Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
File: MrMqZabMfuIwaf0rCTD3gY89Fnc.mft (raw, json)
Hash identifier: rkmqNAewz70eRI/eoaxKBF8KXfcgCQePRf8Kqj5OQU8=
Subject key identifier: DB:0F:09:1E:C3:D6:1C:96:65:C4:BD:AE:32:82:1C:C3:EC:B0:76:FE
Authority key identifier: 32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
Certificate issuer: /CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Certificate serial: 01A1DE709659499F426AB4DA6D6E24DD19C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:22 +0000
Manifest this update: Sun 15 Nov 2026 09:01:22 +0000
Manifest next update: Mon 16 Nov 2026 09:01:22 +0000
Files and hashes: 1: MrMqZabMfuIwaf0rCTD3gY89Fnc.crl (hash: JD6eUkuFGk5dGYHeuUAzKgtEmtfvDtJ7tqHe9H3P1Vw=)
2: w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa (hash: b+TK2HXHDyzRDfPYR9/xdu7k+Y5KpsBW0vWTYp/Lw+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:96:59:49:9f:42:6a:b4:da:6d:6e:24:dd:19:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Validity
Not Before: Nov 15 09:01:22 2026 GMT
Not After : Nov 16 09:01:22 2026 GMT
Subject: CN=db0f091ec3d61c9665c4bdae32821cc3ecb076fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:19:2f:81:73:b4:3f:90:c0:f7:3e:8d:82:
a5:62:5b:58:9a:bd:15:65:03:47:c1:1e:45:9a:c2:
85:e7:8f:8f:58:49:78:31:f3:e2:88:3f:e6:22:88:
e0:f6:79:e0:20:a0:26:65:5e:9f:94:bd:c2:cb:e1:
76:b6:eb:ae:f5:a6:ec:a6:fb:49:ce:22:90:65:f4:
05:ff:db:51:c2:3e:c2:75:46:ef:33:3e:fe:d5:aa:
48:e8:0c:1b:3e:3c:d9:14:16:66:95:46:36:38:b5:
de:3e:8f:33:8e:43:9f:ae:1c:35:62:70:75:4e:80:
8a:e3:c9:ea:93:75:ac:7d:37:03:b2:ef:61:7f:01:
4c:30:ab:f8:a3:b5:20:e0:7a:66:ba:c8:10:a0:8c:
e3:43:f6:a1:1b:9f:6a:13:b2:fb:bd:9c:bc:0f:37:
04:9a:f2:27:34:3f:83:77:4e:3a:d8:9e:9f:25:fd:
a2:75:83:b6:87:51:e2:1d:8f:87:05:a2:fd:93:79:
63:b6:76:20:dd:0e:a5:94:de:dc:28:9a:ba:bd:6e:
81:53:9c:73:cf:9d:9c:5d:80:87:3b:6e:4d:50:82:
d6:91:01:d8:2d:88:f3:e2:ba:fc:db:27:e1:19:74:
b1:28:c1:ee:58:30:4c:88:d8:d2:d4:a9:5d:d1:36:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:09:1E:C3:D6:1C:96:65:C4:BD:AE:32:82:1C:C3:EC:B0:76:FE
X509v3 Authority Key Identifier:
keyid:32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:d7:b3:a5:7b:46:1f:78:ff:4b:bf:fe:6e:81:15:17:da:
2a:b9:6f:33:3c:bb:bb:46:3e:a0:20:83:56:25:c1:32:0e:39:
27:e5:d1:bf:4d:08:61:35:f9:26:f3:87:e2:11:d4:26:ef:bf:
5a:83:6f:f1:de:48:11:d9:3f:72:39:c6:bc:46:e4:00:8b:da:
36:41:ca:9b:e7:4e:51:63:61:b4:ee:75:7e:b0:df:ed:c6:04:
5b:f5:50:74:f7:0b:f5:ac:19:ac:cc:08:3a:7d:85:40:36:63:
8d:46:7b:a2:db:28:c4:2a:16:46:ec:05:3f:22:cc:0d:14:92:
5c:3a:b1:2d:cc:9d:ee:01:64:e6:5f:35:de:74:11:60:27:bd:
ba:43:a3:f2:c5:3b:cc:2a:db:87:fa:84:35:42:71:9a:c7:08:
8c:b7:7f:3b:c3:e1:41:f1:ed:f2:2e:9a:0d:f2:9c:60:69:54:
59:44:d1:4e:40:ab:b9:09:20:77:d2:b1:d7:bf:13:52:4d:ef:
5e:51:7a:1a:98:08:f5:56:e0:6d:b5:0b:89:9c:e0:dd:55:b7:
31:7c:d6:ed:42:6a:6b:0c:38:e5:ff:e8:42:ff:52:a9:a5:a6:
5d:59:df:79:05:fe:f0:61:34:83:18:83:a7:94:5c:19:52:c5:
4f:f8:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:45:39 2026 by rpki-client