Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
File: MrMqZabMfuIwaf0rCTD3gY89Fnc.mft (raw, json)
Hash identifier: nb8D3IO427qMl0bUracQo1z9CX242JjRtWq9o3iQ9FA=
Subject key identifier: 73:68:8A:C9:47:13:6D:A8:87:D3:58:D8:2D:BD:B2:1F:4B:E2:40:6C
Authority key identifier: 32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
Certificate issuer: /CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Certificate serial: 01A0CA477687E9861FD4CEBE739DC677B2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:15 +0000
Manifest this update: Tue 22 Sep 2026 18:01:15 +0000
Manifest next update: Wed 23 Sep 2026 18:01:15 +0000
Files and hashes: 1: MrMqZabMfuIwaf0rCTD3gY89Fnc.crl (hash: NylnNWE3D97poaXGps36eFjPNBmuEWa390p6rgCEdEA=)
2: w5kGAlkXu1R2au_PFUdeLD-JIFQ.roa (hash: b+TK2HXHDyzRDfPYR9/xdu7k+Y5KpsBW0vWTYp/Lw+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:76:87:e9:86:1f:d4:ce:be:73:9d:c6:77:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b32a65a6cc7ee23069fd2b0930f7818f3d1677
Validity
Not Before: Sep 22 18:01:15 2026 GMT
Not After : Sep 23 18:01:15 2026 GMT
Subject: CN=73688ac947136da887d358d82dbdb21f4be2406c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:84:9b:57:f5:c0:81:99:68:c1:29:d1:79:
0c:70:9f:38:d5:bf:d3:5f:40:15:f2:4d:8f:91:69:
5a:6d:e9:bf:78:09:3a:0b:6a:bb:ed:cd:74:3a:bd:
87:61:7e:d2:b6:63:cd:7b:9b:50:79:4e:d4:11:a3:
c2:fb:e4:14:e4:49:29:88:dd:41:c2:39:34:97:84:
1f:a1:00:e2:ca:85:41:88:75:a5:bc:f1:a9:a3:50:
64:b9:09:43:ee:a2:7e:af:87:05:b1:0b:e8:bb:d7:
04:d9:75:7d:2d:53:1e:77:4c:24:bc:53:17:38:e1:
20:dd:26:10:c5:fe:87:29:c6:55:90:86:20:ea:be:
be:e7:06:4d:ed:8e:8a:40:76:84:ab:0b:ee:ef:43:
44:af:8d:72:d7:9b:ee:d1:3e:16:5c:67:26:19:e5:
05:5c:f7:a4:bd:72:3e:30:40:3f:c6:4c:fe:e7:73:
bf:cc:95:54:b1:8c:f3:7e:5c:fc:34:86:5a:cf:65:
56:d1:72:e9:30:64:f6:40:94:b7:9f:f2:9a:f1:12:
01:92:8c:70:b4:1e:3e:d7:7b:81:8c:19:08:96:d2:
67:b9:b2:94:9c:86:6d:69:61:2a:ab:f5:1b:91:b4:
d7:24:ad:2d:45:90:c7:59:26:29:19:06:46:93:94:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:8A:C9:47:13:6D:A8:87:D3:58:D8:2D:BD:B2:1F:4B:E2:40:6C
X509v3 Authority Key Identifier:
keyid:32:B3:2A:65:A6:CC:7E:E2:30:69:FD:2B:09:30:F7:81:8F:3D:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrMqZabMfuIwaf0rCTD3gY89Fnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/MrMqZabMfuIwaf0rCTD3gY89Fnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:da:84:23:9e:9e:b9:23:fe:9a:27:73:de:9b:3d:e9:e4:
46:67:5c:dc:df:ac:5d:90:f5:13:71:76:54:62:af:2d:a2:a0:
64:91:1f:ab:04:b7:fd:0c:1d:b1:58:40:5b:e8:e8:85:38:87:
02:84:04:24:8c:a8:be:ac:8b:df:6f:76:88:1b:53:da:df:7a:
8e:6c:fa:dd:d2:f8:cd:87:2f:5e:4d:de:30:61:26:37:c8:00:
67:96:17:21:58:fb:df:fd:98:c9:b6:6d:ff:10:21:35:d9:70:
28:2f:31:58:74:d3:44:68:56:3c:b7:65:9a:12:e3:6e:87:9d:
e0:7f:3f:68:3f:b9:06:bb:fd:fc:86:ea:07:aa:60:63:e2:43:
23:79:d6:f5:4e:8e:82:ed:6d:9a:97:a8:e1:ba:9a:88:ec:04:
69:5e:67:f1:0d:37:c4:dd:58:8e:3c:2c:56:64:33:05:50:db:
b4:d3:3f:a4:f8:9e:a4:af:e3:3c:82:22:9e:86:e0:e9:ca:b4:
51:b7:2c:ca:5c:aa:be:ac:b5:37:80:f1:63:24:68:25:26:6f:
6b:ce:a5:99:d8:dc:30:3a:95:20:ba:e2:d7:cd:65:81:3b:dd:
d4:c5:0c:f3:fc:57:b7:80:14:8e:b8:d8:62:9b:f8:d2:90:d9:
e8:5d:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:59:08 2026 by rpki-client