Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: jf7t3ffBJ96Wgnl3NnW65+GqWgyUQwDaOxC7CfMt3vs=
Subject key identifier: DB:1B:36:93:8B:9B:2C:58:58:61:65:33:33:01:D5:9A:2C:7D:8C:3F
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 019D2704B5C42A3D481EE33B4E93705DE0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 0DF6
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: r2ViZypMM/5BDdNwuXYiQiUyLJ50wlEgC3w8u31VvOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b5:c4:2a:3d:48:1e:e3:3b:4e:93:70:5d:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=db1b36938b9b2c58586165333301d59a2c7d8c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:e3:f7:df:3b:90:43:2a:57:e3:e8:fa:bb:
0e:6c:4c:9b:ad:c9:50:1e:1e:78:63:a7:b8:14:60:
33:ca:45:33:1d:c4:18:11:26:13:8e:1f:9e:61:d6:
3e:9c:7e:eb:ec:5f:a1:90:ef:f7:f8:2e:14:4d:06:
b9:4d:d7:ce:05:fc:78:1e:28:9e:a1:36:31:5c:d1:
a0:51:17:f8:76:4a:81:d7:08:be:ff:4d:bd:21:0d:
1f:34:20:3f:2f:70:69:5d:75:76:31:52:b2:b1:ea:
ac:7e:3c:44:9a:a0:e7:16:d4:d9:46:23:f4:97:0c:
97:7b:a2:7a:b5:a8:06:9c:11:d2:65:76:43:f0:8b:
b3:5b:2d:6d:eb:78:43:89:15:9b:e5:d1:db:a1:dc:
8d:76:0b:16:02:30:cc:77:64:5b:fe:05:53:e4:d5:
3d:2a:a8:b8:94:91:e4:c2:89:03:b7:3b:de:a2:76:
f7:fe:6a:49:4b:d4:b7:02:80:3c:1c:2a:b5:89:c6:
88:d4:ba:5f:d9:63:95:29:f4:d4:6b:05:75:71:b8:
d5:57:b3:a4:6b:f3:bf:3b:f6:4d:10:33:3c:53:0e:
7f:2c:68:0c:ee:c1:58:25:0f:a5:ea:eb:fb:80:5a:
34:a1:3a:b4:af:0c:00:e7:ff:18:3b:20:42:88:3e:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:36:93:8B:9B:2C:58:58:61:65:33:33:01:D5:9A:2C:7D:8C:3F
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:06:48:64:79:ba:8f:b7:e0:0f:15:bc:97:84:b8:b3:4d:42:
43:10:16:8a:17:cb:e2:c8:86:ad:23:f2:91:40:01:cf:fb:f0:
8c:77:c2:62:84:9e:f9:23:06:5d:b1:6a:a7:2e:db:1a:b5:23:
7c:46:4f:82:48:fa:20:7a:ac:68:0f:6e:ae:e4:eb:f4:95:97:
4f:73:36:f3:37:57:27:9d:eb:32:02:91:fb:e9:6c:5e:df:4c:
ba:da:9f:7d:5d:f8:b5:86:7d:00:0c:09:04:cf:8e:61:7d:ce:
df:01:90:a9:30:d6:38:2d:a9:ed:ba:62:e3:c1:e5:a3:d2:6c:
97:ef:35:19:17:4e:39:3e:5e:98:3c:52:53:ab:38:97:ef:e5:
98:7c:97:e3:7c:ce:e4:91:a4:bb:c0:f1:87:ff:02:43:0c:bc:
35:cb:27:9a:4a:51:fd:42:c9:2f:1e:0d:8c:b9:04:73:0e:ac:
0c:49:36:71:cb:b6:37:26:2b:60:21:81:51:84:1d:29:de:65:
70:50:5b:3b:3f:ca:86:b7:3a:d7:2e:af:4c:73:62:fc:5d:36:
74:75:d4:3d:f2:53:4e:38:8a:48:eb:51:96:5a:7d:eb:e0:7c:
10:db:cf:5d:21:0f:34:d8:c5:6e:86:fb:9d:99:c6:b5:07:b9:
05:3e:27:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBLXEKj1IHuM7TpNwXeCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWM5MTAwYjMyZmNmNjJkNWRmZDgyMWNiZDA1NmFiNzNk
MmU0NTUwHhcNMjYwMzI1MjIwMTUzWhcNMjYwMzI2MjIwMTUzWjAzMTEwLwYDVQQD
EyhkYjFiMzY5MzhiOWIyYzU4NTg2MTY1MzMzMzAxZDU5YTJjN2Q4YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+jj9987kEMqV+Po+rsObEybrclQ
Hh54Y6e4FGAzykUzHcQYESYTjh+eYdY+nH7r7F+hkO/3+C4UTQa5TdfOBfx4Hiie
oTYxXNGgURf4dkqB1wi+/029IQ0fNCA/L3BpXXV2MVKyseqsfjxEmqDnFtTZRiP0
lwyXe6J6tagGnBHSZXZD8IuzWy1t63hDiRWb5dHbodyNdgsWAjDMd2Rb/gVT5NU9
Kqi4lJHkwokDtzveonb3/mpJS9S3AoA8HCq1icaI1Lpf2WOVKfTUawV1cbjVV7Ok
a/O/O/ZNEDM8Uw5/LGgM7sFYJQ+l6uv7gFo0oTq0rwwA5/8YOyBCiD72vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsbNpOLmyxYWGFlMzMB1ZosfYw/MB8GA1UdIwQY
MBaAFLqckQCzL89i1d/YIcvQVqtz0uRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQt
OTJkMGQwMTEzOWY5LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQtOTJkMGQwMTEzOWY5
LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgZIZHm6
j7fgDxW8l4S4s01CQxAWihfL4siGrSPykUABz/vwjHfCYoSe+SMGXbFqpy7bGrUj
fEZPgkj6IHqsaA9uruTr9JWXT3M28zdXJ53rMgKR++lsXt9MutqffV34tYZ9AAwJ
BM+OYX3O3wGQqTDWOC2p7bpi48Hlo9Jsl+81GRdOOT5emDxSU6s4l+/lmHyX43zO
5JGku8Dxh/8CQwy8NcsnmkpR/ULJLx4NjLkEcw6sDEk2ccu2NyYrYCGBUYQdKd5l
cFBbOz/Khrc61y6vTHNi/F02dHXUPfJTTjiKSOtRllp96+B8ENvPXSEPNNjFbob7
nZnGtQe5BT4nGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:52 2026 by rpki-client