Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: pSi9BXyYGFjg1d5rfTSuRdxZLMngWdgMwrsd/RhT+Tk=
Subject key identifier: 23:AA:D5:19:1C:9D:07:98:13:18:13:DE:07:6F:07:FD:02:A9:A4:45
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 019E1F479DAEFEC8956A80998AC6DBECABE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 03:00:47 +0000
Manifest this update: Wed 13 May 2026 03:00:47 +0000
Manifest next update: Thu 14 May 2026 03:00:47 +0000
Files and hashes: 1: GqI-mzxc1fhTm5OyOP_m5TCCnVA.roa (hash: U8EEHo9hb/0j3nnEWBKaK1c26NGcKjSMcfvdjuvCGRQ=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: FY/W/rwAmafgG5qrhlOiPCqQTfL+pw7zbCimj0/fmpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:9d:ae:fe:c8:95:6a:80:99:8a:c6:db:ec:ab:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: May 13 03:00:47 2026 GMT
Not After : May 14 03:00:47 2026 GMT
Subject: CN=23aad5191c9d0798131813de076f07fd02a9a445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:9c:5d:cb:69:c2:2f:86:df:dc:25:3c:31:
c4:e5:0a:da:79:df:7f:b5:99:cd:11:66:c3:0b:57:
ce:67:97:3d:84:e9:79:83:e5:0d:b8:5b:42:8e:3e:
90:02:1f:ec:f2:c3:f0:91:88:ad:e2:8c:c2:1f:bc:
a9:f6:40:26:d2:08:13:5d:ec:3f:19:9f:11:93:b7:
1d:77:bb:17:ce:0f:8b:ae:41:ff:64:f4:43:33:f4:
d2:6d:fa:50:52:eb:ba:a0:5e:02:96:1e:c1:14:1c:
cf:f5:c0:74:45:98:9f:ff:93:23:b8:80:f8:f0:57:
34:5b:24:3b:18:f8:e7:c0:e2:be:17:e2:05:5a:ae:
1b:4e:d2:8c:15:13:d0:03:45:7f:19:5e:1b:25:72:
78:50:fe:e8:c1:e0:63:07:d9:3a:a2:ce:e2:cc:15:
72:03:03:e3:f4:a5:e2:12:d7:74:fc:f7:c9:01:34:
60:bb:d2:e9:61:20:a4:2b:22:66:f1:b4:5b:68:85:
b2:d9:5f:76:5c:f7:a0:62:73:fa:1b:81:dd:cc:8d:
ac:31:be:48:17:73:27:2f:cb:85:f8:2f:89:a5:52:
b1:22:52:24:41:55:bf:30:e2:42:50:af:ad:e6:6e:
ab:ab:13:6e:cb:75:63:10:a8:06:50:50:89:ea:1d:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:D5:19:1C:9D:07:98:13:18:13:DE:07:6F:07:FD:02:A9:A4:45
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:30:9e:21:e8:c6:de:78:98:1f:67:5b:39:03:15:e2:08:
f2:4d:a3:3d:e2:06:17:a8:92:21:4a:34:09:59:42:82:24:fb:
fb:53:c6:68:5a:2b:6a:be:5c:ef:57:1d:ea:41:79:2e:a9:3e:
df:4e:7a:2a:4d:7b:70:82:3e:25:ed:b9:1b:00:43:67:f3:b7:
54:14:ae:b7:a0:a7:8b:f4:fc:61:c0:af:4b:21:4c:22:79:86:
e3:96:48:6f:e7:da:32:bd:98:7e:ef:8f:60:14:61:29:5d:35:
8f:55:d8:98:9b:ce:51:25:62:92:39:9c:68:1a:f9:93:c2:bb:
e8:d3:fc:ef:d0:26:7b:81:ab:4a:32:0f:aa:34:fb:f7:19:12:
3b:44:c9:f0:4d:c0:fc:81:8f:a7:45:ad:eb:d2:7f:07:c3:17:
b7:7e:4c:1b:e0:39:3c:d5:2b:eb:07:1b:db:a1:e4:1c:a6:ef:
08:05:4a:7f:e3:6f:9d:34:e6:60:63:bd:1a:6d:f9:fb:52:cc:
2e:52:2a:6a:e4:aa:b7:e4:a4:5f:01:f4:88:51:50:a0:20:2e:
5c:3e:b4:1c:6a:0d:71:4b:c1:51:9d:95:8c:1e:5c:75:c7:f3:
0f:61:e8:ce:ff:5b:38:58:24:bc:0f:7b:92:54:4e:a9:f2:06:
ed:78:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:39 2026 by rpki-client