Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: HQ0EANUun45rw6BpO0jCJ9hpR8WegjmKLwtuC1/iBUI=
Subject key identifier: 86:65:C7:9F:F0:0B:4F:5A:CF:6F:FD:93:C7:47:6C:6D:E1:CE:53:40
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 01A1DE02690932ED5F99302B0B52B3BF3C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 07:01:02 +0000
Manifest this update: Sun 15 Nov 2026 07:01:02 +0000
Manifest next update: Mon 16 Nov 2026 07:01:02 +0000
Files and hashes: 1: 3ceCFhC3pygDoMeY7wDkx7_QzAg.roa (hash: 6QyVVckbf8MmsNgPj86Q2hfxojCskE4hOKYaAUJOTXE=)
2: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: JLADdYCsjS5eitgd8mRFFj4eTEevLreOsIPnKCtCghQ=)
3: mwdbhh4MkK3UW3MoUj-OSpitJtg.roa (hash: 73ZzUx+ayS9nz0SZi6BSEwxRgJ3onIVJGwZYT4nKqtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:69:09:32:ed:5f:99:30:2b:0b:52:b3:bf:3c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Nov 15 07:01:02 2026 GMT
Not After : Nov 16 07:01:02 2026 GMT
Subject: CN=8665c79ff00b4f5acf6ffd93c7476c6de1ce5340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:e7:c7:67:55:74:c6:d4:d3:ac:fe:f7:ef:
b9:00:fd:07:e3:9b:56:de:59:cb:2f:5f:5a:85:0b:
94:0e:6a:b6:46:f2:04:b1:51:9b:e9:4e:4e:f8:9f:
b8:c7:11:34:e4:d7:d3:eb:41:47:f7:dc:6f:ed:1e:
5a:9d:95:ef:a3:42:0f:32:60:e5:62:88:18:42:81:
6c:f4:ac:f0:c7:d2:56:79:16:ee:c3:fc:c3:c0:38:
43:56:a3:33:4d:fd:7d:5a:a2:dc:a8:f1:b2:b3:d8:
65:02:4b:5b:00:fc:3e:5d:9f:a9:a0:a5:b9:02:3e:
19:29:93:57:ce:cf:08:23:c8:ed:0d:33:46:4c:7d:
c2:b9:e1:03:85:80:d2:e0:e5:8f:4e:d1:f0:be:8b:
60:97:8b:21:95:9d:a6:48:d8:bc:38:63:5a:55:85:
d3:67:e0:2d:ce:ab:90:7c:1d:13:12:76:9b:43:71:
29:50:15:36:72:79:b1:93:94:8f:e8:af:cb:27:b0:
e0:f2:50:66:b4:7d:71:bb:5a:57:35:ff:a8:d6:ad:
fd:d9:41:a4:c1:e1:da:f0:26:95:b9:f2:7b:6f:1b:
53:9a:66:6f:7c:b3:d9:5b:dd:7b:15:ce:0b:ba:c9:
07:08:bc:25:7d:ea:33:2c:6d:40:ae:96:a1:2b:9c:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:65:C7:9F:F0:0B:4F:5A:CF:6F:FD:93:C7:47:6C:6D:E1:CE:53:40
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:16:78:20:74:8f:0b:31:44:89:67:2a:61:5a:21:53:d1:4c:
7f:f4:c8:c1:f1:6b:99:f6:7f:ba:e8:6c:b6:8d:22:cb:35:62:
a8:8f:eb:d8:3c:d7:f2:d9:f1:e0:97:d0:a7:74:db:f6:ec:f7:
61:4c:d9:ce:17:57:cd:a6:e4:79:53:d4:d2:f9:55:91:96:39:
4c:4b:c2:68:0f:d7:c9:3f:87:46:ac:4d:76:40:0f:24:af:af:
d5:64:0b:c2:71:a9:c0:7a:58:04:14:dc:02:76:5a:6b:c8:cc:
ab:7a:6e:1c:ca:d9:15:f6:48:85:95:3d:48:8c:65:b4:4d:f5:
4e:1a:11:80:72:59:fe:0b:d9:ec:d7:24:79:05:2a:18:63:11:
6e:42:53:cb:d0:1a:fa:07:57:a5:92:e1:25:cc:c0:10:7e:df:
bb:f5:28:4f:69:ec:17:ec:e3:16:a7:bc:6a:28:e4:fa:86:b0:
06:5d:ec:1f:ba:f5:26:6f:80:bb:9b:4f:f8:44:8e:c1:8f:aa:
9a:b0:e0:fc:23:38:f8:1e:c5:5d:07:e9:fc:18:4e:13:42:56:
7a:ae:a9:2b:63:00:ca:63:f9:7b:bb:c8:98:9e:e7:4f:ac:73:
ec:a6:2f:59:0f:0b:b2:cf:d5:37:ad:90:05:20:7a:b8:d6:96:
9a:01:23:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAmkJMu1fmTArC1KzvzyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjg4ZTA1Yzg5ODc5NmM4MmZmMDE0NzU2ODgxNmU5MzM0
MjBlMTgwHhcNMjYxMTE1MDcwMTAyWhcNMjYxMTE2MDcwMTAyWjAzMTEwLwYDVQQD
Eyg4NjY1Yzc5ZmYwMGI0ZjVhY2Y2ZmZkOTNjNzQ3NmM2ZGUxY2U1MzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tvnx2dVdMbU06z+9++5AP0H45tW
3lnLL19ahQuUDmq2RvIEsVGb6U5O+J+4xxE05NfT60FH99xv7R5anZXvo0IPMmDl
YogYQoFs9Kzwx9JWeRbuw/zDwDhDVqMzTf19WqLcqPGys9hlAktbAPw+XZ+poKW5
Aj4ZKZNXzs8II8jtDTNGTH3CueEDhYDS4OWPTtHwvotgl4shlZ2mSNi8OGNaVYXT
Z+AtzquQfB0TEnabQ3EpUBU2cnmxk5SP6K/LJ7Dg8lBmtH1xu1pXNf+o1q392UGk
weHa8CaVufJ7bxtTmmZvfLPZW917Fc4LuskHCLwlfeozLG1ArpahK5w5PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZlx5/wC09az2/9k8dHbG3hzlNAMB8GA1UdIwQY
MBaAFFD4jgXImHlsgv8BR1aIFukzQg4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYt
ZmVkYmQ0YzY2YTBlLzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYtZmVkYmQ0YzY2YTBl
LzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRZ4IHSP
CzFEiWcqYVohU9FMf/TIwfFrmfZ/uuhsto0iyzViqI/r2DzX8tnx4JfQp3Tb9uz3
YUzZzhdXzabkeVPU0vlVkZY5TEvCaA/XyT+HRqxNdkAPJK+v1WQLwnGpwHpYBBTc
AnZaa8jMq3puHMrZFfZIhZU9SIxltE31ThoRgHJZ/gvZ7NckeQUqGGMRbkJTy9Aa
+gdXpZLhJczAEH7fu/UoT2nsF+zjFqe8aijk+oawBl3sH7r1Jm+Au5tP+ESOwY+q
mrDg/CM4+B7FXQfp/BhOE0JWeq6pK2MAymP5e7vImJ7nT6xz7KYvWQ8Lss/VN62Q
BSB6uNaWmgEjLw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:29:50 2026 by rpki-client