9f:0d:50:1b:ce:c9:85:
c4:76:b1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0JMJUcqRoakZfpOzZfFvktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTdmZDIyN2U5ZGNlOTc4MDVjMDNlNWYzMzAwMmFlYTE4
YzM3ZGQwHhcNMjYwMzIwMDMwMTEyWhcNMjYwMzIxMDMwMTEyWjAzMTEwLwYDVQQD
Eyg5MzRjNGE5OWU2NjUyNDliNzRmMDlhMWI1ZDUzZDc1MDFkN2MxMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yYFtoiNmWNCGSMhUUcDSiAdJe8/
SbK8AG1MbXX50k/p/EY/llKWP53IeLQVFu9liGurU4cZhlf1dWAuJj1G+pLj4bi9
1ci84ORTjSPG6hWe2vCSzVZTDNLwFvrtymJmmjz+etF3W0+ORtRYc2A3uzbr+yLo
biT54UMBnBU6E0Gq9IWUzuMM94h++Hx2wuMdDFNro69uPd4YJUambtWj7rDlHLoW
nU61chd19RBzyJiIPZw4lYOMHrPUz/Rc31Vo7qeeZWPpQr+Ye3GlzIw2SQMGjLSx
yg6uD0XMNHyLupU/M5jFR+UWYMMe3L8UxjQJwnUqI56sugua5Cfuye2I+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNMSpnmZSSbdPCaG11T11AdfBGDMB8GA1UdIwQY
MBaAFDEX/SJ+nc6XgFwD5fMwAq6hjDfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAt
OTk3MTkwN2E5NWE3LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAtOTk3MTkwN2E5NWE3
LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklAEUboL
nRhFSBXrNBuP9x8xk5Z9e8+QygGIeN25hrvslzX+U6jN1b8399jNsIUmkJ2jlQoM
4MA4nYGoqRRhyJnef6aHrXxfpj4U0ILViAMCFrdrJZcPre9bxAZthEzHLDQeCBta
rysIl/aUw9T6seyZD2uW6BlEVviYDYSC/PN5kp6b0KywNL1N1xKmfAiwR97bKf3F
sNvgyTIz6mZH+VuhGssVRGbX/qYAQwQQ/otG5f/tHmv6yz3hRqKqDk1gqbrQDj0P
yMX8q6lx6n7bJw7EvpxVo/fY/NICiJAglp0sE9dWI79yLwINgQHVA1YGlA/95oif
DVAbzsmFxHaxdA==
-----END CERTIFICATE-----
Generated at Fri Mar 20 14:03:27 2026 by rpki-client