Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: VdSZvWafaxoiIa7vWS0/OZ6tLC0qu6+Z4L/k/p4gUD8=
Subject key identifier: 90:FB:48:52:FA:E6:E9:EB:A8:CD:69:89:24:5C:76:51:8E:74:54:E7
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019F94366634CC927F66D8955BD3C4FA62AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 15AC
Signing time: Fri 24 Jul 2026 13:00:20 +0000
Manifest this update: Fri 24 Jul 2026 13:00:20 +0000
Manifest next update: Sat 25 Jul 2026 13:00:20 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: S7nN6zddYtuwXsAPUoGiBm2OWsmIUtu8/cPugMiTe9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:66:34:cc:92:7f:66:d8:95:5b:d3:c4:fa:62:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Jul 24 13:00:20 2026 GMT
Not After : Jul 25 13:00:20 2026 GMT
Subject: CN=90fb4852fae6e9eba8cd6989245c76518e7454e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:25:63:a8:7e:d9:26:15:f3:a1:b7:6a:c2:e8:
2e:f3:ed:3e:03:78:f9:27:2f:f3:cb:47:0e:2b:d5:
20:96:47:5e:d4:fa:9d:ec:60:76:2e:9c:ae:c0:a2:
96:3c:3b:bf:94:29:f2:97:80:99:a2:4d:24:bb:0c:
0d:26:25:52:a3:ee:0d:ee:26:f9:d1:da:92:98:00:
87:fb:31:e9:5e:67:f4:c6:27:7e:21:3a:aa:d9:82:
87:ab:91:20:91:39:b9:c2:23:b8:88:61:79:4d:bf:
ab:d0:9d:5c:50:7e:fa:72:15:22:6a:36:69:3a:0b:
aa:37:53:c4:5b:48:d7:92:e7:28:15:fe:da:c3:44:
35:24:2e:a9:6f:0a:2b:2f:68:e4:b5:5b:0c:f1:32:
ed:66:50:af:5d:fb:4b:5e:8b:0b:dd:ab:45:7a:17:
82:48:67:af:54:00:a0:b3:07:be:bc:48:71:91:d7:
af:14:a2:e7:15:3c:f5:92:12:80:0a:34:32:6c:12:
9a:89:0a:c4:a7:aa:32:f0:ac:8e:c2:5d:97:a1:86:
cc:bf:25:36:a6:9b:8e:5f:6d:13:17:1e:df:8d:ea:
9d:2e:a2:ea:80:45:e4:9e:27:10:74:66:96:4f:d1:
68:7a:37:ab:5d:69:98:e2:54:09:ce:4d:e6:14:99:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:48:52:FA:E6:E9:EB:A8:CD:69:89:24:5C:76:51:8E:74:54:E7
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3d:56:7f:38:57:55:27:12:4c:4d:f3:9f:71:99:2c:7d:d7:
92:89:ca:5c:f0:e9:30:6f:b9:fc:d4:d9:1a:6b:d9:56:17:85:
3a:91:16:0e:fe:27:21:1c:32:ec:b8:17:81:c2:29:34:61:53:
ea:45:38:f2:26:00:42:b0:b9:e4:e6:98:98:60:44:a1:c4:ed:
68:a6:d4:5f:9a:88:e0:13:92:5f:9c:e4:18:26:f2:54:6c:9a:
af:dd:12:23:df:c0:27:99:79:28:6c:46:f7:e1:68:7e:58:71:
dc:3e:af:b8:99:63:a8:17:91:ee:b2:5e:3d:e8:70:8d:97:86:
fc:e8:e3:08:57:ac:85:65:f7:19:09:7d:2d:b3:63:8c:04:46:
14:ed:6a:93:cc:68:f2:6e:24:92:bc:e9:19:56:bb:43:1d:09:
a9:0c:0a:d3:97:b6:99:6f:32:4f:4d:3a:5d:53:2f:0d:2d:3d:
3b:67:1e:bb:eb:45:2a:16:7c:80:54:80:0d:81:61:7f:77:a0:
a7:b5:c8:a2:99:00:d6:59:df:27:92:60:2a:28:a1:a9:f2:20:
79:74:f5:10:3c:4d:09:5e:f6:63:15:47:e4:3f:92:79:1c:62:
60:2a:f7:8d:2c:4f:d7:a1:8a:46:8c:f0:eb:f2:b2:b3:e0:d6:
c4:9a:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:39 2026 by rpki-client