Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: RvHxhUBLGZZJ017HKv/L8rD02RKciyeA3VtaD037vUk=
Subject key identifier: 84:07:66:C6:E4:8C:0A:6E:BA:CB:F9:48:4E:74:62:87:FE:A0:64:8D
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019D3375F8E7FF77117F0CF623891A9E7E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 1319
Signing time: Sat 28 Mar 2026 08:01:02 +0000
Manifest this update: Sat 28 Mar 2026 08:01:02 +0000
Manifest next update: Sun 29 Mar 2026 08:01:02 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: a0obV0ciytDYoRVFZLFPtsNBxTigpd8egyZfsCodW0g=)
2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:f8:e7:ff:77:11:7f:0c:f6:23:89:1a:9e:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Mar 28 08:01:02 2026 GMT
Not After : Mar 29 08:01:02 2026 GMT
Subject: CN=840766c6e48c0a6ebacbf9484e746287fea0648d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:ce:39:02:cd:cf:f3:c5:11:b7:54:d0:b7:
98:d0:04:4d:06:80:e6:55:99:49:fe:9a:a1:37:97:
ae:cc:40:16:ff:b2:db:c6:e6:9c:2c:85:9c:8c:d9:
9b:0d:7d:bd:d3:3b:c7:d5:7c:ab:59:90:9e:33:90:
a7:9f:f2:75:40:59:30:a5:91:d8:f0:f2:24:ba:1a:
3d:79:99:2a:64:6c:45:fe:76:98:77:eb:56:3d:67:
a9:a9:0d:d5:39:7a:11:99:f0:96:22:e2:9a:74:67:
e8:e7:9f:17:87:08:5c:7d:01:90:7a:fd:1b:fc:54:
9e:81:c2:83:5c:b5:b0:d3:8a:81:d8:49:c5:a9:05:
77:06:97:8f:40:9f:8f:23:b9:d7:6f:41:0f:5a:ca:
c5:84:a7:3c:ce:fc:e0:31:c9:b9:28:07:d1:0a:ac:
05:77:74:1f:34:86:9f:79:8e:97:41:0e:2b:05:c6:
f8:e5:32:ee:ae:1d:ae:0b:e8:35:af:d2:5d:0c:8d:
cb:77:7a:96:5e:af:eb:75:37:16:77:2d:7b:54:ef:
7e:27:96:ba:aa:42:b4:a5:66:fe:05:5a:f6:18:a1:
97:21:a1:6f:ed:9f:2a:fd:92:12:98:79:c4:fc:66:
95:f5:16:0e:60:99:e1:86:da:bd:86:ca:66:6b:4b:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:66:C6:E4:8C:0A:6E:BA:CB:F9:48:4E:74:62:87:FE:A0:64:8D
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:ba:9f:13:04:d1:6f:22:17:df:47:dc:0f:42:ca:1a:6c:
d3:24:31:29:50:e0:24:b3:82:4f:f3:a3:15:c4:c2:e2:c4:fa:
4d:3d:44:f0:84:d9:13:ca:9a:22:12:27:ec:26:29:ed:c8:4d:
bc:12:71:53:96:9d:45:78:d0:c1:54:03:43:8f:35:b5:5b:9f:
cf:c0:7c:a9:11:3e:51:db:df:38:90:00:d7:7b:34:44:5c:70:
03:31:b8:2a:b4:f4:9a:6a:bb:17:d8:fa:13:bc:69:aa:56:de:
1e:65:e9:d8:d3:c5:ca:56:a1:4f:89:99:f6:a4:42:1d:00:1e:
4f:c9:23:89:53:9f:7e:21:d4:ea:54:d2:d0:f8:76:f8:9f:13:
96:a5:ff:d7:d4:08:9e:dc:95:b1:73:2d:ea:01:e0:c5:2a:dc:
46:d8:eb:a5:8a:ee:52:ec:b4:24:e5:88:f3:71:62:82:e6:28:
ca:c6:54:fe:f5:9d:88:e3:df:89:01:a2:be:5a:6d:9d:b2:fd:
b1:f6:40:89:c5:fa:61:81:5f:25:58:08:ad:f4:e7:84:50:3e:
a9:2a:80:17:bc:4c:a4:19:a2:2f:2a:02:3c:cb:af:10:2b:95:
ce:a7:2e:08:b7:63:ca:ed:90:ec:fb:f6:51:65:e0:88:d6:5c:
3d:e8:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:23 2026 by rpki-client