Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
File: MrMqZabMfuIwaf0rCTD3gY89Fnc.mft (raw, json)
Hash identifier: ox4V0FviZgQ7IxByN8E+e4cfI2ff06a3HVC0E/L1GLQ=
Subject key identifier: 8C:FC:79:C4:57:F9:A2:7D:6B:7D:F2:D6:7C:94:28:88:F4:42:5A:34
Authority key identifier: 32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
Certificate issuer: /CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Certificate serial: 019F8F7F6614BDB9948A2A92334E4B679C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:58 +0000
Manifest this update: Thu 23 Jul 2026 15:01:58 +0000
Manifest next update: Fri 24 Jul 2026 15:01:58 +0000
Files and hashes: 1: MrMqZabMfuIwaf0rCTD3gY89Fnc.crl (hash: x9rleJZoeaQ/2Ar1w8js9camoF6RQBNszYgfa8+B/hI=)
2: w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa (hash: b+TK2HXHDyzRDfPYR9/xdu7k+Y5KpsBW0vWTYp/Lw+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:66:14:bd:b9:94:8a:2a:92:33:4e:4b:67:9c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Validity
Not Before: Jul 23 15:01:58 2026 GMT
Not After : Jul 24 15:01:58 2026 GMT
Subject: CN=8cfc79c457f9a27d6b7df2d67c942888f4425a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:9d:27:5d:bf:dc:18:f2:ef:09:3c:dc:6c:
23:90:84:60:a4:d3:d3:c8:58:63:b3:cb:27:4f:f5:
35:67:aa:97:14:d1:d0:97:54:c4:34:f0:2c:bf:be:
33:5a:80:2b:06:3a:4a:2a:25:c4:7f:16:79:22:4d:
43:3a:c5:be:38:dd:a2:8c:4b:69:b2:60:9d:bf:58:
27:f6:b3:ab:85:ae:a0:87:40:fc:f2:3c:1d:22:ba:
70:88:28:ff:dd:9b:fa:59:af:50:cd:06:54:3e:3f:
ee:42:a5:5c:3d:af:75:ae:f4:e9:3b:48:04:0b:b0:
78:45:03:7b:73:60:2f:de:f0:8c:32:ce:75:a6:55:
f6:2b:d8:ae:46:19:aa:7f:16:f3:6d:f3:f9:dd:7b:
4c:f0:3d:0a:02:0e:de:f6:7c:27:ab:e2:28:97:ce:
10:d7:ab:36:c8:fb:15:8b:1e:af:67:21:5d:c9:d3:
5a:8b:c0:7e:c7:e9:d8:a8:8d:67:51:a4:59:91:b6:
60:25:4d:4f:0e:89:bc:66:24:36:81:41:07:87:e1:
64:c6:c1:26:31:ac:c4:37:dd:de:96:73:01:41:e6:
fe:f9:df:30:5a:18:73:65:75:3e:ee:9a:27:fa:6f:
21:a6:32:81:89:18:10:b3:b8:40:f7:e2:0d:77:43:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FC:79:C4:57:F9:A2:7D:6B:7D:F2:D6:7C:94:28:88:F4:42:5A:34
X509v3 Authority Key Identifier:
keyid:32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2d:4e:46:99:b5:35:fd:a8:82:ad:82:48:61:bf:cb:d9:50:
bf:fd:e0:56:44:46:a7:4a:8a:fe:a1:98:cc:b9:b8:23:a2:5c:
5f:65:58:0f:e4:87:17:03:51:92:58:91:84:f7:c2:09:c1:ce:
5d:9a:24:4d:c7:0d:79:99:fb:6e:41:e5:b5:25:88:aa:e7:b5:
46:a8:98:20:d6:91:04:b6:20:86:c1:ca:c3:20:ff:b4:21:43:
5f:85:61:e1:b4:71:92:e6:9d:77:c7:09:8a:10:c7:94:b8:8d:
63:4e:25:c5:9c:f5:12:00:0a:26:3a:13:14:ed:05:54:44:a9:
3a:37:18:9d:b3:35:c3:9f:1c:6f:d4:3b:d0:df:9e:02:92:e5:
63:e4:ee:02:e4:10:fc:0b:5c:f9:1d:03:2d:8d:66:0c:18:09:
25:7d:ae:38:72:80:f8:74:8b:f6:93:5f:76:90:25:c0:63:fd:
11:0d:9a:ae:03:aa:df:d1:8e:60:9e:07:f1:bb:83:84:64:9d:
ca:e3:b9:b9:dd:33:83:d2:a8:75:29:ee:b9:ae:58:9d:10:db:
df:6a:d3:cd:94:40:d4:2a:c4:16:9f:f9:89:79:35:50:dc:cb:
28:6e:7c:e6:45:4a:03:f3:94:a7:bc:c5:0e:c2:d1:59:a4:27:
93:9f:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:17 2026 by rpki-client