Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: oAEjJHmPUk+hjZgNXpXSZcXxdXk85DeC8ie7SNPDPhM=
Subject key identifier: 51:13:AA:C4:FD:F5:AD:C5:09:91:58:DF:91:2B:0C:B1:2D:68:FF:9F
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 01A0E81C368708D6D4B416A5AE0208BAC181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 165C
Signing time: Mon 28 Sep 2026 13:02:37 +0000
Manifest this update: Mon 28 Sep 2026 13:02:37 +0000
Manifest next update: Tue 29 Sep 2026 13:02:37 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: b1U78SBWS9fCJEYXwWC0quAqqbE3v8oTdRKPoC6May8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:36:87:08:d6:d4:b4:16:a5:ae:02:08:ba:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Sep 28 13:02:37 2026 GMT
Not After : Sep 29 13:02:37 2026 GMT
Subject: CN=5113aac4fdf5adc5099158df912b0cb12d68ff9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:85:3c:86:de:76:18:9d:98:4b:2c:d4:a0:
25:6b:32:f1:75:a0:0e:c5:07:2d:a3:45:29:3f:36:
49:76:3d:18:8f:d6:ed:b4:68:47:be:fa:8c:18:9a:
5a:2e:1c:3c:b5:8f:68:d3:49:c0:8b:f9:e2:b7:3c:
28:0d:80:f9:82:f9:9a:de:23:82:2f:b4:91:a5:76:
d2:74:19:53:21:ae:9f:b5:bf:25:d9:0d:24:40:de:
00:88:e0:b5:60:d4:14:de:a2:1f:1b:14:e0:a9:db:
be:6d:6d:6d:af:ed:e1:45:ee:e7:64:e7:f7:50:11:
95:fc:fd:da:26:3d:f6:97:46:89:bc:61:35:7c:a2:
06:aa:97:d0:2f:9f:22:91:14:ba:28:48:d7:b9:26:
86:a7:97:ba:e7:11:5d:b2:5f:a8:6e:98:95:85:1b:
75:03:9e:1c:19:46:6b:ed:0b:bc:94:fd:a5:07:60:
dc:52:67:3c:e1:e0:2a:60:88:2a:40:a6:6b:78:43:
bf:7c:bd:99:58:ab:46:8b:f4:56:68:47:b3:5b:a4:
ed:8d:2e:12:de:c2:76:6b:a6:95:16:b8:e7:09:7e:
d3:e5:b9:49:23:8d:c5:f5:2c:aa:47:3a:22:a3:5a:
b0:d3:73:da:f1:33:90:3b:f0:5c:a5:6e:f6:d7:97:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:AA:C4:FD:F5:AD:C5:09:91:58:DF:91:2B:0C:B1:2D:68:FF:9F
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:60:36:76:d6:c8:74:b7:b5:ac:03:d4:38:c6:84:d2:a5:95:
5a:ca:8e:12:52:c7:d2:09:34:21:11:dd:d0:f3:e4:76:85:f2:
db:57:b7:33:80:d1:bc:8b:8a:90:ca:ac:1d:38:22:95:7b:2e:
a2:b1:45:a3:4f:b5:e0:67:08:d4:18:fa:74:d9:15:3f:a9:6a:
8c:ba:26:ba:89:36:c2:48:45:06:09:c0:eb:dc:7a:2f:eb:d7:
dc:9d:a6:41:98:c6:b4:95:6b:94:cf:49:97:41:9c:0c:21:e3:
d3:02:0e:db:99:59:75:17:0d:ba:7a:94:74:c5:49:f3:37:46:
38:b9:f0:d8:a8:6b:de:7d:30:7e:e2:fa:f9:71:c9:d1:65:73:
9d:68:b7:11:d1:8f:5d:10:77:a9:99:57:24:b2:e2:94:b8:ff:
8e:c8:27:f4:6c:55:5d:48:74:51:61:c7:bd:e2:1a:f7:4b:3c:
12:d1:5f:fb:ae:5a:46:a3:53:95:74:6d:4e:60:b6:9c:7c:a9:
ba:b4:fe:bc:d3:cb:11:d3:8a:fd:18:27:b8:9a:39:ac:d4:d7:
26:e1:b5:5e:ab:36:33:46:d9:80:af:ed:89:f2:94:67:a1:cb:
8f:e4:cb:3e:64:50:e7:5e:8a:16:3d:13:a0:59:76:df:e9:e6:
64:5b:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:08:28 2026 by rpki-client