Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
File: 1-MVbzhufssnSdXNst6R5YFEv-rs.mft (raw, json)
Hash identifier: E1Ur0h0MKsvIKuDgrRzXGTBEw9Ryaj8NrQK0NFuyzHQ=
Subject key identifier: DD:21:E6:D5:43:B8:91:5C:4E:7C:1D:2C:FB:C9:78:61:DB:2A:43:16
Authority key identifier: F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
Certificate issuer: /CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Certificate serial: 01A0CA7DB18E5E340323F05D4B83F5FCA7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
Manifest number: 0204
Signing time: Tue 22 Sep 2026 19:00:30 +0000
Manifest this update: Tue 22 Sep 2026 19:00:30 +0000
Manifest next update: Wed 23 Sep 2026 19:00:30 +0000
Files and hashes: 1: 1-MVbzhufssnSdXNst6R5YFEv-rs.crl (hash: CQfU820jbp6lqhYxjkc3+SzUL9Pg/99oThXdKlveteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:b1:8e:5e:34:03:23:f0:5d:4b:83:f5:fc:a7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Validity
Not Before: Sep 22 19:00:30 2026 GMT
Not After : Sep 23 19:00:30 2026 GMT
Subject: CN=dd21e6d543b8915c4e7c1d2cfbc97861db2a4316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:72:cb:6f:60:25:15:d9:07:fa:58:21:76:
20:e1:43:04:8c:5a:37:0a:44:9f:f2:72:6d:00:73:
cc:ea:48:bf:a5:d5:9f:de:b3:09:09:ad:1c:97:a2:
b8:4a:97:e5:fe:ee:27:b7:18:c9:37:04:80:de:6c:
5e:2c:ff:bd:38:96:bd:b4:64:33:a5:4f:03:3d:1c:
5c:93:e7:3b:8d:d1:73:d2:a1:bf:04:e6:aa:a3:99:
c7:85:d3:62:40:26:95:30:85:4b:34:cc:fd:9d:df:
4b:8f:55:3d:ca:6a:7f:a8:38:18:bd:40:60:24:72:
8b:f7:64:73:67:50:18:21:84:6d:00:97:f1:98:cb:
5f:4a:80:fd:75:61:1c:a3:9f:80:1c:7b:5a:2c:0c:
c9:cc:b4:37:d5:e4:ea:f9:ac:c9:b8:05:78:a7:9b:
7b:b9:47:43:3f:e0:54:4a:01:e8:f9:51:98:71:0d:
86:a6:21:ed:26:6f:a9:d3:a8:47:cb:c2:45:a6:d7:
33:e0:41:b2:03:48:73:6c:80:f5:03:6b:72:6f:45:
46:ad:a2:a9:10:89:50:64:d2:13:32:01:9e:c9:fb:
98:88:c9:8e:a6:5f:2e:d5:87:7d:20:d7:93:25:a3:
75:6c:8a:55:d7:5f:66:ef:a7:f5:6e:fd:04:81:2f:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:21:E6:D5:43:B8:91:5C:4E:7C:1D:2C:FB:C9:78:61:DB:2A:43:16
X509v3 Authority Key Identifier:
keyid:F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:93:57:87:0d:d8:32:21:18:66:57:b1:04:35:8b:b3:0a:cf:
95:32:d8:20:2e:27:6d:a1:33:09:d8:00:80:d3:74:89:2e:91:
05:65:74:c4:7a:ac:66:83:18:19:28:62:2d:0b:05:10:3b:95:
a2:aa:87:91:c1:ed:d1:71:56:4b:38:d4:51:37:51:f5:78:bf:
ed:f4:07:31:65:92:6e:34:6a:60:53:29:8c:af:8e:58:b9:55:
70:f5:e8:a1:87:0e:5e:c4:3a:09:2a:12:90:4a:cd:67:d2:ee:
0e:67:76:93:27:ea:66:1c:d4:91:47:fe:f7:4a:c4:ba:03:21:
46:80:ae:55:d1:11:43:b8:41:4a:a8:71:61:4d:e1:0d:eb:f4:
45:a7:14:b3:e9:52:05:6d:ed:73:82:45:91:a4:75:1e:08:03:
a2:7c:d7:2b:23:08:aa:b6:6b:fd:75:ca:ec:db:3e:69:d1:cb:
7e:7a:ee:31:5d:08:8c:fe:80:e9:44:04:56:3e:21:a1:ce:ea:
e2:a2:7a:8a:02:d1:65:95:79:fd:53:47:be:73:ad:b3:52:bf:
c2:50:c0:77:4f:7d:53:92:b3:63:a0:79:d2:8d:07:a7:47:96:
10:15:83:1e:52:88:3a:40:a9:c4:9a:e5:20:d4:9b:81:e6:6e:
b1:c8:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:06:59 2026 by rpki-client