Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: hM+6oXuzi+D/AQ9OzLg1MlephCs0cHcCsYLxf93aFAU=
Subject key identifier: 18:35:EC:D4:6F:EA:45:4F:11:4D:5D:E4:94:33:1B:CE:C3:DF:09:01
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019CABD966326057008DE7EFFFCFD858F931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0E74
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: D0IEnJCmvs+xAkZt8Z+MbPHcf+98pL8xpM8+791FwD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:66:32:60:57:00:8d:e7:ef:ff:cf:d8:58:f9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=1835ecd46fea454f114d5de494331bcec3df0901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:56:02:ab:be:e2:c8:ef:ec:9e:b6:7c:2d:
e6:0c:2c:e8:0e:38:68:bf:0b:79:23:20:28:c6:2d:
b8:12:1a:31:6b:54:90:9f:c2:5b:f5:72:1a:18:6e:
ac:77:8d:9c:76:f6:24:99:74:3e:63:3c:70:da:7e:
46:f3:04:72:53:97:54:8b:a3:29:f2:04:d9:af:e6:
27:e8:98:92:f8:61:f6:04:22:11:9a:50:42:e6:32:
01:0f:1d:20:b1:ed:f9:da:7b:fc:a4:d7:19:ca:96:
9b:68:fa:2c:04:bb:af:36:1f:bc:39:d7:6f:d1:c0:
12:f6:32:46:db:a6:66:f1:04:25:7c:0e:3e:24:4f:
a7:ce:01:46:ca:0a:bd:c7:4b:fd:99:08:40:d4:14:
1d:7f:6a:31:67:53:55:77:6d:bc:bf:70:86:c0:aa:
7b:a4:77:1c:21:8d:fa:b5:ba:bd:4e:7a:ad:1e:ac:
63:64:86:f9:03:92:f6:9d:32:42:41:be:47:e4:79:
56:71:e9:1a:39:04:e7:f1:76:3c:73:0d:49:73:18:
c9:cc:83:da:bf:55:a5:da:41:ea:74:79:ac:76:8f:
92:48:78:d7:8a:71:ac:77:5d:c7:23:ed:fe:cb:45:
99:1c:9f:17:27:ea:16:c8:49:f8:c1:49:4e:7e:0c:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:EC:D4:6F:EA:45:4F:11:4D:5D:E4:94:33:1B:CE:C3:DF:09:01
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:29:d4:b8:a8:2f:3f:f5:44:c5:4b:fd:20:0a:61:5e:a5:39:
6a:70:f0:89:17:ee:5f:bb:36:c1:a8:02:95:51:1c:84:53:81:
8f:a8:06:30:0f:00:f5:e4:6c:ea:8c:41:00:86:3a:33:84:9b:
4a:9d:3f:bc:15:d3:9f:75:8e:a9:e6:c7:ba:da:19:1c:21:2c:
e7:02:46:73:08:73:b3:f8:a3:d8:51:b0:32:56:2c:98:8b:3d:
a8:70:52:d1:56:63:fd:19:a1:ff:a1:98:6a:75:b6:c2:05:fd:
97:17:59:e8:fb:c3:80:d7:60:68:fc:d5:b4:69:00:ac:07:f7:
72:7f:d7:63:be:7b:77:1f:bc:54:0e:51:b2:96:67:1a:d6:29:
3f:07:02:d2:7f:67:13:73:76:8a:c5:34:cb:fb:11:b6:93:a5:
3e:a6:4b:bf:8e:07:ef:67:b6:fd:a0:12:92:08:79:ff:b6:5f:
63:3f:da:2c:c1:9b:81:2f:21:e3:a4:0a:70:ad:58:94:c2:1f:
cb:9f:0e:e0:8b:cc:b1:51:3a:89:57:b7:d8:cb:45:36:28:db:
41:67:bf:28:68:a4:f5:d0:68:85:58:be:86:41:34:04:d9:53:
d2:08:1a:7a:d1:c1:d4:61:3b:51:e2:9b:34:23:64:6c:58:e9:
09:3a:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:15 2026 by rpki-client