Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: mgaSX2uRCOqnxULz8mfB70mPi7W23N/FPa8HyyB8VRI=
Subject key identifier: 5B:68:ED:E1:3A:78:76:CE:99:78:23:07:CF:A9:E0:00:71:D1:65:0D
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 01A08C7B88DA21979CA12D1236F4B30719A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 1076
Signing time: Thu 10 Sep 2026 18:01:41 +0000
Manifest this update: Thu 10 Sep 2026 18:01:41 +0000
Manifest next update: Fri 11 Sep 2026 18:01:41 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: CvgF2HZIHjuByoHWo2X5aztVL1Ye4shdLsg/ydG0zvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:88:da:21:97:9c:a1:2d:12:36:f4:b3:07:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Sep 10 18:01:41 2026 GMT
Not After : Sep 11 18:01:41 2026 GMT
Subject: CN=5b68ede13a7876ce99782307cfa9e00071d1650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:e8:86:ed:53:9f:7d:b9:51:5f:bd:73:73:
b9:48:f3:9e:d8:c7:85:fb:7b:f3:e1:40:d6:a2:55:
e1:c1:de:c7:e5:aa:fe:bf:97:9b:3c:40:2e:cd:23:
3b:0c:95:56:18:eb:b1:17:61:b5:f2:82:72:e7:bb:
d6:59:99:4b:8a:e5:93:70:e9:5d:1f:1e:47:c2:23:
ed:0f:b1:c3:96:ce:8b:a4:2d:c9:14:8f:ab:de:fb:
da:01:65:be:a2:7c:8e:a2:3e:db:ba:2a:59:f8:89:
36:ec:cf:3a:c0:88:3a:0e:98:3e:22:9f:92:ef:b7:
a1:e9:64:6b:91:61:2e:51:dd:b7:9a:d9:13:2b:63:
d0:96:b7:4b:52:14:64:a9:f9:dc:91:b5:77:e9:c3:
d2:a7:2a:d9:1f:08:74:0d:66:ef:8a:4c:a0:3f:b2:
86:ec:44:82:c6:c5:93:0a:77:69:22:81:41:a0:a0:
04:0d:e7:44:43:f8:10:e4:e4:9f:88:be:29:53:8a:
be:86:4f:34:99:47:17:47:46:d4:d3:96:4b:07:96:
8e:97:3e:14:c1:5c:c4:37:f8:11:5b:ec:de:3e:0b:
67:b7:bd:0d:64:fc:f9:b0:05:d2:db:d9:f9:ef:35:
b7:8b:b7:10:aa:cc:7b:89:b8:ee:64:c8:83:18:80:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:68:ED:E1:3A:78:76:CE:99:78:23:07:CF:A9:E0:00:71:D1:65:0D
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:c4:9e:29:d1:cc:27:4f:93:68:2a:50:0c:69:b2:f4:ec:
04:24:eb:e9:89:47:bb:be:36:4f:51:0e:6f:25:ee:2d:89:30:
9f:80:d8:15:6f:a0:00:a5:d7:63:6a:2f:1e:f8:ea:69:09:0e:
3a:00:b2:59:b1:da:e3:04:23:52:5b:94:db:03:82:1b:d3:f1:
c6:37:8f:9c:c6:16:2a:87:63:99:30:2f:4d:94:51:b8:49:3f:
7b:fa:9a:d3:f7:a1:ca:1a:36:6a:35:6b:7c:23:f0:7c:37:4d:
6f:ac:1b:95:db:f7:e7:8d:2b:68:66:ed:e3:f7:2e:c1:e6:8a:
44:0a:95:0a:62:87:06:eb:e4:b3:92:99:56:7f:36:49:a3:73:
16:45:40:c9:17:fc:f5:6e:d8:ef:3a:85:6b:fa:f2:e7:30:6e:
49:ee:9c:d9:e1:be:ec:67:b6:27:97:f3:08:fd:d0:0f:68:5d:
ee:a0:4d:f8:43:02:d1:05:67:76:13:3f:d2:86:2a:12:ba:07:
e9:09:89:48:a2:bd:3c:4b:52:01:61:d3:2f:26:c5:bb:18:3b:
03:7f:f4:4c:7e:4f:9a:56:7a:58:ef:6f:66:12:4f:3a:f0:dd:
14:5a:85:36:48:b8:65:56:ad:ed:19:c6:73:b3:04:62:f3:04:
30:29:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:12:36 2026 by rpki-client