Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
File: 1-MVbzhufssnSdXNst6R5YFEv-rs.mft (raw, json)
Hash identifier: r65N5U5PyKXds9XCjZ0uhXobIqjUm2Xr0Yw5F8KOXbs=
Subject key identifier: AC:42:EA:DE:AE:5A:59:35:15:EB:76:E6:94:14:2F:7E:59:DE:F2:14
Authority key identifier: F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
Certificate issuer: /CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Certificate serial: 01A1DEA78B7FF88299B5AA84FBDAF9DDCBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
Manifest number: 0293
Signing time: Sun 15 Nov 2026 10:01:24 +0000
Manifest this update: Sun 15 Nov 2026 10:01:24 +0000
Manifest next update: Mon 16 Nov 2026 10:01:24 +0000
Files and hashes: 1: 1-MVbzhufssnSdXNst6R5YFEv-rs.crl (hash: urEB9t2V5s8KD/TpfWhp7kobn3N0xKWbWjOQUNTxLXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:8b:7f:f8:82:99:b5:aa:84:fb:da:f9:dd:cb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Validity
Not Before: Nov 15 10:01:24 2026 GMT
Not After : Nov 16 10:01:24 2026 GMT
Subject: CN=ac42eadeae5a593515eb76e694142f7e59def214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:5e:b8:3e:c9:6e:98:49:11:9c:91:19:7f:
87:56:fe:27:8f:4f:6b:43:f6:94:d8:1d:32:b6:27:
d3:40:bc:07:b6:3b:fb:90:be:db:6c:31:35:20:2b:
39:ab:75:9d:9a:42:6e:5a:0b:ed:9a:2a:66:51:ed:
64:83:bd:07:7f:7d:e5:a4:64:19:9d:d3:f2:c0:b4:
61:8a:7c:33:f4:b5:ed:a9:de:c7:b5:ce:3e:ad:97:
75:27:0d:13:bc:98:fb:b6:50:0b:89:da:f1:e7:39:
d1:de:c3:a4:80:0b:2d:cb:09:7c:b8:55:0d:50:d0:
fc:54:7f:9d:ce:34:1c:94:2f:a8:0f:34:70:55:03:
94:93:2c:20:06:b1:93:f5:cb:85:d4:77:4b:c8:1e:
a6:53:2b:b3:9f:c5:64:06:e2:c9:9e:f0:7f:7d:23:
14:c7:22:77:ae:0a:c9:83:ac:65:f8:8c:5f:df:05:
72:42:9a:b1:62:50:8e:f5:94:21:76:08:fb:0d:ca:
72:bb:1f:7f:b2:4d:8a:7b:61:59:09:61:e4:3e:9f:
02:27:d8:11:04:e4:76:54:f5:91:97:6d:83:e7:89:
82:cb:7c:c3:b3:19:0f:e0:84:52:11:57:c2:94:8d:
e9:2a:55:14:de:b2:cc:e2:72:a6:6c:d7:ec:71:91:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:42:EA:DE:AE:5A:59:35:15:EB:76:E6:94:14:2F:7E:59:DE:F2:14
X509v3 Authority Key Identifier:
keyid:F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:be:3b:9c:8b:92:8e:38:80:36:2d:4a:e9:ce:da:96:ca:10:
3c:37:7f:6a:1b:9c:7f:cf:93:a7:57:95:7d:b4:44:ec:79:b0:
e7:60:52:1f:d7:14:1a:70:64:04:1e:d4:94:a4:7a:ab:0e:1f:
