Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
File: 1-MVbzhufssnSdXNst6R5YFEv-rs.mft (raw, json)
Hash identifier: UebgfAIir1ZhNxEFAJkLaSdrQXPfgnacysXW8Baefas=
Subject key identifier: 7B:62:D4:FE:B3:E4:00:57:42:5A:1A:0F:7D:BE:C1:E6:41:74:69:3C
Authority key identifier: F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
Certificate issuer: /CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Certificate serial: 019F8FB4E505BC3191E4EDA43856457AABAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
Manifest number: 0161
Signing time: Thu 23 Jul 2026 16:00:24 +0000
Manifest this update: Thu 23 Jul 2026 16:00:24 +0000
Manifest next update: Fri 24 Jul 2026 16:00:24 +0000
Files and hashes: 1: 1-MVbzhufssnSdXNst6R5YFEv-rs.crl (hash: J41HmVfV9vMMpggZKbvk4xb4iK3iPL9T/YtCRcklPqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:e5:05:bc:31:91:e4:ed:a4:38:56:45:7a:ab:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Validity
Not Before: Jul 23 16:00:24 2026 GMT
Not After : Jul 24 16:00:24 2026 GMT
Subject: CN=7b62d4feb3e40057425a1a0f7dbec1e64174693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:e9:34:11:cc:8d:c5:e2:7f:d1:6a:e3:68:
94:88:b9:d6:0f:e8:6e:9e:44:ea:28:e0:a9:f5:53:
4e:99:ba:0d:06:2b:54:d3:fc:ea:33:b8:f2:f8:c4:
79:f2:f5:1b:cd:f0:71:ec:c9:65:0c:7e:82:70:0b:
d4:39:fd:af:02:30:c7:79:0b:97:dc:ca:f0:4c:ac:
dd:f8:11:76:8c:7e:27:b4:08:45:9f:6e:b5:e9:1c:
17:cc:d4:b4:94:db:d6:50:12:ab:0b:37:62:d0:6c:
23:4b:38:8c:52:68:6f:9d:76:81:e2:61:5a:6a:eb:
92:5a:72:89:c2:bb:bb:79:8e:1a:b8:95:05:b4:a2:
05:dd:ab:da:ad:37:3a:70:4e:51:71:da:1d:04:8c:
08:05:c6:d8:0b:79:80:0b:a5:e7:0b:b4:f1:4f:82:
54:19:d0:f2:1f:47:13:6b:7d:df:9c:eb:66:a5:c7:
81:b6:44:e1:e5:01:ac:c6:71:36:6b:bb:99:f8:78:
0b:c8:19:ff:40:11:ed:e9:77:f6:5a:79:f0:f9:5d:
ea:81:0a:ee:8f:8f:e2:15:63:f7:84:ce:e1:2f:bf:
82:0a:1d:da:07:37:84:e5:35:16:bc:d9:57:b0:03:
4d:df:cf:02:10:a7:56:f5:6a:f9:c5:dc:ec:02:7d:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:D4:FE:B3:E4:00:57:42:5A:1A:0F:7D:BE:C1:E6:41:74:69:3C
X509v3 Authority Key Identifier:
keyid:F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:26:a9:f5:05:e5:6e:91:92:70:9c:f2:06:a1:5c:8b:79:00:
6f:f1:8b:09:b5:5f:b3:39:7c:2e:ac:f9:8b:46:1f:15:25:6b:
58:bc:40:12:34:0c:41:9a:a2:3e:3d:e6:f5:85:59:4c:c3:36:
40:49:6a:28:e4:b9:eb:a0:ed:d7:f2:fd:33:f5:c5:3a:80:41:
06:71:c8:43:be:1b:f2:26:a8:7b:e7:78:2e:5f:e3:c1:30:5c:
97:2b:ee:6a:22:6c:a2:62:3a:3e:f5:8e:7b:50:4d:17:6b:b0:
fa:89:20:52:b9:24:49:c9:15:a9:ae:82:ec:d2:31:f9:8b:39:
db:9d:dc:c0:88:ca:24:dd:ff:e6:ab:07:e9:ec:7f:4b:a6:86:
1f:a4:09:21:93:85:b6:1d:d1:05:73:cc:ec:19:57:dd:e5:a8:
5c:8a:a5:84:db:8f:a3:bc:00:70:13:2a:4d:e8:d9:8a:cf:1f:
3f:bd:aa:7c:a3:47:28:b0:7e:81:1a:b5:c5:89:e1:27:7f:8c:
cc:b5:8c:66:42:9b:3f:10:ba:46:ce:0f:5b:d0:75:e9:ec:0b:
8c:7b:75:59:95:e2:98:32:e8:01:e9:a2:0e:f8:76:6c:e9:16:
f2:9f:33:ac:67:0b:83:fa:52:dd:65:9c:11:01:3c:fe:3b:b5:
07:78:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:01 2026 by rpki-client