Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: 8q2pLxnC5hjSgwA2YW+0U+xoN8nBaG/UQuP1ANIQ2N0=
Subject key identifier: 36:C8:5F:0A:C9:A4:88:0E:74:96:4B:4E:34:0B:64:B1:7F:A8:62:E0
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019E30DFE1BC988A01E4E778D3ECCF1730B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 14F4
Signing time: Sat 16 May 2026 13:00:38 +0000
Manifest this update: Sat 16 May 2026 13:00:38 +0000
Manifest next update: Sun 17 May 2026 13:00:38 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: WfpSK693fSTwZwHCo98+oYwINisP+OrERzTQppnu+fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:e1:bc:98:8a:01:e4:e7:78:d3:ec:cf:17:30:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: May 16 13:00:38 2026 GMT
Not After : May 17 13:00:38 2026 GMT
Subject: CN=36c85f0ac9a4880e74964b4e340b64b17fa862e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:47:b7:18:7a:79:d3:d8:87:39:1e:ed:7a:
ca:a6:f3:cb:97:bd:d2:78:f1:58:67:03:2c:c1:2a:
87:94:8f:da:37:90:c5:e1:8f:12:2e:28:c2:a4:72:
d8:c6:6e:21:6f:1a:ab:7a:00:cb:ad:0f:85:49:b4:
48:0a:fb:c6:20:23:85:8c:cb:29:bc:55:c7:d0:f6:
4a:a2:4e:59:eb:8e:be:26:14:44:3f:20:3a:f0:3d:
8e:02:66:d7:39:08:2d:d6:6c:82:03:cf:a9:35:06:
02:34:e8:ed:dc:0b:79:79:f2:31:02:f7:56:bf:b8:
af:1a:07:f1:44:f3:41:60:f8:08:d8:e7:52:f6:9c:
f5:fc:72:e2:7c:86:42:b0:8a:e2:38:1e:07:3b:e2:
48:fa:71:c7:9a:a2:0f:df:8a:8f:ed:78:8b:72:ee:
57:5b:ec:06:28:1d:1d:e4:48:30:30:e9:e4:95:34:
bd:c5:64:8a:0e:c1:27:48:3c:56:48:44:4c:e4:d0:
07:bd:a1:bd:73:dc:b5:ea:45:4b:61:fe:98:e1:40:
61:0c:53:b2:46:c7:69:fa:75:15:d6:fd:4f:08:f4:
ac:2c:7d:25:34:72:60:6b:41:e3:35:76:c1:08:c7:
dd:7e:b9:93:f1:a4:ad:d7:d7:8a:4e:38:35:4e:68:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C8:5F:0A:C9:A4:88:0E:74:96:4B:4E:34:0B:64:B1:7F:A8:62:E0
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:c2:e9:a3:fa:d7:9b:3d:e2:5d:a2:ca:c2:16:f6:6e:2a:
45:bb:d6:e2:9d:08:c0:7a:a7:98:5b:55:f7:e3:b2:f0:d4:a1:
55:b6:44:ca:a4:1e:5f:17:21:fb:9b:23:b5:d9:72:de:c4:5a:
74:32:2c:c9:17:50:19:21:0f:d2:cd:f2:e8:d2:15:b7:ae:4c:
16:fa:05:f6:3c:44:ba:60:04:23:d3:85:27:da:1a:25:c1:79:
0a:9b:c9:5f:eb:b8:d4:04:dc:fb:0b:85:03:36:f9:f6:5d:91:
26:ee:3e:27:ba:99:2f:6b:b2:e0:d2:56:3d:ef:cb:5e:c0:f3:
4a:81:04:1e:b3:8f:91:64:31:84:c7:8e:98:f0:3f:91:cb:f3:
70:e1:d1:50:c4:51:cf:5a:15:5b:e8:8c:b4:7c:60:1e:85:ac:
76:de:e7:37:8a:23:ba:74:65:23:38:e4:a1:57:a3:21:66:86:
b4:9e:44:c9:43:17:98:c0:ac:00:be:9f:1b:ad:04:a4:22:82:
91:b7:3b:96:12:6a:0e:02:98:36:6a:96:d4:64:b9:fb:22:bb:
d5:a6:e6:f3:13:e5:ea:d2:f4:15:01:77:a4:a9:56:56:f4:11:
31:4e:d8:fa:75:41:77:9e:5b:66:fe:f5:c0:d9:e9:30:d6:a9:
bf:2b:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:46 2026 by rpki-client