Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: zTrxVnHJyl2NKfS39JWcVlur4KSO7pwsib7hLUF9jhc=
Subject key identifier: E0:F0:C6:DC:F0:33:20:C6:B1:0B:18:37:CB:6F:D7:E6:95:20:09:6F
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019D996270229D0FE4289F4A9AF524DC5B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0EEF
Signing time: Fri 17 Apr 2026 03:00:58 +0000
Manifest this update: Fri 17 Apr 2026 03:00:58 +0000
Manifest next update: Sat 18 Apr 2026 03:00:58 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: CPCAky0Fd5OprkBwBvKU/rGyZEbKXty0iLnk2CEJqco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:70:22:9d:0f:e4:28:9f:4a:9a:f5:24:dc:5b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Apr 17 03:00:58 2026 GMT
Not After : Apr 18 03:00:58 2026 GMT
Subject: CN=e0f0c6dcf03320c6b10b1837cb6fd7e69520096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:95:ec:e3:d9:13:f7:fb:fb:0c:2a:70:f8:
28:76:82:51:a3:cd:18:e0:1a:b1:63:f2:aa:1a:0e:
83:1d:2e:d2:57:d5:c5:45:05:13:53:49:be:db:7d:
09:00:c1:07:40:71:b6:c4:b1:97:7b:63:f4:22:95:
53:1d:e4:53:e2:c1:85:e9:5f:db:86:cc:ac:ca:9c:
0c:95:10:08:e6:36:ed:bd:df:db:37:d4:c2:a2:36:
d8:4f:7f:be:88:f7:98:4b:af:45:d1:97:bc:f1:0b:
9e:3f:0d:ac:a4:8f:16:91:db:ef:fa:5d:c6:35:e0:
2b:57:6a:be:f6:9f:c9:12:34:80:3c:00:b1:ff:c0:
b5:f6:e0:46:21:e8:b0:5b:09:ba:db:6f:9a:41:b5:
e0:4c:28:84:94:59:60:ad:48:90:a7:e8:ba:f3:11:
45:08:4d:d7:0e:66:a6:84:90:0d:f4:cc:1d:ca:55:
96:72:94:6e:16:d3:24:84:bc:c1:83:5a:4f:4f:cd:
49:19:b6:ae:11:79:7a:49:15:35:55:5a:82:3c:d1:
de:49:9a:32:a9:2d:a8:bd:ef:84:a7:14:f4:ac:74:
00:b8:03:64:a6:90:d3:71:2b:3e:33:f0:8d:de:5d:
8b:51:bc:db:63:21:17:f0:59:73:81:fe:2e:7c:4b:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:C6:DC:F0:33:20:C6:B1:0B:18:37:CB:6F:D7:E6:95:20:09:6F
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:8d:75:cf:dd:63:39:38:94:e6:c4:8f:dd:26:97:ef:28:
70:2f:a0:1b:6f:2e:db:e2:74:8c:38:fb:31:ae:89:57:32:ad:
8a:c6:c4:31:fa:2a:4d:52:7f:a5:47:af:43:78:40:cc:77:03:
90:cb:23:84:44:e1:0f:c6:ba:a2:da:7f:d8:ae:d4:80:c1:83:
84:92:8f:f2:f0:60:81:ed:78:1b:78:00:36:65:b0:2b:50:0b:
e5:92:4c:38:dc:86:32:47:fe:c5:75:f2:19:82:9d:a2:5d:d7:
50:ca:87:ab:10:f2:ef:3d:84:4d:a6:6f:c3:6c:86:68:a1:64:
38:09:9b:9d:5f:a4:21:bc:d0:a2:b2:ad:9e:93:08:93:2c:fd:
3b:e3:ec:0f:e4:77:6d:4a:fa:1b:9f:fe:ba:e4:01:63:8b:53:
4f:f8:a3:97:61:e3:a6:9b:df:5e:b6:df:3e:f7:53:67:43:85:
1e:ca:bc:f7:ed:9d:90:8a:a6:1e:56:e6:7b:68:aa:e9:fc:33:
cc:41:28:88:74:4d:d4:21:36:e7:a1:1b:af:15:f0:4c:8e:29:
46:13:cd:79:e3:93:ff:04:df:c4:5e:16:9d:39:14:f4:a3:87:
53:8f:7a:be:20:31:87:ae:fa:2a:b6:a5:ad:a5:52:b2:0c:b1:
62:c2:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:40 2026 by rpki-client