Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier: PxX7SHXVGQ+KHnTsiyrYfK0vFz7r700o35+qDzM6Ksk=
Subject key identifier: 26:2A:30:31:33:97:B3:7B:60:38:E7:37:07:B4:F1:DA:E5:83:22:0B
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial: 019D284D9EEE9AEE583001FD85EAEC45A52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number: 0110
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: /3Asli/RrMo5TdKzJJkG2ZglNRVZLPjwyswrrYchBQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9e:ee:9a:ee:58:30:01:fd:85:ea:ec:45:a5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=262a30313397b37b6038e73707b4f1dae583220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:b6:f5:4d:84:60:a3:db:a4:d4:14:3b:ca:
3d:08:6f:66:e3:5b:dd:2b:74:44:f3:a0:71:42:6b:
e8:db:d1:84:6a:85:4e:3a:78:63:16:49:2e:9a:a0:
78:eb:0d:47:e9:de:ff:dd:e3:d6:3a:07:d5:a5:46:
8e:35:d8:81:27:d6:05:eb:19:38:b6:a1:23:f8:0b:
78:bd:b0:08:a0:25:ed:35:2f:ae:ae:4e:b9:2e:a5:
ad:3f:4c:a7:36:82:72:1c:5e:29:43:ef:dd:50:6e:
dd:b9:1e:7d:f4:75:5d:47:66:41:80:1a:b2:43:c4:
91:04:a1:fe:54:dc:26:3a:d3:6e:7d:90:f0:33:77:
cf:6f:c4:14:96:d2:83:4e:bd:fd:ee:ba:aa:e2:af:
b6:b3:74:9a:e5:ea:c8:d1:a1:c7:99:d5:57:ee:2f:
e0:b1:2a:da:2e:b8:31:e0:5d:ed:cd:00:0d:0a:69:
a4:6e:34:5e:db:28:c3:3b:df:76:c3:f5:0a:d1:cd:
ee:35:1d:b6:50:03:ad:9d:7a:7a:3c:14:01:65:18:
54:0a:16:d4:6e:1d:33:18:25:6d:7c:08:df:4c:ab:
a1:a0:62:37:ee:b5:f5:50:3f:f4:2e:e8:6f:3b:a2:
7c:f3:93:34:54:56:49:e5:ca:5e:bf:86:f6:b2:ac:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:30:31:33:97:B3:7B:60:38:E7:37:07:B4:F1:DA:E5:83:22:0B
X509v3 Authority Key Identifier:
keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e3:0b:c5:f2:13:38:c7:8f:12:76:6e:1f:b5:c9:ec:5b:99:
37:4e:5b:9e:38:4d:95:d5:4c:ee:34:f2:87:90:62:b7:1b:8e:
a4:18:b0:25:9a:49:e1:e9:4d:0e:97:1a:cc:7f:e8:a5:e5:67:
99:6a:6a:88:71:e5:29:86:4f:d9:09:cd:6a:f1:61:5d:57:52:
5f:08:20:ad:d0:88:67:59:48:62:ee:4b:82:5f:87:fc:8b:a9:
e1:b3:02:af:4e:61:7a:c5:12:1b:fb:d9:8d:e9:63:79:c0:8c:
3c:d4:7f:e1:b9:c7:c0:e4:62:7a:f9:56:ee:ac:4f:57:6b:91:
38:4b:5e:00:de:66:ab:7c:56:4e:33:b7:73:68:07:16:c6:41:
0d:8c:b5:91:db:15:1c:d5:c1:8d:81:ce:dd:92:46:38:7b:b6:
0f:f9:6a:4a:b6:74:f7:ab:4b:39:a0:ab:4d:45:b2:76:79:fa:
9e:83:2b:e0:7b:30:e6:86:d8:bd:5c:1c:9f:82:4e:ae:88:27:
62:0a:fe:20:ed:c9:9d:92:fb:c7:f8:c3:a0:ea:2d:31:be:4c:
b4:8e:d0:8e:03:80:e8:55:d1:79:9c:77:b3:1c:8f:f2:fd:4b:
ff:7a:a5:c5:65:6c:87:36:fb:7f:a9:07:4f:01:a3:6c:99:55:
3a:6a:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:46 2026 by rpki-client