Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: iCFBWdmsg7oRNRUAWCDEMfoBJblMjwMI8jr+QRxo5Bo=
Subject key identifier: 76:42:2A:BB:A3:8A:EE:4B:63:08:91:36:00:8C:C6:0E:82:78:1E:63
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 01A146BC0F20F3EF2F4C6100279B60459C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 168D
Signing time: Fri 16 Oct 2026 22:01:31 +0000
Manifest this update: Fri 16 Oct 2026 22:01:31 +0000
Manifest next update: Sat 17 Oct 2026 22:01:31 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: SKHviXDkagP7B4b9DrRH9gkETX0UNdL2Gx27J4i3b04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:bc:0f:20:f3:ef:2f:4c:61:00:27:9b:60:45:9c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Oct 16 22:01:31 2026 GMT
Not After : Oct 17 22:01:31 2026 GMT
Subject: CN=76422abba38aee4b63089136008cc60e82781e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:9d:64:a9:1e:0d:dd:85:c7:b9:b2:eb:76:
7f:2c:6e:d4:ff:f7:4a:18:8b:c6:6c:bb:f8:52:0d:
25:75:94:0d:00:ca:4c:67:73:4a:6b:f5:0a:63:dd:
cd:50:bf:8c:e9:97:a8:df:cc:55:a5:23:2b:53:da:
6d:58:d5:f2:16:82:aa:0e:72:ef:d4:03:58:92:f0:
d2:f5:a8:ed:2d:f2:98:45:cc:50:f4:90:9a:02:19:
f9:bb:22:d3:28:4f:57:a2:cc:2c:37:f8:88:d1:78:
ec:0c:cc:35:cd:f3:b0:bf:bf:60:dc:e1:f2:79:c4:
63:89:62:a3:63:bb:df:ac:f1:a1:ff:26:b2:cb:2b:
ae:7c:79:79:3c:f1:15:89:39:cd:f1:ad:8f:91:d6:
da:f1:a1:ec:fb:a0:db:d5:74:21:13:8d:c4:98:e9:
3d:0a:de:8e:ef:a2:27:1b:9b:45:50:1b:5b:06:4d:
c9:6d:0c:f2:f0:54:f8:bc:b2:dc:a4:74:b5:40:f1:
aa:d6:3f:dc:9b:91:8e:c2:4d:59:b1:a5:89:7f:d3:
9c:b3:f7:cf:74:80:75:f8:ca:86:a6:c2:05:d7:f6:
c2:3c:83:6a:7b:3a:f8:75:38:43:ba:c2:84:4e:3e:
2d:6c:49:81:6f:2d:49:2c:88:c6:7f:8a:81:62:b3:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:2A:BB:A3:8A:EE:4B:63:08:91:36:00:8C:C6:0E:82:78:1E:63
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:be:50:ea:06:08:1b:63:34:24:69:91:e6:a3:c7:fd:a2:05:
c9:ea:d1:81:b5:76:e2:cc:e5:84:fb:de:76:15:42:90:4b:48:
db:44:70:37:34:dc:fb:8c:13:24:2b:be:ee:47:bf:73:2b:f6:
b0:bd:17:49:47:71:78:9f:b2:ff:c2:97:23:1a:1f:72:8b:ea:
4c:92:4b:82:5c:b0:66:f1:87:32:fb:8b:5a:26:50:e9:6b:d6:
97:11:81:b1:c7:cb:f7:13:77:96:3d:72:47:9a:7a:ab:20:27:
8a:48:d1:19:c9:54:75:3e:c8:e0:d8:ae:a7:e3:c6:2f:d2:08:
80:10:1f:0c:dc:38:57:2d:20:53:ce:c8:94:67:e7:d5:1b:7a:
a0:e3:36:12:57:1b:27:b9:da:ce:39:f5:83:48:2a:ad:06:f3:
7c:17:ae:de:c4:66:2d:f5:dc:54:4b:85:62:e1:2c:28:28:a6:
40:e1:ab:69:43:2d:70:86:d0:8e:74:f6:39:11:58:c2:00:da:
da:16:a8:6a:62:20:49:2f:74:36:28:3c:38:89:be:fc:a2:01:
ee:c2:0f:ce:67:f5:35:54:a5:d1:ad:12:dd:e9:74:72:4a:0d:
5c:38:5e:ab:61:6d:0b:af:6f:7b:0c:bd:c5:5c:45:c4:9f:31:
39:90:4c:f5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFGvA8g8+8vTGEAJ5tgRZwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YzUwMWYzYmZhZDQ5YWQ0ZTU2ZTZlNGMxOGY3NDBlZGVh
MDVkMjEwHhcNMjYxMDE2MjIwMTMxWhcNMjYxMDE3MjIwMTMxWjAzMTEwLwYDVQQD
Eyg3NjQyMmFiYmEzOGFlZTRiNjMwODkxMzYwMDhjYzYwZTgyNzgxZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vqdZKkeDd2Fx7my63Z/LG7U//dK
GIvGbLv4Ug0ldZQNAMpMZ3NKa/UKY93NUL+M6Zeo38xVpSMrU9ptWNXyFoKqDnLv
1ANYkvDS9ajtLfKYRcxQ9JCaAhn5uyLTKE9XoswsN/iI0XjsDMw1zfOwv79g3OHy
ecRjiWKjY7vfrPGh/yayyyuufHl5PPEViTnN8a2Pkdba8aHs+6Db1XQhE43EmOk9
Ct6O76InG5tFUBtbBk3JbQzy8FT4vLLcpHS1QPGq1j/cm5GOwk1ZsaWJf9Ocs/fP
dIB1+MqGpsIF1/bCPINqezr4dThDusKETj4tbEmBby1JLIjGf4qBYrOOnwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHZCKrujiu5LYwiRNgCMxg6CeB5jMB8GA1UdIwQY
MBaAFPjFAfO/rUmtTlbm5MGPdA7eoF0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NVUI4Ny10U2ExT1Z1Ymt3WTkwRHQ2Z1hTRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMzVkNTJjLTZjYzAtNGYwMS05Mzc2
LTY0ZjQ5MmUzMjZlZC8xLzEtTVVCODctdFNhMU9WdWJrd1k5MER0NmdYU0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U3LzM1ZDUyYy02Y2MwLTRmMDEtOTM3Ni02NGY0OTJlMzI2
ZWQvMS8xLU1VQjg3LXRTYTFPVnVia3dZOTBEdDZnWFNFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL5Q
6gYIG2M0JGmR5qPH/aIFyerRgbV24szlhPvedhVCkEtI20RwNzTc+4wTJCu+7ke/
cyv2sL0XSUdxeJ+y/8KXIxofcovqTJJLglywZvGHMvuLWiZQ6WvWlxGBscfL9xN3
lj1yR5p6qyAnikjRGclUdT7I4Niup+PGL9IIgBAfDNw4Vy0gU87IlGfn1Rt6oOM2
ElcbJ7nazjn1g0gqrQbzfBeu3sRmLfXcVEuFYuEsKCimQOGraUMtcIbQjnT2ORFY
wgDa2haoamIgSS90Nig8OIm+/KIB7sIPzmf1NVSl0a0S3el0ckoNXDheq2FtC69v
ewy9xVxFxJ8xOZBM9Q==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:09:04 2026 by rpki-client