Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
File: 1-MVbzhufssnSdXNst6R5YFEv-rs.mft (raw, json)
Hash identifier: tjAIxiOURlPeo3OdQbrdrtLRgm7xtdiCSvVVl0k+MEI=
Subject key identifier: 75:58:5C:7B:5A:6E:07:34:6F:AF:41:1D:C2:B6:4E:8E:EF:D8:99:3C
Authority key identifier: F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
Certificate issuer: /CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Certificate serial: 019E1EDA03C805658C830AD28957FF6A0895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
Manifest number: A2
Signing time: Wed 13 May 2026 01:01:04 +0000
Manifest this update: Wed 13 May 2026 01:01:04 +0000
Manifest next update: Thu 14 May 2026 01:01:04 +0000
Files and hashes: 1: 1-MVbzhufssnSdXNst6R5YFEv-rs.crl (hash: YJshStXquOHtZtRj2sXK0qVRWv4Ug+ylyLhR8HDjG5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:03:c8:05:65:8c:83:0a:d2:89:57:ff:6a:08:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Validity
Not Before: May 13 01:01:04 2026 GMT
Not After : May 14 01:01:04 2026 GMT
Subject: CN=75585c7b5a6e07346faf411dc2b64e8eefd8993c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:b1:fe:b0:bd:0b:c8:62:18:41:be:38:0f:
11:34:60:8a:85:57:4a:6c:86:84:6d:90:01:cd:f3:
ab:73:85:7b:99:68:9e:88:86:5f:6a:ef:d8:08:92:
f5:72:2c:0d:dd:c0:14:96:d0:29:b6:4f:59:d1:54:
57:bf:6b:3f:31:e9:01:f4:86:94:fc:ce:6f:69:01:
e1:0b:04:31:b4:b9:0f:3b:32:39:15:37:88:e5:e0:
c7:a7:e8:41:c6:a3:99:1c:12:91:17:ee:64:c5:fa:
22:46:e4:9c:5c:41:00:52:ae:0d:89:bb:d3:20:2d:
25:d6:bb:36:0c:8b:d2:ed:e5:fd:f5:4e:f3:4a:51:
3e:e0:a9:d3:c8:cf:a3:ab:40:92:f8:1d:b2:cd:41:
cf:b4:a3:be:ad:76:30:03:17:a3:6a:36:ff:73:b4:
13:4e:47:d3:b9:95:c3:0e:09:1f:1a:30:b6:eb:9d:
40:b8:1d:c7:72:8b:6a:df:c4:52:45:70:3e:a1:3e:
f9:89:2f:3a:91:f2:bc:71:70:0a:e3:89:7e:0b:f3:
78:01:5b:02:17:bc:58:46:b4:84:55:62:e6:39:8e:
77:d1:00:0d:e8:23:97:e0:5f:9e:fa:5c:7a:9b:3d:
e0:92:d0:e3:85:44:13:af:61:e5:f1:32:cf:f8:89:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:58:5C:7B:5A:6E:07:34:6F:AF:41:1D:C2:B6:4E:8E:EF:D8:99:3C
X509v3 Authority Key Identifier:
keyid:F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:54:c6:26:b9:0c:70:b0:81:64:de:1b:f4:0b:fb:26:8b:05:
e9:30:57:c5:3b:5a:98:fd:9a:01:87:c6:bf:f6:56:d0:91:e6:
63:87:b1:0d:88:0f:55:ab:0b:65:7e:20:e1:80:f5:61:29:f5:
9f:aa:05:f2:e8:1c:32:8d:4a:cc:9f:29:ec:65:3e:e6:dc:3b:
69:ad:90:c1:60:92:4e:d8:32:5f:51:3a:66:a9:93:02:29:8f:
74:88:33:30:8b:86:3e:18:9d:12:2c:31:a5:ab:01:f0:40:e1:
7a:2f:e9:19:d6:23:de:37:3c:8d:19:c6:1d:c5:f7:b7:bd:ce:
26:1c:8b:7a:80:39:3d:05:d8:99:d8:f9:ec:e0:98:30:71:fd:
de:b7:fc:52:16:cb:90:3e:6d:04:8f:c6:1d:7d:74:a8:c7:7e:
83:06:e3:e0:c3:14:e7:8a:74:6d:cd:8c:1a:e9:ee:a7:04:1f:
e9:b7:56:a4:9d:a9:da:21:e0:ac:c6:2e:77:3e:62:1f:9d:9d:
0b:aa:3d:b0:14:16:80:f4:59:57:9b:a2:32:cb:1d:67:9c:68:
b0:7f:3d:63:8d:3e:14:c9:2c:cc:10:7d:93:00:17:32:e7:1e:
51:af:6f:26:ba:6b:bd:b8:be:48:0f:b8:56:4a:bb:87:50:20:
0c:f4:5e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:26 2026 by rpki-client