Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: 7OY+dA4CJ8ifyLmM3EI/jtMF8WjQ0K5gx0/v5GPssJQ=
Subject key identifier: 8E:85:C5:CD:63:DD:C2:B2:09:BF:B9:A5:AE:33:FF:63:FD:05:86:DB
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019CE5C8DC740FFB78783C89920F1A23A00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0E92
Signing time: Fri 13 Mar 2026 06:01:11 +0000
Manifest this update: Fri 13 Mar 2026 06:01:11 +0000
Manifest next update: Sat 14 Mar 2026 06:01:11 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: SaNvIUUDR4bDDA5BdKyxrBAvxlgavMvkDudr4mGIHzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:dc:74:0f:fb:78:78:3c:89:92:0f:1a:23:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Mar 13 06:01:11 2026 GMT
Not After : Mar 14 06:01:11 2026 GMT
Subject: CN=8e85c5cd63ddc2b209bfb9a5ae33ff63fd0586db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:36:ff:4c:fc:8c:73:29:d2:cb:15:30:78:
d2:07:19:99:07:1d:45:00:7c:8c:a4:eb:05:3e:ee:
bd:77:af:a4:74:8c:59:75:ad:19:b0:b2:b9:a0:45:
6b:31:ef:23:c2:6d:7c:78:52:3c:b5:7c:8e:17:7f:
6a:bd:f7:1a:2f:5d:6d:62:59:32:d1:e0:1e:0f:a4:
7b:9e:64:3b:59:32:cd:a4:85:71:e4:33:78:da:57:
df:10:d9:bb:9c:fd:c1:91:89:88:17:24:ff:b8:6a:
48:b9:09:57:d8:e9:e9:7c:5e:9d:09:23:49:a2:13:
52:04:1d:0b:ea:e7:57:0c:75:d7:1a:3c:f3:65:7b:
7b:0d:e8:ce:df:7b:0d:a2:07:27:67:7d:98:5e:ff:
ad:c1:80:db:94:c2:30:83:96:bd:ac:d8:9a:0c:1f:
bc:3e:dd:e0:ff:19:14:f3:82:bd:99:91:23:30:83:
41:17:02:02:57:59:ef:d7:32:61:50:67:fa:cc:f6:
93:d3:6a:20:98:a6:c2:ca:f2:92:61:93:7a:26:fc:
04:3d:17:a8:24:06:84:4f:72:55:c5:e4:80:81:f6:
5f:80:ba:03:3d:62:65:74:c9:94:60:77:8c:20:00:
8d:21:85:3a:ad:77:79:ab:27:e6:6a:36:01:84:17:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:C5:CD:63:DD:C2:B2:09:BF:B9:A5:AE:33:FF:63:FD:05:86:DB
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:29:0f:7f:d1:f9:1f:a4:d9:24:94:7d:e7:de:94:67:a5:
fb:90:a7:d7:03:a4:46:89:97:c4:1e:94:4a:f0:37:81:39:a4:
bd:c1:c7:ac:a9:92:a9:35:e9:23:0d:2f:db:2c:80:4e:64:1c:
db:1c:92:56:12:59:f9:7d:a6:1b:ba:20:2e:1c:0b:2c:10:ca:
b0:c9:c7:16:6e:b0:1c:bd:cd:59:1a:21:58:53:f1:a7:35:3b:
53:28:17:5e:61:c1:be:4d:36:8a:62:b5:1e:45:f7:0b:a5:76:
a3:65:94:da:2f:ae:d9:87:50:0c:fc:37:11:58:2b:d0:fa:a7:
dc:df:13:57:ac:24:d4:56:74:aa:f1:68:0c:81:da:ed:5c:5b:
50:8c:83:06:93:0a:49:9c:10:79:c4:78:fa:ac:9f:7e:2c:1c:
ee:c6:e1:b3:60:28:d0:95:09:48:2c:e3:0e:b6:d5:97:95:a4:
95:80:54:70:f4:c8:c0:52:8f:e7:03:0d:c7:b7:cb:a9:c8:7a:
f1:6f:51:f2:ea:97:6e:4d:20:47:84:b8:d8:1c:8f:f4:06:52:
5b:76:c5:57:f0:f4:f5:be:4a:dc:ed:e2:f6:c4:ac:4c:4e:22:
c1:ac:54:aa:a1:2b:8c:e4:fd:ac:e4:f4:d7:3f:cd:3d:93:76:
32:f0:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:31 2026 by rpki-client