Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: XBd2jdOh5FdbLWKaMfckPAtlonJzRCLpmcinQYzbs1g=
Subject key identifier: 17:82:7A:EA:76:D6:B1:DB:17:57:52:C5:55:9D:F8:95:36:F7:FA:41
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 01A183ACCE3F9A63B3FB1DCAF41714393E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 10F6
Signing time: Wed 28 Oct 2026 18:01:42 +0000
Manifest this update: Wed 28 Oct 2026 18:01:42 +0000
Manifest next update: Thu 29 Oct 2026 18:01:42 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: 6MIF+51gXzvCOSPXJhjad76DpwplDvJVyJsP7OS+zdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:ce:3f:9a:63:b3:fb:1d:ca:f4:17:14:39:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Oct 28 18:01:42 2026 GMT
Not After : Oct 29 18:01:42 2026 GMT
Subject: CN=17827aea76d6b1db175752c5559df89536f7fa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:a8:4e:2e:88:28:76:31:7d:80:9c:ad:b7:
1e:72:41:6d:e9:ed:56:73:01:65:fa:06:3a:d4:76:
4f:af:ed:59:87:28:da:39:6c:b9:41:63:b8:b9:4f:
a6:3a:a3:5a:b1:12:a7:7b:b2:75:79:8a:28:a5:c5:
4e:95:0f:f6:d8:92:61:e4:b1:4c:3e:93:2a:cd:c1:
38:5b:2b:a7:fa:d0:7f:96:3a:58:5d:45:ed:f0:0e:
70:fc:f0:73:0a:98:44:2d:1c:5a:49:82:19:cc:1e:
a1:90:69:cf:9a:9a:43:09:1d:18:8c:4f:06:f6:09:
b0:b5:a1:f9:f3:e2:5a:35:8e:b2:ef:ef:5b:d7:3f:
4e:63:09:02:14:d9:ed:1e:f5:f7:36:d0:1d:32:b5:
65:2b:41:a8:42:b8:d2:f6:b0:8c:2c:07:11:e2:9c:
7c:14:c0:87:d0:c2:7a:ab:a6:3f:e8:b8:5a:c2:bc:
e4:94:45:d9:3f:8e:b1:01:b1:e9:e1:26:55:36:36:
93:27:f8:e3:7f:25:49:a4:2b:ff:67:27:40:e8:64:
1e:4c:b1:29:2c:40:7d:98:03:7a:db:b9:9b:89:99:
9b:75:aa:fb:d2:da:df:2a:83:e6:4b:3e:95:e9:16:
f0:bf:e6:10:04:2e:47:a2:24:f9:68:f5:74:b8:ce:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:7A:EA:76:D6:B1:DB:17:57:52:C5:55:9D:F8:95:36:F7:FA:41
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ec:2f:76:a1:ff:a8:7e:7c:35:6e:66:23:bf:7c:22:26:36:
6b:8d:b4:22:ce:81:f8:e8:4b:23:2b:45:3e:cd:9e:7d:9c:58:
54:7d:84:37:bc:ce:1a:93:f4:99:ae:66:c2:65:35:ac:6a:71:
e4:df:2e:96:c2:17:79:80:c7:20:35:e6:ba:cf:38:f1:29:1c:
61:6c:38:8b:6d:58:b6:b9:f7:b0:57:80:59:25:ce:b2:37:41:
d9:96:58:6d:d4:7b:5b:54:39:5a:42:da:fa:ef:25:7d:48:d0:
57:59:e4:c5:32:a4:ea:a5:c5:66:cb:50:8f:77:fc:4a:c3:6f:
79:e2:c6:39:ac:4a:1f:da:65:fd:af:dd:b5:0f:da:47:e5:39:
99:d4:45:42:79:5c:f7:72:9b:df:81:2c:a8:69:30:ef:a8:29:
04:08:bd:2b:40:78:9d:86:a7:0e:2c:2a:2e:4a:8c:7d:08:c2:
fc:e0:19:32:3f:59:5e:aa:3f:4f:bf:f7:9e:5e:1e:f7:3d:60:
99:78:25:1f:1e:c7:07:74:b5:73:3b:6d:b2:2b:f7:9f:7a:d6:
66:c6:cd:a2:8d:bd:d2:3a:07:9e:cc:55:d2:9c:5d:98:0d:3f:
b5:3d:8a:1e:95:e5:f8:3a:2f:30:46:b1:cf:e0:db:09:71:a2:
6b:1f:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:44 2026 by rpki-client