Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: DoD8hHcTrch2rcMI+CF8IuLSauug2UEmN3Ne3AGOywA=
Subject key identifier: 9F:74:FD:DA:17:14:77:B6:51:EE:B2:26:87:8D:28:E2:13:D9:CE:CC
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 019D2A04D526A4D35F8BE9F51EC6D591121D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 12:00:52 +0000
Manifest this update: Thu 26 Mar 2026 12:00:52 +0000
Manifest next update: Fri 27 Mar 2026 12:00:52 +0000
Files and hashes: 1: GqI-mzxc1fhTm5OyOP_m5TCCnVA.roa (hash: U8EEHo9hb/0j3nnEWBKaK1c26NGcKjSMcfvdjuvCGRQ=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: YPMjWsUKDtHi2gfQ2JVZfmRXTRiHp0q+1BxrG4LhMek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d5:26:a4:d3:5f:8b:e9:f5:1e:c6:d5:91:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Mar 26 12:00:52 2026 GMT
Not After : Mar 27 12:00:52 2026 GMT
Subject: CN=9f74fdda171477b651eeb226878d28e213d9cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:9a:29:03:4e:ed:1c:4a:6d:eb:ec:f9:13:
32:68:95:f0:10:2f:7d:9d:90:03:05:df:4f:dd:f8:
44:0f:e4:e7:dc:35:6d:9a:6d:69:9f:f8:6f:12:c7:
98:ae:ea:d9:90:c4:1b:8b:d8:64:e2:f4:0a:ae:18:
d7:4d:ee:68:1c:9e:e2:1d:71:12:85:3b:c8:0e:66:
b4:2e:31:89:57:da:ad:c4:85:d0:a2:e0:d2:79:e8:
1f:98:68:96:c3:5a:6d:7a:15:8f:97:8b:7b:82:e1:
0f:9f:8f:d0:94:07:b5:eb:77:87:2e:50:ef:a1:24:
07:97:b0:0e:9e:f9:11:2e:fa:92:82:95:2a:86:05:
c5:a1:19:66:56:56:eb:ed:ad:d8:4a:5e:e3:02:fc:
3e:a8:fb:40:69:6f:c7:90:db:84:10:ca:24:3e:1b:
60:f6:83:da:ab:ff:2e:7d:a1:b5:63:d4:8a:e9:5e:
8c:87:ac:b7:84:92:01:b6:4c:ff:13:61:c6:56:8f:
f8:41:fc:9d:e4:ca:22:56:70:a3:2a:db:41:8a:9d:
ce:fe:df:2f:8b:54:c3:db:5a:3d:80:93:84:39:84:
5f:17:26:b7:1f:c8:40:45:4d:0c:f7:e3:f5:4b:16:
fd:16:30:cd:ac:5f:e0:bc:a6:7a:4a:45:f7:ff:f7:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:FD:DA:17:14:77:B6:51:EE:B2:26:87:8D:28:E2:13:D9:CE:CC
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9e:82:ff:ee:cd:b2:b7:5f:c5:90:b8:46:8d:34:58:d9:19:
4f:69:99:5b:f9:0f:cb:72:5a:95:aa:a8:2e:f9:1e:b2:c7:48:
3d:58:9b:f3:09:31:4f:f5:b6:5b:a5:d9:34:0e:78:df:2e:cd:
7c:b1:50:0d:72:84:99:9b:ac:c3:11:61:d2:32:77:ea:0a:63:
2f:29:52:33:7e:c9:a5:01:82:0a:a4:10:f8:be:fc:fb:46:df:
03:6a:dc:40:ae:fe:57:ca:8d:c5:02:a3:21:62:2f:c0:ad:26:
c1:04:7f:43:1f:3b:77:20:45:d7:26:26:66:c2:75:cd:d0:dd:
7f:bf:ad:0e:e9:bc:c2:31:2a:b6:a6:6f:c7:d7:3e:5f:14:b1:
62:f0:46:f9:cd:6a:e5:1d:8c:fa:4f:c9:2f:27:89:0b:1d:76:
f0:9f:9f:08:02:54:25:a5:5a:5c:66:85:cb:56:af:f8:27:49:
0c:4e:b3:df:d1:bf:f5:27:b9:16:ec:6f:af:43:87:60:01:ab:
93:5d:22:2b:0d:20:32:a0:78:b7:e4:b3:a0:89:08:d8:73:a3:
1f:0e:bf:7b:2a:30:67:15:47:f1:2c:7e:59:fa:4b:36:38:3a:
ba:39:26:eb:47:00:52:46:02:13:b0:0d:ae:ed:2c:5c:b3:38:
a3:d2:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:02 2026 by rpki-client