Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
File: 1-MVbzhufssnSdXNst6R5YFEv-rs.mft (raw, json)
Hash identifier: s6CL0+mKJumJSmwmuP/13Or8S8pr8QwOUL8hkKLm/C8=
Subject key identifier: A6:12:40:7E:67:5B:4D:B7:4B:98:F7:6A:9C:95:BE:23:95:C1:CB:D6
Authority key identifier: F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
Certificate issuer: /CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Certificate serial: 019D333EB29EE8985B8262DBA6104E46C744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
Manifest number: 28
Signing time: Sat 28 Mar 2026 07:00:40 +0000
Manifest this update: Sat 28 Mar 2026 07:00:40 +0000
Manifest next update: Sun 29 Mar 2026 07:00:40 +0000
Files and hashes: 1: 1-MVbzhufssnSdXNst6R5YFEv-rs.crl (hash: YzuKSfPn+4GM/HjEAR9D6v6eTM8QhSG/QWoca5iQJf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:b2:9e:e8:98:5b:82:62:db:a6:10:4e:46:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Validity
Not Before: Mar 28 07:00:40 2026 GMT
Not After : Mar 29 07:00:40 2026 GMT
Subject: CN=a612407e675b4db74b98f76a9c95be2395c1cbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:39:b9:8b:0a:58:af:1f:da:d6:da:4a:c7:
ef:cc:da:39:1c:77:8e:03:b0:a2:df:71:70:3c:0f:
be:71:80:97:25:5f:19:c1:a2:d6:da:ab:4b:f0:94:
cd:34:3c:1f:e7:6f:25:3d:0b:81:94:3c:07:3a:53:
0a:f4:13:80:df:70:72:01:f2:69:50:dd:05:95:fc:
e0:84:58:c0:bb:31:8d:8f:ee:9e:0d:92:42:b3:b8:
fe:5c:eb:21:43:79:aa:93:b9:f1:64:01:9f:6c:bb:
48:c1:3c:8c:fd:fd:86:6c:eb:fc:c0:fa:5d:9e:5f:
bf:82:a1:3f:a9:e5:be:ba:2c:36:24:0a:c7:74:24:
e8:e8:ab:78:bd:8f:5f:d7:7e:6d:4f:33:07:d0:5d:
2a:5d:1d:e4:db:93:97:4f:64:09:64:41:a5:eb:4a:
a0:b8:80:d3:ca:e7:7a:35:ca:be:e8:72:c2:75:66:
0e:b2:74:01:c7:17:5a:68:01:50:eb:b9:24:3f:b2:
a7:67:69:64:e9:10:44:8f:a7:ff:ab:bb:fe:75:ee:
bb:bf:38:ad:a9:ed:5d:f9:a8:02:bf:6a:ef:0e:be:
73:a6:8b:45:72:2b:25:ee:eb:5d:43:50:c7:f0:88:
eb:1b:9c:a7:df:4e:75:77:58:45:e8:79:1d:38:b3:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:12:40:7E:67:5B:4D:B7:4B:98:F7:6A:9C:95:BE:23:95:C1:CB:D6
X509v3 Authority Key Identifier:
keyid:F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3d:c4:77:99:d9:20:56:b9:ef:e0:1f:54:66:ea:f7:5a:e3:
df:e8:18:ba:cc:36:d7:d1:35:2c:d1:4c:9f:63:92:2e:3f:ea:
32:bb:ab:9d:f4:21:59:fe:d2:15:65:02:e4:6f:7a:5a:f2:45:
5a:d4:eb:81:16:e0:77:f5:99:d3:b6:f3:c1:18:0c:0c:4f:2c:
3f:fa:c8:a6:21:e3:7e:fc:8c:66:8f:5d:a4:e4:db:15:08:be:
27:27:55:72:1a:e9:c4:96:ab:3c:e0:25:20:b3:d7:f5:92:78:
83:57:57:74:91:dd:c4:25:a5:65:dc:ce:ce:36:d6:b5:99:b2:
7e:e1:ff:75:56:18:2c:cf:1a:b1:26:90:70:51:5f:8c:a7:0b:
e8:6c:9d:02:c4:57:ca:c2:d7:03:18:23:94:d7:92:90:6e:d3:
e8:6c:2d:20:4b:f0:24:ff:6e:e1:33:15:98:18:03:ef:0a:5e:
da:73:5d:a0:54:af:8c:eb:e7:f7:99:ac:1a:b7:fb:70:e3:03:
8f:d1:98:68:0d:dd:ce:19:14:8d:15:07:39:f5:6e:23:18:3f:
2b:17:04:74:9b:41:0b:bd:79:fd:04:8d:69:08:4c:fa:7f:61:
83:da:da:0b:35:c7:95:69:cd:23:fd:01:c3:63:8c:53:88:df:
84:b6:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:44 2026 by rpki-client