Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: 2B3CG9oJz3boTvZa03t7SkaGT5P9zVIaylNlFdDD1pE=
Subject key identifier: B6:14:06:89:93:88:85:87:BC:81:F2:31:52:F1:44:76:62:2C:6F:B7
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 01A13F022E90724A88B59BD368B72796D1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 1689
Signing time: Thu 15 Oct 2026 10:01:09 +0000
Manifest this update: Thu 15 Oct 2026 10:01:09 +0000
Manifest next update: Fri 16 Oct 2026 10:01:09 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: vp7MHm2bSNQxJsqMQ0Rd9laKsgCqcfo1j+d3O6ee4rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:2e:90:72:4a:88:b5:9b:d3:68:b7:27:96:d1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Oct 15 10:01:09 2026 GMT
Not After : Oct 16 10:01:09 2026 GMT
Subject: CN=b614068993888587bc81f23152f14476622c6fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:58:61:ad:bd:12:76:26:da:6a:6a:b8:02:
4b:89:70:ec:25:ff:af:10:41:6c:5d:07:27:fc:a8:
48:42:b9:59:ba:e9:c0:e5:d4:11:00:69:87:2e:92:
5e:d1:3d:29:c5:51:22:2d:d0:37:84:5b:39:2e:9a:
aa:1e:58:cf:c1:80:2f:e7:f9:38:cb:77:7b:f6:34:
33:f6:62:bf:64:49:e6:2d:4d:50:d6:4f:3c:bd:59:
99:6c:2b:38:79:43:1b:2b:3a:56:35:9c:1f:db:e0:
77:57:ed:d1:56:2e:b5:16:44:5f:8d:99:a7:4a:e5:
e4:10:93:6d:e7:7b:c3:a5:ea:58:47:97:23:3e:ed:
0d:1c:27:bc:e9:c1:bd:da:3b:c4:e1:6b:26:ca:c0:
1b:c1:0b:25:1c:fa:ba:98:2f:5f:29:20:bb:ed:17:
28:5b:b6:1c:4b:62:a0:4b:60:f1:56:7d:36:a7:f0:
43:d1:e4:3d:94:1a:8f:64:25:95:0b:80:df:5c:9a:
cc:69:7e:9a:21:98:36:6d:1f:54:a5:09:3d:86:95:
6e:67:5e:15:32:3d:1d:57:f3:43:d8:4f:12:83:c7:
80:68:ac:d0:a1:55:6c:25:bf:2c:d8:1b:67:32:a1:
f5:78:e0:37:01:a3:69:c8:91:25:3c:9c:c5:15:29:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:14:06:89:93:88:85:87:BC:81:F2:31:52:F1:44:76:62:2C:6F:B7
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e4:97:e8:9a:f1:66:29:b2:9c:d4:c0:a8:c7:37:3f:bb:e5:
77:91:d9:b9:ec:65:d2:03:c6:2f:e7:1a:e2:4a:96:d1:10:55:
6c:1c:c6:d3:6e:d3:59:ea:bb:83:3b:31:e5:9e:c7:dd:04:18:
f9:d5:24:3e:7b:b9:e3:63:3a:07:69:0a:4e:bf:25:7f:24:1b:
70:b6:15:02:95:37:35:ff:80:ba:06:b3:a6:91:82:6a:ca:96:
04:1f:6f:df:6c:7d:e3:fd:a3:db:54:64:c2:6d:99:b5:5c:82:
41:24:d7:2e:9a:56:69:83:da:de:d4:46:e5:b3:6a:a0:76:ce:
bd:de:22:c6:cb:a9:5e:97:d6:20:bf:e6:7e:6c:1d:53:76:6a:
69:3f:63:b8:29:38:3c:1c:42:b5:4c:08:36:e3:d2:ec:93:48:
48:18:2f:e0:44:df:84:33:51:5e:97:08:9f:e6:0f:2b:3c:3a:
17:68:a0:73:b1:6f:70:d0:0c:ab:79:c3:fc:2c:ca:a0:e8:72:
98:3f:30:63:3a:06:08:d7:6d:42:d6:32:da:b5:2e:f2:4a:5b:
57:eb:2f:a2:2a:fb:4a:a9:e5:ae:a5:83:6b:f4:bb:5e:6d:75:
c0:13:7e:95:9a:02:2c:0c:0d:dc:1b:bf:1e:da:10:54:87:1e:
03:9c:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:19:47 2026 by rpki-client