Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: +CD+eA/i5GMd3HaVDBb4GGhP3NJRDfHhQTfAflDCZeU=
Subject key identifier: 68:83:2C:DB:C1:74:36:FD:D4:5A:93:B5:50:77:9B:7F:D7:FC:69:7A
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019E1D224A654E482E3DD8C03A2F1BD33B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 1392
Signing time: Tue 12 May 2026 17:00:46 +0000
Manifest this update: Tue 12 May 2026 17:00:46 +0000
Manifest next update: Wed 13 May 2026 17:00:46 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: dY6RAy4g9nD3xJoflwL5Ji3w2sfkwMJWFk7yHOzLKQI=)
2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:4a:65:4e:48:2e:3d:d8:c0:3a:2f:1b:d3:3b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: May 12 17:00:46 2026 GMT
Not After : May 13 17:00:46 2026 GMT
Subject: CN=68832cdbc17436fdd45a93b550779b7fd7fc697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:cd:21:f7:0d:26:b1:81:f8:1f:65:5a:eb:
10:0c:5a:1c:6b:73:f6:73:4e:7f:e1:94:b0:e0:a6:
77:3b:08:5f:bf:2d:0c:bc:7c:68:e0:0b:c8:1a:8f:
1f:6a:d4:c4:68:d3:75:a4:2c:d5:8e:4a:20:33:d3:
96:da:21:7b:6d:27:44:44:99:59:c5:30:8b:06:58:
43:98:b0:47:60:5e:25:bb:80:e5:24:f8:fb:af:84:
41:d9:ec:6f:07:0e:2a:ad:88:49:8b:2e:2a:67:cc:
92:6d:c0:6b:64:6c:e5:18:96:87:96:88:5f:25:05:
b1:12:b9:9a:7c:c9:5d:a5:57:1d:4f:14:10:01:5c:
19:30:bf:39:13:42:15:ac:0e:98:58:3c:99:f4:6f:
ab:aa:08:74:b6:60:4e:02:c0:29:3b:94:af:87:2c:
e9:82:44:b5:a8:f4:d0:46:91:6f:36:42:02:de:b0:
7b:87:25:38:eb:8c:54:62:19:90:0c:ce:48:27:c4:
6b:d4:3f:f8:0f:9d:b6:1f:7d:97:5d:14:23:a0:36:
86:a0:d4:01:8c:13:7d:81:21:0d:31:2d:a7:7e:5c:
e6:36:e7:69:52:72:db:f9:10:15:1a:ee:f3:78:52:
6a:f3:c2:e0:bb:ba:b2:4e:da:73:cb:4a:68:e7:20:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:83:2C:DB:C1:74:36:FD:D4:5A:93:B5:50:77:9B:7F:D7:FC:69:7A
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d1:34:be:0b:4a:4e:82:7a:f2:df:5a:0b:77:dd:dc:01:15:
58:60:d1:eb:2a:1f:8d:9f:81:d7:06:18:c7:53:21:dd:41:1c:
e1:a3:9c:d9:f5:43:27:c8:52:57:00:ac:0a:4b:40:95:1b:ba:
79:9d:1b:1e:d1:27:cf:ea:d7:41:8d:f1:e7:f0:0d:de:e7:16:
c7:84:5a:c7:cf:16:94:6f:4d:3d:c6:63:64:95:41:59:55:d4:
de:07:e3:f6:4c:57:c2:86:73:5e:69:e1:85:fd:77:82:fc:37:
16:83:51:4c:c9:21:30:b7:8e:f2:66:4b:4a:e8:9b:4c:01:99:
2d:1d:a2:fb:99:ba:8c:8a:cd:8c:85:d0:b3:d9:ac:56:b9:1c:
e7:01:56:94:86:a4:f6:8a:d2:ec:42:50:88:3e:40:5d:cf:2d:
44:a7:71:23:89:47:7a:12:d3:4a:20:72:f5:a2:f8:46:d0:36:
b3:20:d9:69:f1:45:ce:eb:a4:3e:01:64:98:89:41:15:96:72:
46:bc:91:3d:12:a8:f8:99:f9:47:7b:b5:a5:c0:cb:56:e5:6c:
e7:b0:58:12:65:a6:9a:2d:a0:a6:5a:de:59:24:b6:18:99:be:
87:d4:6f:53:e3:8f:c8:6d:33:a9:a4:08:b2:b9:8b:f7:52:06:
30:1a:a6:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIkplTkguPdjAOi8b0zs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNGE2MzE4YjJlZDZkMGM4MjM0Zjk4MjA4Zjg4ZGUwZTlk
NDY5OGUwHhcNMjYwNTEyMTcwMDQ2WhcNMjYwNTEzMTcwMDQ2WjAzMTEwLwYDVQQD
Eyg2ODgzMmNkYmMxNzQzNmZkZDQ1YTkzYjU1MDc3OWI3ZmQ3ZmM2OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bXNIfcNJrGB+B9lWusQDFoca3P2
c05/4ZSw4KZ3Owhfvy0MvHxo4AvIGo8fatTEaNN1pCzVjkogM9OW2iF7bSdERJlZ
xTCLBlhDmLBHYF4lu4DlJPj7r4RB2exvBw4qrYhJiy4qZ8ySbcBrZGzlGJaHlohf
JQWxErmafMldpVcdTxQQAVwZML85E0IVrA6YWDyZ9G+rqgh0tmBOAsApO5Svhyzp
gkS1qPTQRpFvNkIC3rB7hyU464xUYhmQDM5IJ8Rr1D/4D522H32XXRQjoDaGoNQB
jBN9gSENMS2nflzmNudpUnLb+RAVGu7zeFJq88Lgu7qyTtpzy0po5yDhfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiDLNvBdDb91FqTtVB3m3/X/Gl6MB8GA1UdIwQY
MBaAFPFKYxiy7W0MgjT5ggj4jeDp1GmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQt
Yzg2ZWQ0ODYyNTAxLzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQtYzg2ZWQ0ODYyNTAx
LzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtE0vgtK
ToJ68t9aC3fd3AEVWGDR6yofjZ+B1wYYx1Mh3UEc4aOc2fVDJ8hSVwCsCktAlRu6
eZ0bHtEnz+rXQY3x5/AN3ucWx4Rax88WlG9NPcZjZJVBWVXU3gfj9kxXwoZzXmnh
hf13gvw3FoNRTMkhMLeO8mZLSuibTAGZLR2i+5m6jIrNjIXQs9msVrkc5wFWlIak
9orS7EJQiD5AXc8tRKdxI4lHehLTSiBy9aL4RtA2syDZafFFzuukPgFkmIlBFZZy
RryRPRKo+Jn5R3u1pcDLVuVs57BYEmWmmi2gplreWSS2GJm+h9RvU+OPyG0zqaQI
srmL91IGMBqmXw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:50:53 2026 by rpki-client