Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: inCqQdVG2yPL6j6l6K5V+muM6norYa5hlQhaoiIwBfw=
Subject key identifier: 89:98:E3:8F:DE:EB:A2:80:B4:45:61:05:39:85:48:A9:E3:70:10:1E
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 01A0D94C77A92159BFAC50EF4CA40DCD9AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 16:01:02 +0000
Manifest this update: Fri 25 Sep 2026 16:01:02 +0000
Manifest next update: Sat 26 Sep 2026 16:01:02 +0000
Files and hashes: 1: 3ceCFhC3pygDoMeY7wDkx7_QzAg.roa (hash: 6QyVVckbf8MmsNgPj86Q2hfxojCskE4hOKYaAUJOTXE=)
2: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: kFoZzCuJjnxhc7UWotNsTgPUJX+xGfUn4AFIPU1kCp0=)
3: mwdbhh4MkK3UW3MoUj-OSpitJtg.roa (hash: 73ZzUx+ayS9nz0SZi6BSEwxRgJ3onIVJGwZYT4nKqtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:77:a9:21:59:bf:ac:50:ef:4c:a4:0d:cd:9a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Sep 25 16:01:02 2026 GMT
Not After : Sep 26 16:01:02 2026 GMT
Subject: CN=8998e38fdeeba280b4456105398548a9e370101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:53:e7:d3:52:cf:98:7d:c4:9d:88:6e:8e:
61:44:af:de:68:00:7c:fe:ba:35:f3:a9:cd:7f:4d:
c4:4b:f0:44:3a:7d:46:e7:03:35:54:bc:fa:54:23:
5a:d5:de:65:ac:be:40:b6:38:ff:32:56:72:3b:4c:
49:3c:5b:10:5d:c5:84:74:d7:ce:68:f9:5e:60:a2:
ae:f1:12:0d:72:5b:16:0a:34:a2:ba:40:2f:8c:50:
b3:03:4a:50:5d:f4:85:79:99:39:74:cf:e6:d9:17:
5c:45:92:9a:b3:c4:e7:f0:49:64:39:9b:5c:fb:d9:
b1:e3:53:2d:39:f8:fa:8b:69:95:02:25:7b:96:16:
e1:bb:ea:6a:2b:c2:df:7e:bd:c1:45:be:99:92:b7:
49:b0:53:06:ca:7d:0b:46:c7:5f:c4:22:cc:a3:5e:
44:06:0f:e3:4e:2a:09:db:e7:fb:40:f9:4b:ff:f3:
75:de:d3:ec:e6:a4:d0:22:df:f6:92:ee:1d:61:ca:
05:8d:21:14:b1:62:b9:c5:17:d5:65:35:7d:17:81:
23:59:e9:b3:c3:49:c6:08:f5:04:01:bb:5d:78:ea:
ad:59:72:fa:8a:c4:89:05:4f:db:c3:ab:56:bb:5b:
89:f2:c4:69:54:c5:cf:ed:ee:45:01:33:76:5c:82:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:E3:8F:DE:EB:A2:80:B4:45:61:05:39:85:48:A9:E3:70:10:1E
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9b:ec:86:de:60:be:04:39:bb:ee:29:55:f5:77:dc:0f:3c:
d9:7b:cb:a9:c0:8f:77:d3:ff:06:46:39:73:88:00:62:02:6c:
b8:5d:e1:ac:d9:2d:a0:e9:fa:9e:ba:35:70:ad:e3:3b:f0:fd:
90:67:b1:f9:e7:2d:59:0e:00:b7:11:a1:d9:9e:c0:8c:05:e0:
28:6d:01:ae:fd:ec:df:89:75:fa:5c:43:42:cc:e3:27:0d:39:
0f:9e:68:8d:4c:6d:7b:bf:e2:7d:df:4d:e0:70:82:fe:bb:33:
8e:dd:3e:28:7e:2d:61:1f:c3:80:3b:c2:ed:d1:45:a8:d7:29:
16:ec:51:9d:6d:33:d2:4e:49:07:62:28:ff:8a:82:23:1d:1b:
3d:7c:98:4d:35:1b:f9:e2:09:91:a7:4b:c4:ec:bf:da:38:b2:
6c:d1:0b:f6:a3:c2:c6:8a:18:37:4e:75:a0:e8:6b:9d:12:e2:
db:ca:44:8a:32:03:5c:0c:85:cb:a2:85:72:b0:56:bb:48:b5:
08:02:93:43:fd:70:c6:82:ee:35:15:91:5b:ed:6b:aa:53:45:
ef:7f:cb:85:f0:0a:09:3e:86:b2:7c:fc:7e:14:ec:46:20:c8:
f2:f8:7b:80:73:d9:99:f2:81:9c:dc:f8:61:1b:a9:5c:0a:0a:
e5:c6:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:49:09 2026 by rpki-client