Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
File: MrMqZabMfuIwaf0rCTD3gY89Fnc.mft (raw, json)
Hash identifier: MF1wYMX8V7yrJwz4Lqo76hv6IjUsm54VECLM3qK/Myg=
Subject key identifier: 3A:BD:83:E3:00:19:C0:55:26:E2:6B:CE:2A:A6:36:C2:B6:09:D1:3E
Authority key identifier: 32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
Certificate issuer: /CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Certificate serial: 019FA2CE08C7900F27A7C8ABFCCB43B14AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:39 +0000
Manifest this update: Mon 27 Jul 2026 09:00:39 +0000
Manifest next update: Tue 28 Jul 2026 09:00:39 +0000
Files and hashes: 1: MrMqZabMfuIwaf0rCTD3gY89Fnc.crl (hash: Zl3pJEh6v5oAFNkNuArB1gdM01aKWqHV4Y+mZuCh0Ok=)
2: w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa (hash: b+TK2HXHDyzRDfPYR9/xdu7k+Y5KpsBW0vWTYp/Lw+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:08:c7:90:0f:27:a7:c8:ab:fc:cb:43:b1:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Validity
Not Before: Jul 27 09:00:39 2026 GMT
Not After : Jul 28 09:00:39 2026 GMT
Subject: CN=3abd83e30019c05526e26bce2aa636c2b609d13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:5c:2c:84:e7:ea:f1:a9:57:f7:cf:10:22:
13:f3:70:42:2b:f7:4d:cf:94:6b:27:ab:6f:f6:f9:
d2:4e:ef:7c:64:4e:4a:24:91:76:d2:9b:88:46:7d:
2a:6d:39:b6:e1:4e:64:78:c2:07:3a:2e:53:6d:65:
40:da:b6:47:fc:96:c3:04:b8:45:c9:84:a3:2f:c8:
81:1b:96:76:37:02:0b:88:bc:7d:e7:c7:11:f6:84:
b3:35:45:74:74:d0:62:2a:c7:b4:d8:92:39:56:38:
19:ba:4f:a1:1c:79:b2:5c:79:02:86:a3:9b:a0:e6:
d3:d5:c4:d8:bf:e8:ec:8f:cb:3d:e5:93:c8:db:4c:
95:dd:8c:07:ae:1b:39:4d:9d:70:6b:39:7d:e8:70:
8e:78:b6:61:46:ce:98:ed:c4:35:fe:b0:bf:db:2d:
3f:a9:b6:09:e6:c2:89:84:f6:0b:94:f2:d9:54:98:
0e:b3:9d:81:fb:00:1c:20:e5:36:3f:20:8c:16:11:
d6:40:5f:4a:26:44:58:46:d2:94:5c:54:08:a4:d3:
e3:13:8a:87:a6:ea:e5:d6:c0:f8:9c:ac:bb:03:99:
75:7a:01:24:56:c9:16:af:a3:15:94:4b:d0:93:50:
ac:ba:8a:e8:ed:51:71:ec:7b:ad:62:b3:a9:01:48:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:83:E3:00:19:C0:55:26:E2:6B:CE:2A:A6:36:C2:B6:09:D1:3E
X509v3 Authority Key Identifier:
keyid:32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:52:98:1b:48:8a:65:7f:a9:67:1d:f7:fd:4f:5a:a8:5d:
3f:0f:9d:95:45:99:a0:10:51:9b:b3:e1:37:0d:f1:bc:46:5e:
07:65:eb:61:65:bc:c9:7a:8e:ef:08:e3:0d:ad:b9:d1:26:42:
ee:ef:21:6a:fe:f2:84:9b:aa:79:e9:69:cb:a8:99:1d:ff:b4:
d5:72:2f:98:54:33:e0:0a:39:5e:56:0b:57:00:9a:58:1a:94:
04:ed:82:91:2c:a2:db:e7:61:6b:99:76:d0:15:f1:59:90:d7:
42:66:3d:dd:e9:bc:22:36:86:2c:e1:25:6e:7d:f7:04:7f:ac:
68:ad:d1:61:99:27:6e:ef:7f:9d:61:f1:33:35:9e:35:74:b0:
59:c9:79:72:80:22:37:3e:f9:7c:2b:cc:06:ad:75:27:71:41:
ce:ff:85:d0:76:73:d7:af:14:94:18:dc:87:e8:e7:00:6c:3e:
30:1f:8a:85:ca:be:ab:18:e9:06:bf:49:82:da:df:27:78:f3:
0d:ce:97:d0:e5:27:fd:e0:b5:a8:0c:3d:e9:ba:33:25:4c:36:
87:7d:95:15:82:1f:bc:84:65:60:40:d9:05:c8:1d:07:73:ce:
6a:ad:98:68:fc:e8:82:23:85:3a:48:33:30:ba:52:59:a7:47:
ee:a6:45:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izgjHkA8np8ir/MtDsUr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYjMyYTY1YTZjYzdlZTIzMDY5ZmQyYjA5MzBmNzgxOGYz
ZDE2NzcwHhcNMjYwNzI3MDkwMDM5WhcNMjYwNzI4MDkwMDM5WjAzMTEwLwYDVQQD
EygzYWJkODNlMzAwMTljMDU1MjZlMjZiY2UyYWE2MzZjMmI2MDlkMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36ZcLITn6vGpV/fPECIT83BCK/dN
z5RrJ6tv9vnSTu98ZE5KJJF20puIRn0qbTm24U5keMIHOi5TbWVA2rZH/JbDBLhF
yYSjL8iBG5Z2NwILiLx958cR9oSzNUV0dNBiKse02JI5VjgZuk+hHHmyXHkChqOb
oObT1cTYv+jsj8s95ZPI20yV3YwHrhs5TZ1wazl96HCOeLZhRs6Y7cQ1/rC/2y0/
qbYJ5sKJhPYLlPLZVJgOs52B+wAcIOU2PyCMFhHWQF9KJkRYRtKUXFQIpNPjE4qH
purl1sD4nKy7A5l1egEkVskWr6MVlEvQk1Csuoro7VFx7HutYrOpAUjk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq9g+MAGcBVJuJrziqmNsK2CdE+MB8GA1UdIwQY
MBaAFDKzKmWmzH7iMGn9Kwkw94GPPRZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXJNcVphYk1mdUl3YWYwckNURDNnWTg5Rm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9jN2RiZGYtMWUyYy00ZmJhLTg0MTEt
YzY3ZDcxM2NkYWJjLzEvTXJNcVphYk1mdUl3YWYwckNURDNnWTg5Rm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9jN2RiZGYtMWUyYy00ZmJhLTg0MTEtYzY3ZDcxM2NkYWJj
LzEvTXJNcVphYk1mdUl3YWYwckNURDNnWTg5Rm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ1SmBtI
imV/qWcd9/1PWqhdPw+dlUWZoBBRm7PhNw3xvEZeB2XrYWW8yXqO7wjjDa250SZC
7u8hav7yhJuqeelpy6iZHf+01XIvmFQz4Ao5XlYLVwCaWBqUBO2CkSyi2+dha5l2
0BXxWZDXQmY93em8IjaGLOElbn33BH+saK3RYZknbu9/nWHxMzWeNXSwWcl5coAi
Nz75fCvMBq11J3FBzv+F0HZz168UlBjch+jnAGw+MB+Khcq+qxjpBr9JgtrfJ3jz
Dc6X0OUn/eC1qAw96bozJUw2h32VFYIfvIRlYEDZBcgdB3POaq2YaPzogiOFOkgz
MLpSWadH7qZFew==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:52:21 2026 by rpki-client