Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: Oue+nV8xUvbJ9+PPHkIGyrYbl+7lYNnADEQUcUnYPg0=
Subject key identifier: A8:11:A0:39:B3:8B:72:3B:6B:8B:CF:24:9F:2C:D5:99:2C:6E:2E:A8
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019A21E4A69678D069650BF10F6384694BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0D23
Signing time: Sun 26 Oct 2025 19:00:24 +0000
Manifest this update: Sun 26 Oct 2025 19:00:24 +0000
Manifest next update: Mon 27 Oct 2025 19:00:24 +0000
Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: 2iOzqyXeAatCqCESkhQfmfpvSJvdoqrZ871EUUlPf3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:a6:96:78:d0:69:65:0b:f1:0f:63:84:69:4b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Oct 26 19:00:24 2025 GMT
Not After : Oct 27 19:00:24 2025 GMT
Subject: CN=a811a039b38b723b6b8bcf249f2cd5992c6e2ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:fd:9a:55:a5:48:3c:ce:70:84:ea:e7:a4:
ca:23:fd:ff:d7:cc:19:ff:55:45:a3:12:57:24:41:
70:fa:63:fe:45:c8:e4:e8:42:3a:27:1e:57:6c:4a:
5e:94:dd:d0:4e:4f:6d:2f:18:68:a3:ca:1b:bb:0a:
83:f5:7f:91:4d:f0:b2:ac:2b:31:02:64:6d:e3:f2:
ac:7a:82:c8:64:4a:de:29:bb:0c:fd:44:2e:df:b6:
37:6d:3f:ea:67:81:09:03:f3:24:dc:fb:f8:15:32:
62:9a:fc:8e:01:2e:73:d2:cb:f3:ab:eb:5a:af:d4:
ec:17:ac:41:85:7f:50:d7:ea:d8:72:09:e7:32:49:
2b:3f:37:2c:d2:1d:f8:84:67:86:bf:86:1a:62:cb:
81:cc:11:40:1d:e9:19:bc:46:06:76:62:89:42:08:
d4:f2:81:cf:df:ad:93:16:8d:ae:dd:8f:79:b8:ab:
5f:5f:93:87:5a:49:71:23:ec:de:81:83:f3:ca:84:
ff:61:2a:25:95:b6:d4:6c:b2:d7:63:29:ce:e2:d0:
a2:5e:74:b4:48:82:a0:91:9e:3b:65:26:09:fc:e5:
54:2e:63:da:9a:9f:f0:88:d3:be:e9:41:6f:99:f9:
c4:cb:29:04:bb:57:5a:a9:8d:83:3e:30:8b:d0:9d:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:A0:39:B3:8B:72:3B:6B:8B:CF:24:9F:2C:D5:99:2C:6E:2E:A8
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:18:fd:d6:42:a3:59:ef:ae:36:78:26:84:e3:b0:15:21:f8:
81:7b:34:cf:88:5f:15:0e:dd:9b:e5:9d:53:1c:bc:90:60:f4:
a1:7f:93:9f:b2:e2:c9:a5:32:53:df:ab:1c:c4:50:a4:70:64:
35:17:29:6a:25:fe:74:5b:83:da:50:56:91:1a:dc:7e:14:53:
b5:d2:e5:3d:c6:cf:82:e5:9d:67:df:9b:20:ed:1d:c3:49:5a:
0f:2f:5c:66:ea:8e:38:0f:31:78:30:68:d2:06:9b:e6:07:95:
f5:ce:37:14:34:95:f7:85:ab:dd:75:82:f3:69:b8:03:da:8d:
f0:69:c5:01:4a:32:a9:9a:ee:33:3c:a4:2a:6e:94:cc:99:3b:
09:0c:31:d3:b2:8a:06:e6:75:21:d2:26:78:27:88:b8:c4:2d:
ae:6b:8e:59:16:bd:5c:ff:a8:04:2d:9c:c2:dc:80:1d:d6:82:
b6:fe:63:a4:3e:18:a1:80:5a:f8:30:05:5c:ed:a3:18:eb:97:
59:32:fc:ef:10:d9:2d:99:63:f6:cb:62:13:a5:03:17:33:63:
2f:a6:bf:3f:47:77:df:53:50:bc:a2:59:cd:3b:8c:7f:ae:26:
66:b4:45:a8:3b:65:71:49:7a:67:35:83:da:85:e3:cb:1e:ca:
0f:6a:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:34 2025 by rpki-client