Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: l16sm/M5B9ueqOsNiexsHzsP1bp4m1ubVmIxyGqeDnk=
Subject key identifier: 80:AA:22:52:EC:9D:9E:7E:39:E5:41:5E:E6:AE:7D:F5:AD:A8:05:2B
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 01A125AFC9BF9780DC7FA19258504BD2B6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1A2A
Signing time: Sat 10 Oct 2026 12:00:39 +0000
Manifest this update: Sat 10 Oct 2026 12:00:39 +0000
Manifest next update: Sun 11 Oct 2026 12:00:39 +0000
Files and hashes: 1: GqI-mzxc1fhTm5OyOP_m5TCCnVA.roa (hash: U8EEHo9hb/0j3nnEWBKaK1c26NGcKjSMcfvdjuvCGRQ=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: ipUfgzCC137L3gHBx/CnJj5x3XOhRZ78oU3+0BYG/R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:c9:bf:97:80:dc:7f:a1:92:58:50:4b:d2:b6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Oct 10 12:00:39 2026 GMT
Not After : Oct 11 12:00:39 2026 GMT
Subject: CN=80aa2252ec9d9e7e39e5415ee6ae7df5ada8052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:ef:80:69:53:21:76:04:5b:91:10:b7:cc:
eb:1e:15:e5:47:76:e6:3a:60:0f:f3:cf:69:82:9e:
50:e7:50:6f:8c:9d:15:05:0e:6e:65:2b:02:1e:5e:
bb:60:26:d8:5d:cf:77:7c:f8:25:6c:3a:cf:5c:05:
48:87:57:7e:f2:7b:67:41:45:be:b1:fb:81:29:9d:
b1:b0:b8:ff:08:6f:55:6e:8d:f7:39:88:a8:5e:55:
9a:c4:92:fa:f9:4a:a0:91:e6:2c:0f:5a:9e:82:50:
02:85:a9:51:0d:41:eb:18:85:82:82:34:8a:da:dd:
d1:49:7d:b7:64:35:6c:22:dc:ed:e2:3a:48:9e:20:
e3:96:a9:a1:bc:a0:6f:04:e8:3e:9e:54:ab:9d:96:
2c:27:c5:38:f2:e4:94:fe:a8:cb:c5:50:49:0d:87:
0c:46:ca:ac:28:ee:8d:dc:d0:d4:8a:f2:c1:3b:74:
78:2b:85:9e:94:30:1a:22:87:c2:a5:dd:f5:9b:74:
4d:96:40:d6:9d:44:b9:11:31:5d:a8:11:ff:d4:a4:
c9:7a:77:a2:4e:06:a9:17:22:58:fe:43:34:cc:ff:
33:a4:61:b6:49:b1:ac:b1:d2:61:ab:dc:d9:6c:86:
9b:85:8f:62:b2:ff:9d:0a:55:3d:1d:41:0f:6d:94:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:22:52:EC:9D:9E:7E:39:E5:41:5E:E6:AE:7D:F5:AD:A8:05:2B
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:71:85:5b:3f:4f:4d:02:16:2b:83:56:08:0e:87:0f:50:
99:81:cb:e8:2a:0b:f0:86:29:69:31:0b:8a:ed:e8:a7:7e:39:
c2:02:48:9e:d7:32:f4:e7:ad:2b:df:47:2b:2c:3f:c4:4b:f2:
72:cb:02:9b:c8:6f:dd:fd:df:7b:b7:f1:4a:56:5c:24:e9:8d:
42:4b:eb:41:b9:69:9f:6f:ce:aa:9f:67:fd:28:be:ec:61:83:
74:55:8a:54:3c:d1:99:66:13:07:39:83:ce:78:5e:e0:66:0d:
a8:02:ef:95:d9:d9:50:ce:05:1d:35:83:7a:d6:60:3d:63:64:
60:8e:4b:97:ff:81:d9:22:7e:f3:99:15:2b:9d:46:98:1f:70:
47:14:3b:6e:1c:b2:52:60:50:b0:92:90:d3:f6:e4:7b:31:1b:
25:7f:67:7f:db:f4:f2:1b:eb:f7:a8:ca:c1:a3:d3:e1:df:04:
8e:39:22:47:74:7d:1c:28:45:c7:d4:d3:b2:59:c1:61:08:02:
3c:5f:8c:62:44:80:fa:5e:d8:b7:df:39:ba:ee:36:5c:58:00:
3d:18:11:3c:ca:5d:74:58:9c:ce:cf:d4:90:dd:3c:6e:b5:b9:
be:33:46:49:f2:95:fe:ec:67:6c:9f:68:17:7b:d2:d2:b4:b5:
5c:6f:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 20:49:45 2026 by rpki-client