1c:1d:06:b9:3b:ee:67:bc:fb:f6:e4:a0:b1:03:5b:a8:c9:c4:
d8:02:c8:43:e6:69:58:cb:9b:02:6c:ff:ea:a4:9e:70:fc:c0:
81:b1:27:0c:09:ee:01:97:a0:5d:96:a6:aa:ba:c0:14:b6:45:
0e:7b:80:9a:84:77:c8:b3:5e:0c:cd:4f:1a:9a:74:b6:c7:7f:
31:3f:4a:d8:84:dd:b7:98:71:f2:a2:44:14:25:f0:04:78:96:
29:29:72:cb:c0:0e:5f:a8:7a:d3:99:0d:38:31:af:28:86:40:
16:0f:07:aa:d0:f0:e2:f3:7c:45:af:7b:f2:7a:1d:a0:61:d6:
47:19:f0:c8:ce:28:cd:c1:63:e4:f4:15:69:fb:95:d2:cb:4f:
72:58:e5:ea:94:ae:1c:67:45:e8:01:e4:49:01:08:17:25:dc:
be:95:c2:67:12:12:1e:78:0a:dd:25:51:33:a4:01:cc:af:d0:
0b:6a:26:ab:95:14:3f:c9:e9:9c:56:1b:c4:a6:8b:dd:9d:10:
dc:d9:fe:88
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHep4t/+IKZtaqE+9r53cvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YzU1YmNlMWI5ZmIyYzlkMjc1NzM2Y2I3YTQ3OTYwNTEy
ZmZhYmIwHhcNMjYxMTE1MTAwMTI0WhcNMjYxMTE2MTAwMTI0WjAzMTEwLwYDVQQD
EyhhYzQyZWFkZWFlNWE1OTM1MTVlYjc2ZTY5NDE0MmY3ZTU5ZGVmMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ReuD7JbphJEZyRGX+HVv4nj09r
Q/aU2B0ytifTQLwHtjv7kL7bbDE1ICs5q3WdmkJuWgvtmipmUe1kg70Hf33lpGQZ
ndPywLRhinwz9LXtqd7Htc4+rZd1Jw0TvJj7tlALidrx5znR3sOkgAstywl8uFUN
UND8VH+dzjQclC+oDzRwVQOUkywgBrGT9cuF1HdLyB6mUyuzn8VkBuLJnvB/fSMU
xyJ3rgrJg6xl+Ixf3wVyQpqxYlCO9ZQhdgj7Dcpyux9/sk2Ke2FZCWHkPp8CJ9gR
BOR2VPWRl22D54mCy3zDsxkP4IRSEVfClI3pKlUU3rLM4nKmbNfscZFYaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKxC6t6uWlk1Fet25pQUL35Z3vIUMB8GA1UdIwQY
MBaAFPjFW84bn7LJ0nVzbLekeWBRL/q7MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NVmJ6aHVmc3NuU2RYTnN0NlI1WUZFdi1ycy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMjdmMTE2LTNlM2EtNGYzNS05N2E4
LTlhYjM0MTFlYjRlYi8xLzEtTVZiemh1ZnNzblNkWE5zdDZSNVlGRXYtcnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IwLzI3ZjExNi0zZTNhLTRmMzUtOTdhOC05YWIzNDExZWI0
ZWIvMS8xLU1WYnpodWZzc25TZFhOc3Q2UjVZRkV2LXJzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvL47
nIuSjjiANi1K6c7alsoQPDd/ahucf8+Tp1eVfbRE7Hmw52BSH9cUGnBkBB7UlKR6
qw4fHB0GuTvuZ7z79uSgsQNbqMnE2ALIQ+ZpWMubAmz/6qSecPzAgbEnDAnuAZeg
XZamqrrAFLZFDnuAmoR3yLNeDM1PGpp0tsd/MT9K2ITdt5hx8qJEFCXwBHiWKSly
y8AOX6h605kNODGvKIZAFg8HqtDw4vN8Ra978nodoGHWRxnwyM4ozcFj5PQVafuV
0stPcljl6pSuHGdF6AHkSQEIFyXcvpXCZxISHngK3SVRM6QBzK/QC2omq5UUP8np
nFYbxKaL3Z0Q3Nn+iA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:24:46 2026 by rpki-client