Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
File: 1-UPALG97-Xkq7khaM3tMeFLWrEw.mft (raw, json)
Hash identifier: zPIaHeT2K0I+4XPzpl2zH9osWSVZhPxhSZ14Exix4y4=
Subject key identifier: D4:39:6D:48:09:D5:E4:33:C1:90:CE:24:47:6F:07:97:0B:60:10:E7
Authority key identifier: F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
Certificate issuer: /CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Certificate serial: 019F8F7F85D8F68A9CD1768AAC8F7A0C3F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:06 +0000
Manifest this update: Thu 23 Jul 2026 15:02:06 +0000
Manifest next update: Fri 24 Jul 2026 15:02:06 +0000
Files and hashes: 1: 1-UPALG97-Xkq7khaM3tMeFLWrEw.crl (hash: aZJiNXbfxCYtz9Jr6e4ifNOWBRfP6wEdLSeb9ppJx4U=)
2: 87x1D7pYeaB1gXkvbE0BFkgXr-8.roa (hash: Ln5Bb2F89AAwGIw+We1i3J/fjL0LEyPyu8CtB1jNHEg=)
3: snJ2z_25Wo-WwYHYvg1pLIChayo.asa (hash: 4vVtZTPez3DREJmEj/Q+ey4Wm1nOywCHZsTKojucDnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:85:d8:f6:8a:9c:d1:76:8a:ac:8f:7a:0c:3f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Validity
Not Before: Jul 23 15:02:06 2026 GMT
Not After : Jul 24 15:02:06 2026 GMT
Subject: CN=d4396d4809d5e433c190ce24476f07970b6010e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:d4:3b:4a:7b:90:7c:c1:a4:8b:59:95:cf:
7e:7b:4d:03:8f:6a:6c:91:46:c7:4e:21:79:da:00:
6a:15:1a:92:50:5e:31:20:79:5f:52:7a:37:70:dd:
fa:ef:92:ae:a1:c9:65:cc:dd:60:30:21:64:d1:40:
e0:c3:59:83:07:76:4b:dc:47:d2:9e:9f:cc:de:a5:
21:d3:eb:ee:2e:76:e6:ae:59:80:18:1e:28:eb:5d:
9d:03:31:eb:73:0c:d4:98:96:9b:1b:7f:f4:69:68:
50:2d:1b:5f:ab:8e:08:26:41:9e:db:de:9d:08:d0:
75:02:05:a1:07:3b:8c:bf:7a:aa:40:cb:57:87:02:
f3:18:68:7a:f6:05:99:73:56:2a:fb:e1:71:6f:18:
fb:dc:35:51:ad:70:50:90:57:43:21:48:ec:24:c8:
09:35:15:f8:0d:51:58:4b:46:db:f1:38:ff:50:da:
dc:dc:3d:3b:a1:e9:78:5e:fb:62:77:4a:69:48:db:
57:0a:e0:89:d1:ed:7d:39:bc:18:05:a8:41:87:44:
01:07:6c:53:4e:9f:7f:b6:db:d8:20:50:33:36:33:
49:3c:09:42:e0:3e:48:43:7e:fb:48:68:0b:82:69:
68:c6:df:11:61:a2:db:07:d2:1f:83:3b:a9:97:5f:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:6D:48:09:D5:E4:33:C1:90:CE:24:47:6F:07:97:0B:60:10:E7
X509v3 Authority Key Identifier:
keyid:F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:48:9e:14:7d:25:a9:4b:66:a5:79:f2:cd:d1:88:64:ae:7e:
8d:a5:2a:8a:21:4c:37:a8:69:30:41:76:da:95:7a:88:c9:68:
8a:4f:51:52:48:ad:5b:8b:f4:26:27:76:e8:f0:d6:44:94:5a:
04:4d:33:be:21:25:a7:1c:72:1f:3e:88:7b:98:48:bd:48:f3:
f6:7f:ad:78:97:33:6b:87:e2:65:e9:36:c5:a2:de:52:73:43:
8d:2a:af:ad:54:9c:b8:8f:59:5b:d7:b3:9a:78:bd:1a:2f:4d:
71:b9:5f:54:a9:31:16:31:34:21:30:cd:23:02:40:57:6d:fc:
8b:69:e7:b4:dd:c5:b6:8d:f1:cd:4d:5d:68:5f:71:a6:08:21:
dc:4c:b9:ff:24:70:bd:50:d2:ed:23:20:9d:68:39:79:ad:be:
69:84:ff:c3:cf:ce:3f:7b:b8:41:1e:59:1b:71:15:b3:50:0e:
a6:0d:ac:da:76:f5:70:4c:c1:91:50:6f:30:d8:a7:fc:d4:4d:
58:33:78:8b:f8:0a:98:fa:9d:3b:5d:7f:fc:a2:ef:8c:13:1f:
4f:2a:0c:51:7a:a3:8e:68:9e:9d:9c:ae:18:75:cc:63:9b:ae:
aa:7c:55:78:c5:43:06:8d:3c:93:22:a5:94:d2:e5:83:11:14:
0f:98:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:37 2026 by rpki-client