Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
File: MrMqZabMfuIwaf0rCTD3gY89Fnc.mft (raw, json)
Hash identifier: I/bOwvGX8XPVHasc+bscECmRMvJcHFIcIvWsYYcbvWQ=
Subject key identifier: 23:11:29:10:C4:03:BF:C3:FC:95:8D:C1:5B:B1:7A:DC:75:8E:E1:9E
Authority key identifier: 32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
Certificate issuer: /CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Certificate serial: 01A08C7AEAA7613E947E3A146AAC261EB87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:00 +0000
Manifest this update: Thu 10 Sep 2026 18:01:00 +0000
Manifest next update: Fri 11 Sep 2026 18:01:00 +0000
Files and hashes: 1: MrMqZabMfuIwaf0rCTD3gY89Fnc.crl (hash: iHkmYl4A3SuZPcMU8xBwJHPIU30eNeryYWs8Oyondmo=)
2: w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa (hash: b+TK2HXHDyzRDfPYR9/xdu7k+Y5KpsBW0vWTYp/Lw+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:ea:a7:61:3e:94:7e:3a:14:6a:ac:26:1e:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Validity
Not Before: Sep 10 18:01:00 2026 GMT
Not After : Sep 11 18:01:00 2026 GMT
Subject: CN=23112910c403bfc3fc958dc15bb17adc758ee19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:92:1d:08:f3:7e:9d:eb:b2:84:d4:d3:ce:
71:33:6e:39:3b:4f:48:ef:bf:52:f0:9c:76:3b:27:
cd:e1:52:a7:e1:16:1d:7a:a4:c9:f3:f2:c1:95:f8:
51:a2:3b:c4:4e:aa:cb:58:6a:c5:be:0f:b1:40:ca:
0d:e8:94:21:d4:ce:d6:5c:06:3c:ff:1d:ca:ba:f8:
bd:7d:55:2f:1b:a6:62:d9:d8:ec:46:5e:ee:70:90:
56:b5:b6:37:6c:d3:ae:d3:3c:db:8b:bb:03:40:61:
9e:1c:20:8a:66:dd:d9:83:c9:05:7d:2e:c4:fb:c2:
ed:41:4a:15:a3:a3:b6:28:0d:89:d1:be:4c:e0:b7:
7e:65:0d:09:70:ec:6a:44:73:27:f1:14:a1:70:3d:
a8:9b:38:fb:3d:62:63:77:52:29:d7:43:b4:68:f8:
7e:49:8f:6e:60:17:b4:82:05:59:39:f1:32:f5:8a:
cc:4b:78:64:10:5c:4d:4c:08:42:fb:72:aa:14:8b:
e4:c1:2b:72:1f:42:86:3b:58:52:c7:91:9e:0a:f3:
77:fb:74:50:ec:ff:67:04:3a:2c:af:ff:20:e0:36:
3d:97:58:78:7d:25:bf:15:4e:05:f5:f1:98:9b:5d:
67:3d:2f:c2:53:20:b7:af:f5:d9:33:38:99:45:e9:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:29:10:C4:03:BF:C3:FC:95:8D:C1:5B:B1:7A:DC:75:8E:E1:9E
X509v3 Authority Key Identifier:
keyid:32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:ec:a7:7f:2b:9c:58:07:4e:43:71:38:6d:7f:cf:dd:2e:
0d:12:c5:31:7e:cf:c3:16:c6:bb:50:f2:8c:db:d2:a9:59:22:
26:2c:f8:5d:1e:95:89:43:f6:fa:da:01:e0:97:e2:55:01:d7:
f4:c1:18:9b:92:5f:63:03:8a:8b:ff:65:5a:da:d9:52:e5:b4:
8d:6c:9a:bd:44:4f:08:94:37:72:59:81:67:4c:ed:ac:0c:3d:
05:aa:b8:4b:58:87:91:26:d1:35:b0:31:bc:9a:fd:ca:4b:96:
0f:8f:a5:5d:79:8d:5a:53:99:7c:86:91:7e:8e:df:94:a9:df:
86:c1:1b:22:6f:c4:8c:ac:fc:0f:a8:ae:5e:b2:85:a3:0f:d2:
f2:71:25:40:8b:f7:c9:ce:39:ed:24:bd:30:46:91:36:f5:0e:
ea:f2:68:fe:50:41:83:10:4f:b9:57:da:6e:70:ec:55:44:7c:
fd:d4:10:89:bb:33:8a:90:2a:f8:7b:86:b2:26:ed:25:be:d8:
a2:0f:7a:ba:e7:3e:66:ab:52:05:43:2f:09:45:ff:2a:b1:0d:
ff:be:de:75:c1:61:90:e0:2f:81:2f:c4:9e:df:b5:df:17:f4:
4f:83:9b:c8:45:64:7a:47:02:ca:21:e3:82:d3:44:25:ac:09:
a9:21:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:01 2026 by rpki-client