Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: mjy5JgB2ibMP95TroFFRH4dbFevyps1guvrc8E61K2c=
Subject key identifier: 35:8E:21:7D:9A:C9:41:4E:D1:73:57:36:DA:E2:79:B6:18:75:9E:D7
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 019F94000C08630422BDC29322F0EB72A4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 12:00:58 +0000
Manifest this update: Fri 24 Jul 2026 12:00:58 +0000
Manifest next update: Sat 25 Jul 2026 12:00:58 +0000
Files and hashes: 1: GqI-mzxc1fhTm5OyOP_m5TCCnVA.roa (hash: U8EEHo9hb/0j3nnEWBKaK1c26NGcKjSMcfvdjuvCGRQ=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: kCXJzpJHHIKCsWvRheRsyjeXTf9sCNA86+kuj0C4dCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:0c:08:63:04:22:bd:c2:93:22:f0:eb:72:a4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Jul 24 12:00:58 2026 GMT
Not After : Jul 25 12:00:58 2026 GMT
Subject: CN=358e217d9ac9414ed1735736dae279b618759ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:84:cc:0b:72:7e:e4:21:50:62:d1:85:ab:
ac:2d:59:b3:15:8d:02:2c:f1:f0:a4:8e:03:70:ce:
9c:9c:71:36:66:c4:ba:af:4f:17:d6:d3:6f:ed:9b:
24:ee:4c:b4:9b:86:52:d5:ca:e8:dd:c6:ee:dc:93:
ac:ed:5b:f1:3a:07:78:3f:bd:c4:9a:38:c6:f6:32:
f4:c8:4c:58:1f:62:de:2b:c9:d0:7e:73:a9:47:bf:
97:37:87:c4:57:7f:e2:67:f1:77:26:f3:85:dd:03:
2b:c5:3e:17:01:0f:70:ea:37:ee:02:94:95:2b:56:
a4:30:63:9a:46:72:77:58:61:94:dc:c3:ac:8e:63:
bf:d0:7d:21:3e:3f:c2:ad:4a:4b:a9:d9:4e:74:28:
dc:59:5e:d4:af:1b:53:c3:e6:89:6b:2b:4d:c8:30:
f1:7a:b8:a7:97:ac:b1:13:ec:bf:5f:18:65:da:48:
da:bb:65:f5:be:2e:9f:f0:3a:63:55:99:4d:7c:81:
26:e0:f2:34:e8:81:d3:3a:f8:d4:83:3f:9c:26:d9:
b6:30:60:49:9b:82:53:1b:71:d0:5c:57:79:2a:18:
dc:a6:02:c6:cf:f5:a5:30:9e:68:02:51:fb:d4:b0:
5f:8a:c7:15:95:42:89:11:05:97:2b:6d:c7:0c:0f:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:21:7D:9A:C9:41:4E:D1:73:57:36:DA:E2:79:B6:18:75:9E:D7
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:3a:d9:97:57:77:c6:bd:eb:39:e1:c7:bb:c4:0a:8b:8d:
43:d0:2e:77:01:af:50:c3:ed:68:00:cc:b3:e6:d3:49:45:cc:
5c:4d:7d:f6:2e:c7:8e:63:cd:c5:f0:57:46:2b:ac:f5:48:10:
02:3c:11:c3:23:79:57:13:78:34:fa:92:f1:94:04:72:59:49:
ce:06:d7:b2:be:ef:c4:d2:cd:15:ca:15:49:5a:fa:10:51:c4:
2a:8f:8d:e1:c2:2c:3d:d2:c6:b5:b9:d3:80:9c:22:10:5c:24:
9e:53:4f:ed:65:4b:15:fe:2a:39:2c:94:c7:fe:52:54:1f:84:
4f:54:dc:d3:5d:0c:5e:2f:ce:3d:b7:62:35:66:49:2f:4a:76:
a0:6e:55:d6:21:32:84:a3:54:d8:34:19:82:9c:9a:ff:7d:80:
25:3e:ee:3e:be:11:ca:e0:be:19:ec:35:3f:69:fe:55:c1:2f:
21:48:95:c3:66:6d:fb:54:66:be:bb:8f:ac:bd:ed:10:c1:b8:
a4:b5:e2:16:ce:63:8b:9b:3e:9b:8e:19:e8:86:48:79:b9:ad:
11:b4:c2:fc:a0:ec:a0:33:95:1b:89:46:61:56:3e:3e:c8:14:
11:69:0a:a6:cf:2e:74:30:68:aa:30:26:31:31:82:2c:fd:e8:
c7:af:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:42 2026 by rpki-client