Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: wA/JAhhxmouBmG73v9Q/swKtLy5hCpa/WjM+TrJ2CLk=
Subject key identifier: 9A:74:EC:65:FF:22:03:2A:DF:83:2D:24:90:B9:A1:F0:58:EA:FD:42
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019CACB549981D1B121D1905D6C37B8FEF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 142B
Signing time: Mon 02 Mar 2026 04:01:27 +0000
Manifest this update: Mon 02 Mar 2026 04:01:27 +0000
Manifest next update: Tue 03 Mar 2026 04:01:27 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: ihnok4rRG66kIQ+BCnRIipZxR+5i+LA3U9X4ee6aTj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:49:98:1d:1b:12:1d:19:05:d6:c3:7b:8f:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Mar 2 04:01:27 2026 GMT
Not After : Mar 3 04:01:27 2026 GMT
Subject: CN=9a74ec65ff22032adf832d2490b9a1f058eafd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:7d:fe:46:50:b2:87:79:b5:26:29:0b:ac:
8e:26:74:37:f7:2f:13:6c:8e:8c:5f:8c:f0:b8:c7:
12:00:3e:0a:fe:69:41:01:7c:ab:45:5b:c7:ee:f2:
76:43:89:3a:7d:f1:4d:fd:3b:6c:92:15:b4:40:a5:
54:bd:c7:cf:85:d8:f9:ad:dd:64:e5:7f:56:8c:bf:
45:79:0d:cc:2a:08:50:b3:f1:9c:d3:6c:34:e6:6e:
11:1d:2d:99:62:45:7d:24:51:e9:fa:7f:a3:f3:36:
52:8b:cd:3f:0d:ba:79:0e:8c:04:5d:9f:b9:39:8d:
a1:2f:72:3d:ad:6c:ca:b1:75:bc:f9:aa:2e:0c:63:
af:54:e8:5e:0a:f8:0c:55:ea:ab:47:b9:6c:c6:4f:
52:60:e1:ee:0c:27:72:24:cd:53:89:ce:82:f8:e8:
2a:1a:21:a1:f6:19:c4:ce:76:7d:e5:8c:1d:29:f1:
e6:b6:07:9f:e3:7a:d6:aa:70:0e:c6:17:d9:43:ac:
55:76:3d:e1:07:43:5d:e3:70:47:c9:96:9b:83:9b:
6e:1e:af:10:fa:b1:2f:8e:eb:82:9d:c8:a8:30:88:
d3:24:19:bd:2e:33:48:30:28:07:ef:c7:86:a0:96:
bb:63:0b:ed:bb:02:05:08:63:d1:39:37:31:6b:7e:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:EC:65:FF:22:03:2A:DF:83:2D:24:90:B9:A1:F0:58:EA:FD:42
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:57:4f:2b:1c:3e:14:24:38:a3:3e:8b:71:5a:a5:35:1b:03:
33:40:25:b8:a3:7c:32:72:4d:14:3d:9f:17:be:15:3e:c7:d5:
de:34:bf:e3:55:61:13:99:5a:55:56:38:86:73:14:c7:51:04:
86:66:96:25:20:65:74:7e:6e:2a:0f:78:90:78:68:2c:66:55:
f5:bf:47:fc:37:e7:bf:b6:42:3c:ba:e1:2e:f2:56:1c:98:d0:
d4:3a:49:11:a1:e4:e5:35:c4:87:b5:fd:0d:0d:11:db:c6:7e:
f0:e9:d5:5f:c6:cc:3b:b0:d7:e0:8c:48:99:0d:52:14:53:c2:
ff:cb:8a:8e:19:eb:a1:d5:3a:08:f9:9c:da:dd:c3:2b:29:21:
dd:e7:ec:99:7f:2d:b3:87:5c:17:84:16:24:15:77:3e:e9:c0:
8b:9e:0f:6c:67:9b:e1:11:43:5b:b9:9f:55:be:c0:51:a3:58:
d5:e7:ad:91:a3:c4:fa:5e:d2:28:a7:20:af:16:2d:70:7d:78:
33:36:1c:f0:22:c3:5a:05:29:42:59:2c:6c:c4:08:85:d3:4a:
96:4c:2c:a2:4e:3c:5d:92:fd:c5:1a:3c:9b:9b:a1:de:61:f5:
4c:3f:4d:ac:8c:07:d7:be:45:d4:c7:e4:99:53:db:d2:ea:bc:
58:d4:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:18 2026 by rpki-client