Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: pxOo7V2TQga7Dc6bri3/z0WyTk7rNFrOpF0KaVCm1N0=
Subject key identifier: CD:5C:73:33:8F:64:7D:1E:A1:6C:94:22:9B:2A:63:0F:12:56:67:48
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019F935BD5BF6960F009F7070BB4B4B9567A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0FF5
Signing time: Fri 24 Jul 2026 09:01:36 +0000
Manifest this update: Fri 24 Jul 2026 09:01:36 +0000
Manifest next update: Sat 25 Jul 2026 09:01:36 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: 2jubAkH5s7UmmKn0XGGW0LwUS4i34+/WYyzCd67Ns4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:d5:bf:69:60:f0:09:f7:07:0b:b4:b4:b9:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Jul 24 09:01:36 2026 GMT
Not After : Jul 25 09:01:36 2026 GMT
Subject: CN=cd5c73338f647d1ea16c94229b2a630f12566748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:47:5e:81:82:32:4e:c0:3b:b2:57:2c:3e:
7b:ae:d6:87:32:31:96:65:90:9e:95:5d:b7:2c:83:
51:64:45:1f:cb:a6:0a:78:86:22:11:eb:06:fe:9e:
12:bd:a1:04:29:92:41:39:8f:a5:c0:a7:e4:56:d9:
ea:db:07:3e:02:14:39:2b:15:ba:43:ea:f3:27:23:
f7:b7:3e:74:c9:e5:90:47:cc:05:8e:19:a5:e6:14:
1d:d6:83:da:ae:0e:0d:86:be:cf:fd:ce:5f:a8:77:
c4:4f:41:03:2b:52:1c:55:5b:3f:a3:7a:f1:26:95:
20:9e:4e:9b:6c:14:59:c2:c9:51:2f:1d:04:9c:a2:
bd:70:ce:ce:fa:e2:1e:cc:ca:39:8f:15:bb:b9:39:
9e:1b:e8:21:5c:05:1b:af:79:f8:38:a3:f6:ad:67:
6a:c1:ad:07:c3:48:58:07:08:27:f9:33:e7:ee:5d:
2a:1b:8f:88:cb:7e:3c:38:1e:6d:87:e5:53:3f:d2:
4e:e9:bc:38:b7:01:d5:2b:b2:8b:47:e3:0c:c7:85:
ec:1b:74:56:c9:d4:0b:41:28:f3:ba:8e:11:71:37:
ab:97:fb:3a:b3:43:8e:c2:36:78:a1:f4:cf:50:de:
58:23:bd:81:ee:a5:6d:ec:fc:c4:c4:76:07:c4:6a:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:73:33:8F:64:7D:1E:A1:6C:94:22:9B:2A:63:0F:12:56:67:48
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4a:c6:dc:63:8e:99:b0:cc:c6:c7:54:6f:72:78:ef:55:e6:
1f:9c:2b:7a:67:c6:0c:45:bc:af:4c:ad:09:60:ec:88:fe:4b:
4d:93:64:73:e1:da:c8:8a:67:29:65:68:70:73:d0:84:aa:52:
e0:b7:23:3d:75:bd:d2:40:37:eb:01:4c:39:95:e3:23:05:b2:
ac:7d:3f:15:f8:e9:d0:03:10:77:c0:f5:8d:7f:31:86:24:0e:
0c:f1:48:8e:18:a7:5b:74:67:50:09:b1:3f:95:ed:0f:67:36:
9f:b8:eb:cc:a7:5a:48:ed:d1:66:b7:32:81:92:a9:1c:0a:b0:
da:23:82:7a:fc:9a:32:5c:0f:e4:be:91:ba:c4:37:b1:67:8d:
b4:96:a4:6a:3f:fc:86:d9:27:52:65:de:ee:8c:c8:3d:66:31:
51:d7:1d:5e:79:5a:4f:bf:b4:b0:e7:29:71:34:40:71:d5:c4:
ab:10:9a:65:46:28:ae:f0:32:da:08:9e:88:65:f3:98:90:12:
e6:52:c1:59:00:f2:91:2a:2f:62:51:fc:4c:1e:43:e5:11:ea:
ed:9a:62:92:81:a7:3a:7f:a6:3c:85:8c:ec:a0:0f:82:aa:ef:
b6:92:6a:28:ff:fa:5d:9d:8f:3d:3d:e9:ad:5c:64:8d:c9:30:
13:75:55:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:10 2026 by rpki-client