Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: yXB3NSst8pJVtziQ83yO1tkFYzmvO7DVPkWJzbLq5IM=
Subject key identifier: 3C:3A:03:83:0C:0D:4F:E2:63:D4:A7:EE:99:03:44:7E:E9:88:FB:F8
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 019D273ACC14D2EB9E24E88DB70178B30C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: 55uFHAUK/2RlKQdW87PTyyDH0ydRSEI6cIR7IKh+9x4=)
2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cc:14:d2:eb:9e:24:e8:8d:b7:01:78:b3:0c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=3c3a03830c0d4fe263d4a7ee9903447ee988fbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:84:63:7c:cf:99:7c:ff:2c:61:22:81:5f:
dd:4b:36:01:4c:9d:df:41:e9:b0:b0:11:6f:6b:1d:
2e:36:8a:b4:dc:cf:fb:38:cc:73:19:b9:69:7c:cc:
de:63:e5:7f:80:28:29:8b:f6:93:af:0b:9f:56:e7:
1d:39:4a:26:96:d9:1d:cf:f3:64:61:18:46:d2:8a:
d6:b3:04:42:f2:0c:ae:37:4a:28:25:90:46:e7:ea:
91:dd:d4:96:11:03:39:60:68:30:11:2a:07:e4:7d:
0d:63:00:b4:8a:4b:c5:72:2f:71:0e:a1:e2:e6:2d:
59:8b:80:5b:1c:5a:5b:52:4c:01:ed:ea:0e:fe:aa:
3c:cc:4c:bb:f5:cb:28:b2:e9:15:01:ce:37:b0:bb:
dc:c6:cc:44:8d:e8:48:d6:68:18:05:c5:bb:0d:51:
e4:13:8c:e1:23:32:b4:39:3d:b5:19:ed:33:03:0c:
73:6f:d6:65:be:c2:40:da:7c:f8:e7:6e:86:30:3c:
12:2a:84:56:a2:b9:76:f5:a2:6c:a5:5e:c0:0e:69:
1f:a2:61:83:61:a2:cb:5e:d4:83:ca:d4:96:f1:26:
1f:4e:90:d3:78:91:8c:42:ef:69:ac:b6:a2:8a:e5:
4c:99:03:80:6a:46:03:2d:b4:71:1c:8f:5a:39:1a:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:03:83:0C:0D:4F:E2:63:D4:A7:EE:99:03:44:7E:E9:88:FB:F8
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:35:85:63:6b:a4:32:59:79:59:1e:83:c6:ed:70:45:9e:
bc:64:f9:c7:f0:50:f7:c1:f0:98:2f:7c:c8:f8:a6:c7:37:51:
66:17:e9:7f:fb:45:3e:d3:75:78:63:33:b7:20:42:85:38:1e:
db:69:56:b5:78:20:16:83:cc:0b:1d:7e:4c:8f:44:f3:75:6f:
72:f7:bd:3a:20:00:6e:8e:70:4c:f7:32:6e:32:1f:18:d7:9a:
fe:92:75:b3:82:4a:ae:7b:8d:82:a0:57:b6:86:99:97:9b:d2:
d1:39:e8:1c:90:91:dd:dc:9f:8f:47:3d:00:ab:92:e6:a2:50:
cc:6d:e7:2d:51:30:30:b4:3b:fb:38:70:66:fc:bd:b6:35:70:
eb:7b:fe:6e:69:56:06:95:40:e9:27:34:3f:ff:7c:ae:1f:d0:
b3:46:a4:66:bd:7e:c1:45:e8:ae:0f:95:02:6a:8d:1c:46:cd:
ce:7d:57:bd:99:a2:06:a2:d2:86:dd:ae:47:a2:be:4c:41:4e:
0a:93:30:b0:07:17:5e:9b:72:c1:36:7b:97:ff:ff:a3:8d:0f:
9c:ed:3a:c1:31:43:46:91:46:5e:5f:81:21:71:48:37:d8:bd:
c1:5a:43:42:89:e1:df:90:f5:1c:c0:76:ae:d8:25:2b:4a:35:
78:31:c0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOswU0uueJOiNtwF4swwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTIzMWIyNDdiZmY2NWI0YzYzNDE5MDdlY2Q1ZWFiYTdm
OWNhOTIwHhcNMjYwMzI1MjMwMDU3WhcNMjYwMzI2MjMwMDU3WjAzMTEwLwYDVQQD
EygzYzNhMDM4MzBjMGQ0ZmUyNjNkNGE3ZWU5OTAzNDQ3ZWU5ODhmYmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3CEY3zPmXz/LGEigV/dSzYBTJ3f
QemwsBFvax0uNoq03M/7OMxzGblpfMzeY+V/gCgpi/aTrwufVucdOUomltkdz/Nk
YRhG0orWswRC8gyuN0ooJZBG5+qR3dSWEQM5YGgwESoH5H0NYwC0ikvFci9xDqHi
5i1Zi4BbHFpbUkwB7eoO/qo8zEy79csosukVAc43sLvcxsxEjehI1mgYBcW7DVHk
E4zhIzK0OT21Ge0zAwxzb9ZlvsJA2nz4526GMDwSKoRWorl29aJspV7ADmkfomGD
YaLLXtSDytSW8SYfTpDTeJGMQu9prLaiiuVMmQOAakYDLbRxHI9aORqpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw6A4MMDU/iY9Sn7pkDRH7piPv4MB8GA1UdIwQY
MBaAFFKSMbJHv/ZbTGNBkH7NXqun+cqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQt
NjUxMzVjZjJmODE1LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQtNjUxMzVjZjJmODE1
LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1E1hWNr
pDJZeVkeg8btcEWevGT5x/BQ98HwmC98yPimxzdRZhfpf/tFPtN1eGMztyBChTge
22lWtXggFoPMCx1+TI9E83Vvcve9OiAAbo5wTPcybjIfGNea/pJ1s4JKrnuNgqBX
toaZl5vS0TnoHJCR3dyfj0c9AKuS5qJQzG3nLVEwMLQ7+zhwZvy9tjVw63v+bmlW
BpVA6Sc0P/98rh/Qs0akZr1+wUXorg+VAmqNHEbNzn1XvZmiBqLSht2uR6K+TEFO
CpMwsAcXXptywTZ7l///o40PnO06wTFDRpFGXl+BIXFIN9i9wVpDQonh35D1HMB2
rtglK0o1eDHAYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:07 2026 by rpki-client