Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: PHxu4fd/KlFHuctJGWxADVq1vBMcdg722aDcebo/iOc=
Subject key identifier: 0C:EC:54:99:00:58:58:7C:61:AC:50:4C:4E:D1:58:C5:A5:9A:0B:54
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019EB921D70EB0DCED2F9702B579166FD6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0F84
Signing time: Fri 12 Jun 2026 00:01:02 +0000
Manifest this update: Fri 12 Jun 2026 00:01:02 +0000
Manifest next update: Sat 13 Jun 2026 00:01:02 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: y/7y/gsLzo9E10FxGuER4Q9WlyZRZGo9TR/oNrlc2iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:d7:0e:b0:dc:ed:2f:97:02:b5:79:16:6f:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Jun 12 00:01:02 2026 GMT
Not After : Jun 13 00:01:02 2026 GMT
Subject: CN=0cec54990058587c61ac504c4ed158c5a59a0b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:ef:8e:9a:76:32:e2:2f:22:ac:b8:0e:4d:
cf:e9:2c:ab:40:e9:31:50:15:c3:1d:1d:e7:5a:c0:
2e:a1:0b:ba:40:a7:eb:ee:9a:d5:8b:18:82:61:60:
4c:5a:bd:48:e6:28:ea:ef:fe:1d:c2:88:72:42:17:
9d:d2:da:45:c9:cf:e1:15:61:02:7b:b7:2f:33:4d:
33:77:f9:84:a6:4e:bd:22:c3:63:7a:fd:7d:c3:3f:
4b:9d:c0:7c:a1:35:77:96:28:ca:e6:09:5e:0e:7b:
ce:2b:2c:12:ca:d1:c2:8a:6b:0f:66:ae:06:66:92:
7c:c6:be:6b:ef:27:e6:2a:c9:e0:0a:dc:19:0d:1e:
41:42:c8:fd:c8:bb:23:25:93:ea:ed:58:28:9f:f7:
91:e9:5c:fa:aa:57:14:d5:c9:02:11:df:5c:56:eb:
6f:b0:b9:d7:89:bf:6a:2a:a1:e3:27:ac:2f:b7:af:
ec:a3:00:bd:c1:a5:36:2a:7d:ff:38:16:d4:35:d1:
c8:6b:9c:e8:b4:c8:be:47:dc:e6:e9:3c:43:11:2c:
75:af:a9:d3:1f:67:39:a5:ee:4b:08:e8:65:e7:93:
86:f5:e7:ed:3f:71:f8:70:98:da:97:69:de:5f:6f:
e7:69:84:1b:fa:06:d1:80:b1:eb:d0:08:15:c5:d5:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:54:99:00:58:58:7C:61:AC:50:4C:4E:D1:58:C5:A5:9A:0B:54
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:4f:56:30:45:e2:76:c8:ef:7b:95:cd:dd:85:ed:c3:60:
91:c1:88:16:a8:2e:d4:1e:d2:b3:ab:74:11:70:58:5d:05:9d:
bc:6d:c7:4b:22:85:33:1b:43:06:36:ae:e5:a3:65:93:85:a4:
01:8c:ca:19:76:c3:b9:e3:58:5e:4e:0b:5a:f7:3d:d0:9b:c8:
ed:47:38:55:68:a7:6a:25:67:13:70:ce:15:86:85:e5:6c:bc:
1d:d6:42:0d:c6:79:40:f7:4e:f1:68:41:73:fd:92:42:09:be:
d2:e8:48:95:c8:0d:85:6e:b3:90:32:27:eb:12:be:1b:1c:9f:
ad:a4:86:72:57:a0:b1:a7:7a:f1:bb:08:42:49:7e:9f:f8:d3:
2a:96:fa:76:03:62:15:2a:6f:1e:a3:34:00:26:f9:6e:75:0a:
53:e0:dd:8f:dd:8e:36:5f:3c:73:e8:c7:64:2b:16:5e:00:fe:
2d:5d:68:f4:8f:29:4d:c9:5c:97:59:57:6a:d9:ed:bc:0b:90:
2e:5a:4b:6a:69:b6:0d:ca:36:f9:fa:93:d3:65:41:96:0d:05:
46:45:43:3f:7a:ea:89:16:84:e4:21:20:04:4b:d6:61:a2:ba:
d5:f6:4d:a4:d8:9e:ab:94:08:bf:b8:ab:92:76:6d:76:a9:d3:
10:07:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:43 2026 by rpki-client