Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: f5Uh2PWLDMV7fD8RsfIvrLVXiE6ChWKq/o4jgvwQ5aQ=
Subject key identifier: E8:57:65:F6:02:40:A5:84:59:67:2E:80:AC:F9:45:0A:D4:4F:6F:3E
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019DCF75C5C3CCDC7E6EEDF48FE47D82C12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0F0B
Signing time: Mon 27 Apr 2026 15:01:35 +0000
Manifest this update: Mon 27 Apr 2026 15:01:35 +0000
Manifest next update: Tue 28 Apr 2026 15:01:35 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: EGLAkcaDmWOeANs0d7LAJ6kS1G5Xvq3sx+GXViyf47c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:c5:c3:cc:dc:7e:6e:ed:f4:8f:e4:7d:82:c1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Apr 27 15:01:35 2026 GMT
Not After : Apr 28 15:01:35 2026 GMT
Subject: CN=e85765f60240a58459672e80acf9450ad44f6f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:4e:e7:ff:72:26:58:d7:26:c6:b2:9a:fe:
ff:c0:a7:a8:26:ce:df:0d:ca:e9:14:80:51:01:d9:
31:fb:85:f4:ea:a9:ab:8e:89:2b:39:2f:76:65:6a:
a7:6e:9f:98:b9:aa:b6:92:67:73:89:b0:c2:79:19:
4b:07:29:8a:f6:2a:04:96:c1:01:1e:fb:b4:d6:7e:
f4:99:ef:fc:93:07:03:64:da:04:c5:7e:bf:74:5b:
43:74:35:90:ef:c2:2b:b6:45:ed:12:78:21:ef:75:
fc:d6:ca:88:9f:4b:0f:12:d5:7e:55:8e:3e:27:71:
34:62:78:6b:dc:f4:44:52:db:49:3f:1a:76:75:62:
88:a3:06:4d:72:df:9c:bd:70:90:63:1f:8b:9c:2c:
8c:2d:5d:fa:f9:6a:4b:2f:7b:57:4a:f4:58:79:7e:
cd:37:1b:37:b7:80:ae:60:09:32:61:ef:26:c5:c6:
a5:be:59:c4:12:6b:f0:d4:17:8b:5f:18:7f:ac:3e:
fc:f3:83:29:8e:a7:1a:73:30:28:5f:fc:3e:0d:c8:
05:d7:77:cb:74:e2:a3:f9:f7:b4:88:2a:d7:79:4e:
66:53:86:08:c5:da:a9:39:d0:e3:63:83:fe:6d:bb:
44:6f:d9:15:c5:74:a4:f6:83:46:1f:ce:66:90:da:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:65:F6:02:40:A5:84:59:67:2E:80:AC:F9:45:0A:D4:4F:6F:3E
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d9:4d:aa:31:bd:ed:45:21:61:36:0f:99:3c:bd:03:35:6b:
c8:90:a0:28:17:74:e6:18:7b:e6:59:7b:d8:f0:49:29:01:e0:
85:67:73:bf:38:a4:8e:92:1c:6d:53:76:a6:5c:4b:b4:44:13:
40:b2:4e:9e:1b:46:e6:33:c8:c2:da:56:94:5e:e3:03:b6:9a:
cc:20:bf:fa:cb:67:e5:83:7d:44:fe:aa:5b:a3:ed:e1:75:9e:
5d:14:4f:2c:aa:50:33:8c:0e:b6:57:53:09:79:1a:8e:1f:f2:
ff:3d:43:dd:a5:35:b2:54:dd:ef:1b:f8:d8:01:10:9c:64:75:
cb:db:fd:eb:47:42:76:9f:d4:e4:c8:7a:d3:75:95:0c:3a:41:
65:82:af:60:4c:63:f6:14:d5:57:e1:ff:74:6a:8b:81:1f:72:
02:de:74:dd:09:5e:fb:85:2c:e1:f0:bb:19:7a:30:a6:f7:7b:
eb:5c:4d:de:4e:68:2d:8d:ec:ad:f7:65:fd:32:65:d4:d5:11:
98:c8:f3:de:1c:61:30:98:32:b5:6a:f3:fa:72:37:4d:c4:99:
8c:84:f9:d4:f1:4d:1c:e6:b5:86:07:cc:ae:74:e9:8b:2b:de:
06:31:3d:d3:88:4b:0d:d3:82:7c:99:97:31:5b:40:af:83:4f:
14:5a:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:57 2026 by rpki-client