Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: JuuDxedzAkRSjRsSRI+mNKarHYP30oUe0sYwnFMVMq8=
Subject key identifier: E9:0A:78:AA:90:4C:90:7F:5C:9E:33:BE:6F:15:3B:17:45:D4:9D:F6
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 019D28BB408182F3D3E6F4DA73B882F7F908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: H3jTyRlviQDZUSJc8TpRwj8PKRA.roa (hash: p+++YoYuwo888NrE0/pgeoUageDuwSXAR7Cb5CIQ67s=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: aUKQSZZXbP8H3ME9/WR2WdMRXkYbjIGAkiBpUlRXiIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:40:81:82:f3:d3:e6:f4:da:73:b8:82:f7:f9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=e90a78aa904c907f5c9e33be6f153b1745d49df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:80:f3:e8:50:fd:3d:0d:45:cf:55:cc:30:
1f:7c:9d:bb:82:5d:a6:af:8e:a9:b3:7d:fe:93:86:
fa:e8:85:f0:c5:31:d0:ea:4c:ad:be:a3:ee:bd:d5:
09:ac:63:18:ff:aa:3f:20:3f:94:7e:b0:5d:db:bd:
ae:8b:4a:35:44:1e:19:b5:31:e4:ce:11:f9:bf:a5:
57:92:8d:6f:9b:ac:c9:df:31:4c:4c:ef:ff:7a:e3:
62:56:b3:03:83:1e:69:7e:d3:da:c9:8a:d0:98:30:
35:44:0d:66:5c:89:8b:dd:21:ba:b3:21:2d:6f:65:
b1:fe:3c:e1:bd:ae:db:f9:98:30:ed:cc:76:72:e7:
5b:f4:37:26:1c:e5:aa:cc:4c:2c:12:ea:6c:cd:8a:
ef:6a:eb:67:d1:e4:e0:e4:ab:72:2f:b7:c2:b9:44:
c6:9e:1d:18:ae:c8:00:e4:ee:b4:2d:70:58:40:67:
37:98:59:9d:d0:c3:7b:96:ec:d4:5b:71:23:7a:77:
4b:c2:f6:58:34:ea:af:fd:4f:43:d8:95:56:9a:e2:
12:d7:7f:e5:fb:c3:af:38:94:48:ce:e3:20:e2:a4:
2d:b2:36:d9:d5:1f:4b:35:98:7d:ad:49:e7:bf:62:
a0:a9:13:63:b9:0f:33:41:bd:63:8b:71:17:59:5a:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:78:AA:90:4C:90:7F:5C:9E:33:BE:6F:15:3B:17:45:D4:9D:F6
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:ca:b0:98:11:d1:2d:aa:a0:da:29:c3:b4:31:a6:0d:45:
c1:c1:1c:44:e3:92:a7:8a:e8:05:f1:1e:af:ef:79:da:55:c8:
ca:25:cc:09:23:71:1b:31:e6:77:f8:3b:d4:17:a2:6b:f4:81:
54:61:ac:7b:b7:d6:30:a1:69:85:3b:a2:9c:c1:db:7c:6b:3c:
81:bd:0f:aa:c7:5e:62:6c:4f:1f:ff:d2:1d:8f:a5:64:55:74:
dd:54:9e:ed:9e:4d:90:bc:9f:90:19:ae:dd:05:a1:be:08:26:
a9:1c:60:96:0e:c6:62:8e:95:99:c9:17:0e:7a:23:a5:8a:fa:
c3:3a:92:ae:c2:58:6d:a2:b9:94:3b:ba:19:2f:f6:51:98:41:
97:b8:f0:c7:66:98:c0:73:69:61:b7:85:4a:74:f8:a8:e9:bd:
6d:a1:cd:0f:7b:e7:14:29:9b:4c:44:2a:b2:bc:74:25:c1:72:
30:b3:1c:b2:bc:7d:e9:2f:b3:10:5b:7c:a4:38:0d:45:e2:1f:
c7:7b:97:78:ce:47:ed:2f:dd:ba:ea:10:2b:c0:b9:39:6a:7e:
59:fc:17:a7:bf:15:13:2a:c1:06:61:39:58:8e:84:12:bb:bf:
7a:53:a3:55:5f:d2:39:a5:07:60:a8:28:84:72:59:ff:97:41:
4d:52:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:15 2026 by rpki-client