Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: PiEfLT0lANDx5HTMDCk9lECKSrVWCPx4TRQkbzMOVBc=
Subject key identifier: 13:22:7D:17:7C:88:96:F6:1D:00:5C:89:76:98:25:6C:E0:73:86:F6
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019FA2CEE4B09A0AF6D4B447CEAC2BFF3CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0FFD
Signing time: Mon 27 Jul 2026 09:01:35 +0000
Manifest this update: Mon 27 Jul 2026 09:01:35 +0000
Manifest next update: Tue 28 Jul 2026 09:01:35 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: KcpSa9h3gDzv2uBthLQuHyfx1PpBWKZDFhwC0B6pZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:e4:b0:9a:0a:f6:d4:b4:47:ce:ac:2b:ff:3c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Jul 27 09:01:35 2026 GMT
Not After : Jul 28 09:01:35 2026 GMT
Subject: CN=13227d177c8896f61d005c897698256ce07386f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:66:85:a6:a8:9e:51:22:bc:85:cf:7d:f0:
01:fc:b6:dc:ef:15:7a:7a:93:5c:5d:e9:e8:14:f8:
52:6e:ca:fa:05:ef:7d:dc:5a:81:40:d2:59:55:b7:
44:2f:b3:57:db:a1:ae:27:a2:a8:30:48:9f:34:14:
f8:d7:cd:2a:1b:ab:67:8f:eb:dd:86:28:92:f5:ab:
40:e3:17:48:f2:82:f4:09:10:e5:f2:b8:cf:39:89:
2d:31:1b:4b:f1:3f:d3:4a:2f:39:5a:7e:2a:66:a8:
ce:3d:b1:f9:7a:da:30:e3:6b:4e:fb:9b:fe:7b:dc:
18:07:69:f2:a0:69:fa:e1:ae:f0:db:4f:94:25:f7:
fd:21:fe:7d:dd:7c:77:fc:fd:d1:a9:ee:56:a5:f7:
cf:f8:c3:64:7d:c4:66:cf:4e:fb:6d:6a:d7:fb:9a:
2f:16:bf:37:b3:d1:3d:b9:90:68:6b:a8:a6:b7:63:
c8:8c:00:9e:ab:c3:c6:8d:64:4b:56:05:c7:c5:a1:
aa:71:4f:7b:eb:0c:ee:fc:79:d8:60:aa:a1:03:be:
73:49:3a:6d:57:7a:53:d9:8e:b6:a7:16:a2:13:fb:
0c:7a:29:51:ad:02:6c:78:3d:93:35:28:85:3d:b9:
18:b3:be:91:7a:d4:6c:34:e1:a4:a9:eb:66:6a:98:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:22:7D:17:7C:88:96:F6:1D:00:5C:89:76:98:25:6C:E0:73:86:F6
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:66:f7:8e:e8:20:68:66:13:ef:fd:01:4a:8f:1c:9c:cc:7f:
b8:0b:3d:13:2b:d8:4a:40:9f:ec:cc:5b:a3:37:41:e5:51:b0:
21:20:18:94:03:ba:40:8a:66:b4:44:08:23:dd:73:f1:f2:73:
a7:9c:df:8b:2a:68:2b:81:e9:62:2c:a6:41:12:50:21:47:c6:
ce:e6:27:04:7f:8a:ca:dc:e2:6d:27:4c:1a:48:69:e5:56:ed:
89:84:8e:45:61:94:97:85:93:2f:11:25:2a:dc:6b:6e:ab:62:
9c:37:da:d7:f9:b7:3e:e9:0f:d9:48:e0:a1:8a:81:e4:4a:be:
a6:40:7c:80:b1:e3:ba:96:df:67:7d:60:23:a3:8e:2f:fa:8a:
4b:69:62:f7:36:a1:12:d2:fb:29:16:bd:f6:35:00:ed:9c:02:
47:43:00:ae:62:97:c8:66:7d:b1:cb:95:b0:2f:c8:77:74:89:
6d:cc:9e:17:53:5c:9d:4f:23:0d:87:c2:f8:c9:bc:70:77:47:
de:b9:af:f0:37:e8:f0:ac:05:b7:a1:50:cf:91:2f:e2:f5:35:
24:de:60:20:9b:44:85:18:ea:8b:d3:60:e4:c7:f0:6a:a2:b7:
24:be:35:93:e0:bd:30:ab:b1:bf:dd:1e:0b:36:30:b1:31:0f:
b6:81:29:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izuSwmgr21LRHzqwr/zywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5
MTZiMWEwHhcNMjYwNzI3MDkwMTM1WhcNMjYwNzI4MDkwMTM1WjAzMTEwLwYDVQQD
EygxMzIyN2QxNzdjODg5NmY2MWQwMDVjODk3Njk4MjU2Y2UwNzM4NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7opmhaaonlEivIXPffAB/Lbc7xV6
epNcXenoFPhSbsr6Be993FqBQNJZVbdEL7NX26GuJ6KoMEifNBT4180qG6tnj+vd
hiiS9atA4xdI8oL0CRDl8rjPOYktMRtL8T/TSi85Wn4qZqjOPbH5etow42tO+5v+
e9wYB2nyoGn64a7w20+UJff9If593Xx3/P3Rqe5WpffP+MNkfcRmz077bWrX+5ov
Fr83s9E9uZBoa6imt2PIjACeq8PGjWRLVgXHxaGqcU976wzu/HnYYKqhA75zSTpt
V3pT2Y62pxaiE/sMeilRrQJseD2TNSiFPbkYs76RetRsNOGkqetmapgU3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMifRd8iJb2HQBciXaYJWzgc4b2MB8GA1UdIwQY
MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt
NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh
LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWb3jugg
aGYT7/0BSo8cnMx/uAs9EyvYSkCf7MxbozdB5VGwISAYlAO6QIpmtEQII91z8fJz
p5zfiypoK4HpYiymQRJQIUfGzuYnBH+KytzibSdMGkhp5VbtiYSORWGUl4WTLxEl
KtxrbqtinDfa1/m3PukP2UjgoYqB5Eq+pkB8gLHjupbfZ31gI6OOL/qKS2li9zah
EtL7KRa99jUA7ZwCR0MArmKXyGZ9scuVsC/Id3SJbcyeF1NcnU8jDYfC+Mm8cHdH
3rmv8Dfo8KwFt6FQz5Ev4vU1JN5gIJtEhRjqi9Ng5MfwaqK3JL41k+C9MKuxv90e
CzYwsTEPtoEpzw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:53 2026 by rpki-client