Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: cCGPCkyiqN+tHOBYdIV+1Ff5x8MsYX4OUaAWd/oKL7M=
Subject key identifier: B3:69:2D:6D:FC:D0:B5:39:09:7C:E2:83:E7:29:C8:15:54:B1:DB:46
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 01A1366D5088CF023F2ADA301785D764ADD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 10CE
Signing time: Tue 13 Oct 2026 18:01:36 +0000
Manifest this update: Tue 13 Oct 2026 18:01:36 +0000
Manifest next update: Wed 14 Oct 2026 18:01:36 +0000
Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: bSmarYGwHyHtZUBDLb2aslUow1483NP5E6SAkKWsGNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6d:50:88:cf:02:3f:2a:da:30:17:85:d7:64:ad:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Oct 13 18:01:36 2026 GMT
Not After : Oct 14 18:01:36 2026 GMT
Subject: CN=b3692d6dfcd0b539097ce283e729c81554b1db46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:46:8f:4b:fb:0e:ab:9d:b0:a9:ed:2e:84:
5e:14:a9:56:2d:64:1f:a7:28:fd:da:65:38:ad:2f:
ef:57:b3:f3:23:fd:ae:db:21:63:9c:17:6f:0c:0f:
74:62:73:b1:77:ac:dd:57:3e:67:65:6b:6f:f3:0e:
3e:bc:de:ad:bc:11:46:cc:21:59:c6:93:82:7a:bd:
52:fe:7d:87:a9:28:37:13:4e:e7:c8:9f:59:6f:6a:
c8:b8:33:1d:e0:31:52:31:d2:f1:56:48:6a:9a:1b:
19:d7:61:9d:5b:5b:19:b9:ec:0c:2e:f4:90:db:ad:
e3:85:99:07:91:b5:2e:00:55:ae:f5:8d:c0:01:12:
b8:88:d2:88:17:ba:fa:69:a3:cc:93:6e:fb:70:c7:
29:ad:7e:2f:68:53:60:7c:e3:f6:a7:1c:30:c6:c4:
72:ce:a3:4a:50:d4:43:6f:7e:0e:24:50:b2:48:6b:
3c:06:bb:a1:12:75:39:4d:6d:be:23:47:f3:65:c2:
05:b2:f9:4c:77:8b:03:54:8e:d8:5f:1f:b2:03:7a:
0d:80:05:0f:5e:f9:df:54:33:69:e9:e9:5f:11:6e:
32:4d:54:35:d9:99:f5:51:5e:4a:a2:9a:75:95:2a:
f5:1a:5e:49:c0:4f:6d:6d:0e:a2:d9:f9:16:42:f2:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:2D:6D:FC:D0:B5:39:09:7C:E2:83:E7:29:C8:15:54:B1:DB:46
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4d:e5:a2:94:a1:10:23:8a:a0:ae:dc:00:0a:28:21:15:14:
e0:7a:2e:45:de:ce:2a:6e:e3:c7:f8:46:2e:0f:23:98:48:66:
4f:57:ef:85:2e:d8:42:53:52:d9:a0:6b:41:97:ea:99:f8:83:
36:e5:68:e6:c5:04:98:63:c4:65:3f:b2:ad:e0:93:6e:1c:75:
94:44:46:7f:ae:d9:f0:94:f1:b7:19:73:29:f1:12:5d:98:ea:
d6:af:d5:a1:85:7c:f0:af:5b:5a:f7:a9:20:8f:77:65:85:cc:
08:e6:06:d4:f7:b9:09:be:eb:fc:9b:39:6a:c8:b7:f6:df:8d:
3a:e9:80:f3:ca:87:75:b7:05:d2:18:82:22:17:24:ad:04:32:
58:dd:26:1b:ab:de:4a:e4:b7:e5:00:95:95:5f:cc:33:25:52:
9e:82:d3:c9:1c:75:63:fd:c3:f5:27:e3:ed:4b:d5:b9:93:de:
28:e2:9f:57:09:cc:ba:88:3e:de:35:68:f3:00:36:6d:7a:c4:
68:27:2e:01:44:92:94:e4:9b:f2:cf:dd:6d:18:af:7f:4c:ee:
58:19:03:1a:65:db:65:52:68:e9:5c:7d:93:48:ea:8d:bd:cd:
85:78:3a:23:8b:b4:3e:62:c5:7b:63:37:02:79:f2:0c:47:13:
7b:aa:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:47:42 2026 by rpki-client