Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: AEwk5LyRwAWCzyL8FgPagkZSJ4UlYZahHqIWtIsiyzA=
Subject key identifier: 78:A7:E9:08:38:16:C5:EC:F4:96:DC:DA:79:CD:55:04:6E:84:6A:B5
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 01A002144EF57A61878FDE9FD95B69A67CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1993
Signing time: Fri 14 Aug 2026 21:01:20 +0000
Manifest this update: Fri 14 Aug 2026 21:01:20 +0000
Manifest next update: Sat 15 Aug 2026 21:01:20 +0000
Files and hashes: 1: GqI-mzxc1fhTm5OyOP_m5TCCnVA.roa (hash: U8EEHo9hb/0j3nnEWBKaK1c26NGcKjSMcfvdjuvCGRQ=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: E8R+r03KwwOn1crshceJUMfMOnQy7q/D/PG5KKNcM0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:4e:f5:7a:61:87:8f:de:9f:d9:5b:69:a6:7c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Aug 14 21:01:20 2026 GMT
Not After : Aug 15 21:01:20 2026 GMT
Subject: CN=78a7e9083816c5ecf496dcda79cd55046e846ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:e3:97:91:d5:9f:17:4b:54:ab:48:48:d1:
a3:ab:a9:aa:32:7e:66:22:5b:3b:78:6a:ab:3a:c3:
2f:62:4f:a2:06:a8:bb:19:3f:48:46:bb:ee:7b:4b:
67:f9:9d:b8:83:96:7b:be:92:fc:1e:d4:2f:df:f2:
16:19:98:16:aa:91:7f:af:da:60:8a:81:ba:1a:d3:
45:0c:b6:ab:30:50:fd:e5:31:5e:95:9c:ed:fd:9a:
96:6d:3b:f5:3d:d9:7a:d3:70:3d:bf:74:bb:59:05:
ec:2a:4e:ae:d6:7c:72:28:a3:30:5a:de:8c:23:a3:
55:88:be:48:1b:44:d5:b8:2c:20:dd:35:4e:46:bd:
27:1b:5d:82:13:b4:5a:16:83:af:55:df:02:25:70:
7e:15:fb:f0:b4:57:14:5a:d1:79:68:79:49:d2:51:
44:ad:ee:60:d0:67:e6:53:37:8a:89:9c:c1:28:17:
9c:b3:ce:13:85:8b:0b:ec:a0:77:0d:ae:40:83:ac:
89:2a:ea:02:29:88:e7:84:de:ac:88:0f:3f:3f:ba:
f1:37:a1:d0:16:46:41:98:fd:6e:b4:55:b8:31:68:
2e:8a:19:0a:dc:5a:52:ee:f4:f6:d7:89:08:c4:85:
6a:6e:c1:33:f9:c1:8a:d3:32:04:f7:19:5d:6b:73:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:E9:08:38:16:C5:EC:F4:96:DC:DA:79:CD:55:04:6E:84:6A:B5
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c1:d2:48:76:fb:58:02:83:ed:10:f3:b4:43:27:ca:d7:40:
a3:07:1f:af:fb:d5:56:19:47:64:13:e2:91:26:95:77:6d:0f:
90:b3:a3:d0:c3:e2:00:6d:b6:62:c8:39:81:01:65:89:61:be:
c9:92:f3:b3:f4:af:cf:50:dd:d0:5b:d5:29:61:09:eb:36:56:
61:48:88:ea:c0:a5:1f:86:8b:d6:5c:8e:ee:30:84:76:f5:c7:
3c:f4:fc:25:6e:62:ba:5f:04:1e:0f:f1:0e:59:cf:25:42:4a:
75:83:b5:94:55:f0:e4:cc:65:10:42:00:13:39:34:ad:20:44:
cf:51:46:03:a4:1b:a8:84:4b:9e:49:67:23:77:16:58:ba:c9:
80:13:d6:14:eb:52:9d:9c:88:6f:4c:3c:3d:c9:19:f1:9f:66:
0e:0f:25:e7:54:12:e5:c0:42:18:71:c9:15:1c:49:6a:54:6e:
12:d9:b7:52:d5:75:34:80:60:7d:1c:8e:bf:7e:2b:80:38:ee:
6c:01:9f:43:10:04:a5:9a:eb:b1:32:8d:9d:05:1f:df:44:e3:
18:8d:e3:fd:3f:d4:61:51:63:f9:b9:05:02:cd:59:7c:1f:93:
16:9b:e9:7a:d4:8c:d0:82:34:ce:96:1c:16:68:ed:83:b9:c4:
1d:63:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:19 2026 by rpki-client