Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: PGWraqmhAZzI1uD7UTacssLsugzpL88ZPChOFtnDCI0=
Subject key identifier: 2F:CE:55:16:2A:8F:02:98:2A:9F:BE:4C:76:A4:3C:4C:6B:48:A1:E6
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 01A102489716C70ADABA56B763966C8519D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 10B3
Signing time: Sat 03 Oct 2026 15:01:13 +0000
Manifest this update: Sat 03 Oct 2026 15:01:13 +0000
Manifest next update: Sun 04 Oct 2026 15:01:13 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: CY0+Zx9pLKcpl2vuylw3kXGw08rh3HnkVeBiWrzWHrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:97:16:c7:0a:da:ba:56:b7:63:96:6c:85:19:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Oct 3 15:01:13 2026 GMT
Not After : Oct 4 15:01:13 2026 GMT
Subject: CN=2fce55162a8f02982a9fbe4c76a43c4c6b48a1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:20:bb:6c:42:64:a2:0b:71:83:41:44:1e:
6e:a7:68:83:90:d2:6e:c1:18:58:95:60:ab:78:58:
89:fb:f7:e7:64:ce:07:4b:a7:a0:7e:ab:6a:9c:49:
c7:2f:b8:ba:7b:93:68:6e:c5:04:0a:2f:75:3e:68:
3a:ef:6d:e1:20:18:12:26:8f:81:11:91:2f:81:5e:
96:64:37:d6:44:ae:df:ae:b0:2f:42:ea:72:08:d2:
96:8e:ee:a1:e8:d9:5e:ca:8b:1e:e0:5a:cb:d9:77:
bb:df:97:dd:20:7a:32:0c:05:d8:7d:c1:58:2a:e9:
36:5a:11:fd:8a:6e:20:95:71:0b:98:a3:a0:bf:64:
30:b7:89:7d:e1:7e:ea:bc:77:5d:36:33:47:19:17:
b4:04:f3:30:84:b1:b3:22:65:bd:31:fd:37:d3:06:
47:2c:7b:d2:4a:20:55:76:20:13:f7:79:f5:4f:33:
f0:69:02:23:38:f4:ea:e3:c6:d6:d2:b3:8e:2f:f9:
fd:2e:88:28:4c:31:57:28:45:74:dd:cf:6b:29:26:
1a:e8:cc:6f:f3:85:d9:19:47:98:1f:f6:ee:13:bf:
06:19:ef:6f:f8:15:73:39:bd:63:17:0e:d4:5c:70:
82:44:40:75:df:2f:d6:2e:a2:eb:ba:d8:78:32:39:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:55:16:2A:8F:02:98:2A:9F:BE:4C:76:A4:3C:4C:6B:48:A1:E6
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:7e:e1:56:13:fb:ed:85:33:0a:77:d7:db:fe:6e:82:b5:
63:e1:4c:aa:4f:b6:b7:cc:be:44:54:62:87:ce:14:66:2e:5f:
de:ab:31:cb:76:a7:fb:10:5c:38:a8:55:47:dd:cf:02:bd:23:
ea:0c:f6:a5:41:d9:1c:08:93:a3:dd:aa:d1:7a:13:e6:f0:69:
e1:01:ac:f7:73:ef:6f:bb:97:3d:f6:93:7b:d2:e8:06:57:d1:
fe:03:2a:ca:07:d2:c1:19:95:6f:68:55:85:23:f8:12:00:65:
02:37:be:6d:cf:67:a2:81:dc:d8:af:ce:ea:22:ec:05:90:1c:
22:56:b8:95:17:17:00:79:d5:5d:b4:fa:2b:ab:bc:7c:18:8e:
b9:5f:c4:ac:c5:61:10:34:ef:ca:f2:5d:c3:70:1b:49:59:15:
79:7f:7d:70:a9:a6:74:67:6f:a6:cf:f8:e5:d0:92:08:a0:b0:
a6:7c:de:e6:12:bc:82:4a:4a:50:82:bb:d8:95:ae:94:1b:82:
59:67:1f:e1:98:02:45:02:93:cc:e2:0f:7e:20:1a:1f:09:25:
f0:1c:d7:6c:62:1d:03:0b:ab:61:f8:e0:14:37:6e:90:26:54:
05:2c:e9:bf:bd:be:43:22:48:cc:b5:94:63:f6:66:3b:cc:72:
ce:7e:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:57 2026 by rpki-client