Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: IJ8iRJRYg3M4VFgFGKmT11+FxxTSm9XM2r8dSVSxP+A=
Subject key identifier: F8:77:1C:AC:1D:19:93:28:F6:91:D7:A3:6A:15:7E:20:7C:CF:02:65
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019D2B4E3C6AA8BC20B281000F0A614360C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0EB6
Signing time: Thu 26 Mar 2026 18:00:40 +0000
Manifest this update: Thu 26 Mar 2026 18:00:40 +0000
Manifest next update: Fri 27 Mar 2026 18:00:40 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: JrasFbmirIKYTZrN7Y6U2OSBcKRtrlIF0Q9ZMcEJ2jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:3c:6a:a8:bc:20:b2:81:00:0f:0a:61:43:60:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Mar 26 18:00:40 2026 GMT
Not After : Mar 27 18:00:40 2026 GMT
Subject: CN=f8771cac1d199328f691d7a36a157e207ccf0265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:ff:74:dc:b8:8f:8e:8c:4c:57:ee:fd:af:
4b:c6:47:e3:49:76:0e:c7:8a:e5:95:44:40:b0:c9:
e5:9d:fb:da:19:d0:e3:99:be:ac:af:07:f1:07:e3:
a3:b7:08:ba:4e:0e:f4:14:c4:4d:05:2a:5a:ec:56:
b8:e2:f3:3e:c5:f0:60:91:ec:b1:f2:3a:89:70:fe:
7b:59:9f:01:a9:f8:24:a4:fb:f6:d4:ea:16:a6:9a:
10:33:85:5e:df:af:db:61:9d:bd:ee:9e:0e:3f:83:
21:da:4e:75:98:eb:e8:d2:3d:c3:35:17:81:a3:c8:
9c:b4:e5:87:19:ab:de:97:11:bc:8b:f6:83:c8:ff:
5b:b3:5f:6f:54:b1:3c:68:22:53:20:54:49:1c:b2:
09:c0:c4:6c:dc:7e:c0:57:b0:6b:41:96:54:9f:5c:
a1:43:8f:31:4b:63:e9:aa:29:3c:98:17:e7:f1:ca:
b2:f0:06:61:4f:c6:05:3b:17:52:23:5c:3d:fd:39:
1c:bc:0c:11:84:ec:de:07:26:aa:3b:bd:3d:e9:93:
98:5a:a6:13:04:0a:1c:64:f7:27:07:87:c8:80:ec:
23:13:a3:ca:61:05:fe:88:91:84:80:37:4b:8f:6c:
e6:71:92:28:57:ac:30:cb:76:bd:ea:0b:77:b5:e0:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:1C:AC:1D:19:93:28:F6:91:D7:A3:6A:15:7E:20:7C:CF:02:65
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3a:8a:a5:f3:fc:ab:fb:b5:fe:df:3d:02:aa:0a:f9:e4:a1:
1e:c5:aa:a9:f9:71:94:96:cf:c1:10:b9:fb:01:0e:30:aa:6f:
78:21:ce:b9:e0:71:d9:70:8c:74:34:be:e0:c5:65:c0:e1:5b:
99:78:f2:3e:64:66:51:9d:75:4a:3c:77:37:af:68:22:6b:f2:
97:95:dd:cb:39:67:c4:9a:44:66:8c:ad:3c:5f:fc:12:fc:26:
09:cf:3e:d2:b6:4f:26:8c:31:28:27:a3:9b:15:77:1b:91:5b:
f5:60:7e:73:11:01:2f:63:85:78:6c:66:24:55:fb:50:1e:d4:
5d:ea:07:20:94:d3:b7:45:33:b2:cf:73:f3:35:b7:27:72:c4:
a9:f0:d0:1d:93:9c:a5:f8:00:bf:18:09:b0:04:f0:ca:c4:7d:
d7:5f:cd:4e:06:c0:f9:e9:e3:00:72:54:1d:b9:b1:db:7a:07:
0d:de:b1:1a:61:3a:de:4a:eb:d9:f2:1c:3f:04:c4:69:81:3e:
e0:8b:4f:34:43:81:81:d6:81:cf:1a:e2:1f:53:54:de:1f:92:
d5:21:8c:65:d1:ed:c8:5e:5f:f7:21:87:b0:cd:d6:ff:81:14:
f5:9d:e3:00:de:08:92:cc:3e:35:63:75:1f:a3:94:f3:5d:79:
c3:ae:06:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTjxqqLwgsoEADwphQ2DGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5
MTZiMWEwHhcNMjYwMzI2MTgwMDQwWhcNMjYwMzI3MTgwMDQwWjAzMTEwLwYDVQQD
EyhmODc3MWNhYzFkMTk5MzI4ZjY5MWQ3YTM2YTE1N2UyMDdjY2YwMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvD/dNy4j46MTFfu/a9LxkfjSXYO
x4rllURAsMnlnfvaGdDjmb6srwfxB+Ojtwi6Tg70FMRNBSpa7Fa44vM+xfBgkeyx
8jqJcP57WZ8BqfgkpPv21OoWppoQM4Ve36/bYZ297p4OP4Mh2k51mOvo0j3DNReB
o8ictOWHGavelxG8i/aDyP9bs19vVLE8aCJTIFRJHLIJwMRs3H7AV7BrQZZUn1yh
Q48xS2Ppqik8mBfn8cqy8AZhT8YFOxdSI1w9/TkcvAwRhOzeByaqO7096ZOYWqYT
BAocZPcnB4fIgOwjE6PKYQX+iJGEgDdLj2zmcZIoV6wwy3a96gt3teDw+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh3HKwdGZMo9pHXo2oVfiB8zwJlMB8GA1UdIwQY
MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt
NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh
LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDqKpfP8
q/u1/t89AqoK+eShHsWqqflxlJbPwRC5+wEOMKpveCHOueBx2XCMdDS+4MVlwOFb
mXjyPmRmUZ11Sjx3N69oImvyl5XdyzlnxJpEZoytPF/8EvwmCc8+0rZPJowxKCej
mxV3G5Fb9WB+cxEBL2OFeGxmJFX7UB7UXeoHIJTTt0Uzss9z8zW3J3LEqfDQHZOc
pfgAvxgJsATwysR911/NTgbA+enjAHJUHbmx23oHDd6xGmE63krr2fIcPwTEaYE+
4ItPNEOBgdaBzxriH1NU3h+S1SGMZdHtyF5f9yGHsM3W/4EU9Z3jAN4Iksw+NWN1
H6OU8115w64GXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:58 2026 by rpki-client