Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: 5225scxxS7zmHLELhreHGBmpx4GstMAa5XrwhAvcdg8=
Subject key identifier: 0A:0E:65:BC:C0:D2:90:49:2A:EC:5A:76:6A:3C:79:EB:BD:D9:34:28
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019D37C0D69E941CB90133A038532D627DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 1473
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: H75IdkRaT5jBzuutfRN6pVRNehC8bwB33a6GxvEtfgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d6:9e:94:1c:b9:01:33:a0:38:53:2d:62:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=0a0e65bcc0d290492aec5a766a3c79ebbdd93428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:3d:24:3b:c9:63:57:d6:7e:f0:f2:8b:2a:
86:91:aa:5f:d3:47:9e:ac:b7:06:14:c7:8f:67:d4:
87:a2:91:16:fd:c8:61:9b:fe:17:05:99:16:8a:45:
58:8b:56:9f:f0:1c:de:25:a1:6c:f6:25:a7:2b:61:
53:c7:35:08:42:ec:16:39:c9:79:f8:35:be:4b:9b:
19:40:9a:cb:eb:8e:26:8d:4f:89:25:91:63:c7:dd:
df:7e:32:3b:cd:26:ea:b9:e9:49:68:26:e6:74:69:
95:24:16:1c:fb:90:d4:50:c6:97:6f:74:36:ac:3f:
d6:5b:91:a4:37:57:da:81:c6:d7:8f:56:f3:64:22:
c4:f6:85:c8:d1:de:92:9b:73:79:c7:81:52:7a:d7:
b3:62:91:f8:30:dd:09:fb:a6:fd:02:ed:d2:9c:4e:
36:95:15:ab:99:b3:d4:22:35:a8:dc:ba:4d:2b:49:
b7:88:2f:56:24:56:1a:8f:e4:1a:40:fa:90:96:ba:
af:b8:ff:33:cc:17:70:a5:43:3c:5e:5f:44:85:d5:
b6:3b:26:eb:2e:34:52:6d:1d:6b:86:b0:ba:54:e8:
c9:43:01:09:08:42:94:7e:bf:60:85:7b:b8:5c:5a:
d0:7e:84:2b:64:6c:64:e1:a1:fb:e2:4c:8a:3b:68:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:65:BC:C0:D2:90:49:2A:EC:5A:76:6A:3C:79:EB:BD:D9:34:28
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:13:d8:df:24:68:94:d7:8f:e0:f7:02:1d:58:01:58:28:f0:
25:42:d7:0c:4c:fb:ad:10:18:6b:69:4f:60:ca:2e:6b:1d:3e:
4c:83:7f:8e:89:a8:b8:14:a3:26:ea:ea:23:26:57:27:b4:4d:
81:49:f7:80:38:ca:6a:38:1e:ed:bf:96:38:23:8e:4b:b0:bc:
ce:05:54:fd:21:b9:fb:5c:5e:75:e5:b3:f9:9c:d3:d9:fd:72:
fa:ae:55:58:31:5e:00:9e:f2:c7:9d:e2:cf:38:c0:b9:55:05:
04:10:ab:ff:74:23:86:d7:b1:2e:8d:15:75:5f:21:9a:1b:1d:
ce:9b:21:c3:22:e5:d6:75:cf:f7:65:ac:10:8c:96:e9:0e:b6:
35:fb:1d:37:cd:5b:89:96:bd:94:07:ba:30:8f:21:60:48:e6:
d0:75:85:59:c6:7f:0c:d0:b7:24:cd:18:8c:0f:5c:1a:6d:42:
40:be:56:f8:c8:08:6a:2b:8f:ac:e8:07:eb:9a:3f:9f:cd:9b:
c6:ee:e9:38:84:e4:58:90:07:72:c6:92:6a:d4:7e:13:86:af:
68:92:40:64:e8:ee:d2:db:93:7f:97:77:8c:e0:ae:01:6d:aa:
b2:09:e4:b9:85:80:6e:43:ec:9c:d5:ed:c2:df:a5:aa:1b:62:
b9:fb:d7:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ03wNaelBy5ATOgOFMtYn3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YzUwMWYzYmZhZDQ5YWQ0ZTU2ZTZlNGMxOGY3NDBlZGVh
MDVkMjEwHhcNMjYwMzI5MDQwMTE3WhcNMjYwMzMwMDQwMTE3WjAzMTEwLwYDVQQD
EygwYTBlNjViY2MwZDI5MDQ5MmFlYzVhNzY2YTNjNzllYmJkZDkzNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDM9JDvJY1fWfvDyiyqGkapf00ee
rLcGFMePZ9SHopEW/chhm/4XBZkWikVYi1af8BzeJaFs9iWnK2FTxzUIQuwWOcl5
+DW+S5sZQJrL644mjU+JJZFjx93ffjI7zSbquelJaCbmdGmVJBYc+5DUUMaXb3Q2
rD/WW5GkN1fagcbXj1bzZCLE9oXI0d6Sm3N5x4FSetezYpH4MN0J+6b9Au3SnE42
lRWrmbPUIjWo3LpNK0m3iC9WJFYaj+QaQPqQlrqvuP8zzBdwpUM8Xl9EhdW2Oybr
LjRSbR1rhrC6VOjJQwEJCEKUfr9ghXu4XFrQfoQrZGxk4aH74kyKO2gIGQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAoOZbzA0pBJKuxadmo8eeu92TQoMB8GA1UdIwQY
MBaAFPjFAfO/rUmtTlbm5MGPdA7eoF0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NVUI4Ny10U2ExT1Z1Ymt3WTkwRHQ2Z1hTRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMzVkNTJjLTZjYzAtNGYwMS05Mzc2
LTY0ZjQ5MmUzMjZlZC8xLzEtTVVCODctdFNhMU9WdWJrd1k5MER0NmdYU0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U3LzM1ZDUyYy02Y2MwLTRmMDEtOTM3Ni02NGY0OTJlMzI2
ZWQvMS8xLU1VQjg3LXRTYTFPVnVia3dZOTBEdDZnWFNFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohPY
3yRolNeP4PcCHVgBWCjwJULXDEz7rRAYa2lPYMouax0+TIN/jomouBSjJurqIyZX
J7RNgUn3gDjKajge7b+WOCOOS7C8zgVU/SG5+1xedeWz+ZzT2f1y+q5VWDFeAJ7y
x53izzjAuVUFBBCr/3QjhtexLo0VdV8hmhsdzpshwyLl1nXP92WsEIyW6Q62Nfsd
N81biZa9lAe6MI8hYEjm0HWFWcZ/DNC3JM0YjA9cGm1CQL5W+MgIaiuPrOgH65o/
n82bxu7pOITkWJAHcsaSatR+E4avaJJAZOju0tuTf5d3jOCuAW2qsgnkuYWAbkPs
nNXtwt+lqhtiufvX4A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:21 2026 by rpki-client