Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: fVbcImIoatbqRayt3vDqaEfRbR1/7i+sMBnozy0bwGY=
Subject key identifier: 22:EE:31:19:1D:DE:C2:5F:70:FA:D1:5B:1A:14:9F:0F:FF:2D:39:F1
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 019D27721EFE9F4C19F211507F56C7FED844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 12FC
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: KaG_9OhAuCqS6mVHabC7lxG9AHI.roa (hash: xWY0bvnvxQN2TpeVYq9xqInKcrALeii0RU0rJgA/S3U=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: DA4dSC0qYBX/6w3WmGM2lxHClO7WnnGwMY0jsf2Pjn4=)
3: rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa (hash: XsViLJQyG2NreXyqGpIHBcrhArHit5h+1P1uRFDEaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1e:fe:9f:4c:19:f2:11:50:7f:56:c7:fe:d8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=22ee31191ddec25f70fad15b1a149f0fff2d39f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:5c:b6:c4:86:3b:70:89:e1:f6:2b:cc:44:
36:b7:81:8b:b0:5b:e5:26:26:24:5c:2c:af:7f:07:
16:12:ce:da:0a:b0:5d:3f:5d:dd:6f:6a:41:89:c4:
4a:35:ef:68:74:84:f1:48:dd:ba:9c:97:f2:08:48:
bf:3e:c2:1c:88:be:16:ac:06:e4:3e:d1:5c:8a:46:
18:7a:04:c9:bf:49:7c:2d:47:85:63:0f:cd:76:f1:
fa:ea:5d:11:d1:17:af:28:0e:04:68:76:8d:3a:4d:
83:cd:c6:10:21:46:f2:3c:0b:3e:6b:43:24:79:a2:
0e:fa:74:09:94:1d:b8:0b:fb:3e:30:a7:37:b2:33:
28:5a:79:37:05:3d:98:66:90:e2:f9:52:34:20:af:
36:dc:2e:78:14:bb:01:35:12:69:a4:79:3e:a2:d9:
55:c8:3f:77:43:e2:a7:8d:96:cc:e1:fc:1d:a1:20:
dd:06:65:59:bd:ea:7d:56:54:21:82:68:47:8f:7f:
87:bd:ba:f5:e8:a2:25:35:07:0a:bc:da:13:a2:dd:
f9:be:ce:61:e3:86:6e:4e:51:4e:da:76:2a:70:55:
c3:51:d3:87:bf:5c:52:a1:d6:46:41:49:28:89:25:
26:3e:11:bd:2b:df:d9:58:00:55:17:28:86:38:2b:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EE:31:19:1D:DE:C2:5F:70:FA:D1:5B:1A:14:9F:0F:FF:2D:39:F1
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:23:e7:86:00:45:56:5a:b2:23:38:01:75:65:71:ae:15:0f:
85:c8:8f:37:20:ef:f7:c5:72:87:38:ad:1a:8a:f8:ba:df:b1:
48:a4:3b:5f:1e:7f:62:36:9a:04:ee:aa:bd:dd:db:ff:c4:fb:
4d:e2:24:39:ad:55:cf:6b:31:8f:ee:3b:86:17:18:6a:66:a6:
ab:28:f2:8f:19:d4:39:46:21:61:ee:75:3f:3d:76:68:6b:d0:
cc:3f:b0:47:87:4e:7e:b3:4e:be:be:d3:59:5d:22:de:c3:c3:
be:ec:30:c4:74:97:b8:69:ee:f9:a4:1e:a2:0e:98:9c:05:6b:
fc:8f:66:fe:02:c9:bf:c2:ec:40:01:44:e1:9f:db:3c:3b:d1:
3a:bf:39:60:e9:f8:e2:e3:30:9a:cc:cf:f5:6f:8c:ff:e3:1e:
ba:f5:ca:a7:36:9e:3b:7e:6a:d0:7e:81:b0:87:61:fd:f8:ad:
69:d2:f9:a0:29:4c:ab:fe:f3:ea:be:e1:49:45:67:d6:9e:17:
90:e2:57:75:f1:6b:de:f0:13:54:b8:8c:e5:6a:5a:98:6f:71:
e3:89:2d:9f:ea:3f:be:73:49:ca:2b:99:ba:49:65:20:1f:c9:
ce:33:00:97:ac:f3:02:d8:a3:9d:cc:50:53:7e:d6:74:21:e9:
b5:15:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:47 2026 by rpki-client