Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
File: 1-MVbzhufssnSdXNst6R5YFEv-rs.mft (raw, json)
Hash identifier: 1Fhs0P5sE0SJYny5pK7hu4jCrSXHkmHOCYllRBAt4gI=
Subject key identifier: A3:6D:83:92:21:7C:DF:EE:19:EA:83:D5:86:E5:C0:F3:30:CE:20:34
Authority key identifier: F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
Certificate issuer: /CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Certificate serial: 019D3909F4040086F86F0E77542CC738D9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
Manifest number: 2B
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: 1-MVbzhufssnSdXNst6R5YFEv-rs.crl (hash: La1hgMx4yZcEYkqFURriwmRtseDjVxS/k90ZZGhBQQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f4:04:00:86:f8:6f:0e:77:54:2c:c7:38:d9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c55bce1b9fb2c9d275736cb7a47960512ffabb
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=a36d8392217cdfee19ea83d586e5c0f330ce2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:ae:98:81:a2:65:7f:b2:54:50:6f:e2:f2:
a7:40:8d:47:dc:54:b6:ce:10:67:db:c0:d0:74:08:
c7:d2:c5:d0:b8:94:79:a8:41:23:be:90:82:70:b2:
5b:68:92:85:63:88:29:0e:e7:58:3c:0c:aa:71:fc:
70:ff:0c:3c:51:0c:1a:56:b0:1d:c6:8b:75:96:36:
c2:d9:64:17:93:e7:b1:69:5d:8a:69:22:08:d8:36:
4b:89:39:eb:16:10:e2:a0:03:7f:f0:da:1f:53:0f:
67:66:e9:21:62:df:06:d5:93:4f:f5:5f:fb:6b:14:
28:a5:63:80:e0:6b:e2:b1:c4:d3:36:97:6b:57:ac:
7e:a6:c6:21:b3:80:ad:46:6d:29:3d:66:d4:b8:60:
ed:db:e6:89:07:bc:09:e2:c7:a9:a7:33:4f:72:8b:
e5:52:dc:ba:17:3b:a9:5c:43:eb:2f:35:1a:19:d8:
2f:da:34:44:71:47:6a:74:f9:1f:3d:d8:ea:5e:aa:
f3:7c:46:10:51:bb:b7:31:ed:9e:be:58:2b:3c:3b:
1b:4b:5f:34:13:d2:33:03:12:8a:84:2f:6b:fd:b6:
49:0a:d3:b2:57:86:81:0d:c5:b1:c5:9b:96:cd:50:
1e:fc:34:fc:9f:65:70:bc:43:84:e2:3d:dc:7d:b4:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:83:92:21:7C:DF:EE:19:EA:83:D5:86:E5:C0:F3:30:CE:20:34
X509v3 Authority Key Identifier:
keyid:F8:C5:5B:CE:1B:9F:B2:C9:D2:75:73:6C:B7:A4:79:60:51:2F:FA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MVbzhufssnSdXNst6R5YFEv-rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/27f116-3e3a-4f35-97a8-9ab3411eb4eb/1/1-MVbzhufssnSdXNst6R5YFEv-rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:72:eb:9d:83:61:33:91:20:91:9a:bf:81:ad:20:3d:ce:ad:
d7:03:22:21:ea:f1:65:92:18:40:4c:04:57:9b:33:5b:e4:69:
24:85:f1:b1:ee:8e:a8:30:85:c1:6c:7a:c3:82:57:e1:b4:bb:
47:6b:28:00:eb:0e:f6:4e:23:67:42:61:d2:80:23:fe:80:ae:
9e:f9:b3:6a:25:dc:d5:c5:55:7e:d2:a9:be:f8:3b:b2:bb:cf:
0b:20:c7:50:92:ef:9d:ae:e6:6d:19:15:e2:9d:97:8a:10:ca:
6a:c0:1c:97:8d:8c:bd:b7:b9:8a:cc:49:dc:b6:cd:1a:5f:f7:
43:87:d1:f4:c4:7c:c0:47:fc:d1:31:01:71:ee:ec:84:de:48:
17:a6:1a:15:4b:e8:fe:35:b3:34:ae:fd:f9:4d:ac:97:b0:c3:
d4:c4:e4:fa:c7:cf:bc:e7:88:4c:2e:0e:5e:9f:c9:1d:30:67:
c3:ce:e2:02:98:b6:62:f5:f4:30:7e:fc:6b:ba:8b:27:be:b1:
89:ca:18:e4:ce:6c:9e:e3:d0:0d:e1:0d:e5:c1:f1:7e:12:90:
2b:96:0e:ec:b7:67:93:46:09:a3:5e:63:8f:03:01:3b:d4:c0:
bb:df:b2:3a:cd:79:bb:1f:3a:e4:61:f1:96:8b:78:56:23:71:
d9:d3:54:d5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ05CfQEAIb4bw53VCzHONnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YzU1YmNlMWI5ZmIyYzlkMjc1NzM2Y2I3YTQ3OTYwNTEy
ZmZhYmIwHhcNMjYwMzI5MTAwMDQ2WhcNMjYwMzMwMTAwMDQ2WjAzMTEwLwYDVQQD
EyhhMzZkODM5MjIxN2NkZmVlMTllYTgzZDU4NmU1YzBmMzMwY2UyMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5qumIGiZX+yVFBv4vKnQI1H3FS2
zhBn28DQdAjH0sXQuJR5qEEjvpCCcLJbaJKFY4gpDudYPAyqcfxw/ww8UQwaVrAd
xot1ljbC2WQXk+exaV2KaSII2DZLiTnrFhDioAN/8NofUw9nZukhYt8G1ZNP9V/7
axQopWOA4GviscTTNpdrV6x+psYhs4CtRm0pPWbUuGDt2+aJB7wJ4seppzNPcovl
Uty6FzupXEPrLzUaGdgv2jREcUdqdPkfPdjqXqrzfEYQUbu3Me2evlgrPDsbS180
E9IzAxKKhC9r/bZJCtOyV4aBDcWxxZuWzVAe/DT8n2VwvEOE4j3cfbTJ5wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKNtg5IhfN/uGeqD1YblwPMwziA0MB8GA1UdIwQY
MBaAFPjFW84bn7LJ0nVzbLekeWBRL/q7MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NVmJ6aHVmc3NuU2RYTnN0NlI1WUZFdi1ycy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMjdmMTE2LTNlM2EtNGYzNS05N2E4
LTlhYjM0MTFlYjRlYi8xLzEtTVZiemh1ZnNzblNkWE5zdDZSNVlGRXYtcnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IwLzI3ZjExNi0zZTNhLTRmMzUtOTdhOC05YWIzNDExZWI0
ZWIvMS8xLU1WYnpodWZzc25TZFhOc3Q2UjVZRkV2LXJzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinLr
nYNhM5EgkZq/ga0gPc6t1wMiIerxZZIYQEwEV5szW+RpJIXxse6OqDCFwWx6w4JX
4bS7R2soAOsO9k4jZ0Jh0oAj/oCunvmzaiXc1cVVftKpvvg7srvPCyDHUJLvna7m
bRkV4p2XihDKasAcl42Mvbe5isxJ3LbNGl/3Q4fR9MR8wEf80TEBce7shN5IF6Ya
FUvo/jWzNK79+U2sl7DD1MTk+sfPvOeITC4OXp/JHTBnw87iApi2YvX0MH78a7qL
J76xicoY5M5snuPQDeEN5cHxfhKQK5YO7Ldnk0YJo15jjwMBO9TAu9+yOs15ux86
5GHxlot4ViNx2dNU1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:27 2026 by rpki-client