Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: nbuESTtzCNqs0K7YAywVQAXMCLP1pZdEadqIpOfP75c=
Subject key identifier: A1:B9:13:97:38:5D:2C:20:0E:16:70:BF:1C:F8:18:DA:81:AA:4B:4A
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 019D2703AB46B8416B97CBD3A7397CDDB39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: kRgWNI+gJBVDnfvP6hXbTgsF5PzXXRMOafpxjPpspq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ab:46:b8:41:6b:97:cb:d3:a7:39:7c:dd:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=a1b91397385d2c200e1670bf1cf818da81aa4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:93:c4:c8:e0:12:bb:c4:ac:77:c1:59:27:
d4:b7:6c:d1:49:a8:f4:a4:70:02:fa:cd:d8:38:3c:
29:bf:ba:fb:d9:99:aa:2f:8e:f1:c0:b7:fc:c3:8d:
ea:1f:64:99:b2:3b:f3:7e:d4:e4:36:61:f9:b5:99:
4f:da:5c:23:f3:69:c7:71:a3:39:f8:e6:4e:b4:75:
7f:a3:f4:5c:5e:a4:f0:70:6e:b1:85:a3:25:b9:4b:
a4:cf:4b:2b:a6:41:4e:6a:85:61:82:8d:f6:ba:35:
7d:74:7f:8d:28:a2:e7:fc:9f:91:55:b1:3a:7b:04:
9f:a9:9f:36:c1:ed:f5:71:1f:c7:e8:2d:6b:e3:2d:
32:d2:88:77:ba:f3:2a:89:d3:c0:17:ff:15:90:e0:
57:4c:3b:53:d1:ac:3b:cd:02:92:9a:b5:2b:91:8b:
92:0b:45:c1:45:af:9b:69:91:47:1a:5b:65:da:24:
7e:14:16:47:53:76:f0:7f:b6:c6:5e:5f:34:a2:7d:
fb:79:a6:47:ad:ad:c0:03:ff:bd:f6:3a:39:40:f2:
12:ee:61:22:d3:31:5b:b0:a6:a7:ab:06:45:8e:25:
26:7c:93:ed:74:97:b8:9f:bd:74:03:b6:7a:b0:a8:
b5:d1:bf:9d:e8:a4:80:d4:89:02:12:bd:a3:e1:2f:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:13:97:38:5D:2C:20:0E:16:70:BF:1C:F8:18:DA:81:AA:4B:4A
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8c:4c:6e:94:16:9b:d1:45:74:fd:eb:eb:2c:37:5f:88:5c:
36:89:1f:7d:1f:f1:58:6b:9c:65:f1:92:0c:71:ff:22:d7:82:
3f:a8:2e:d8:e7:34:6f:87:8e:da:c4:02:ad:ce:c8:3f:76:66:
26:12:06:93:3e:a4:e2:94:e6:1b:ce:c0:2c:ce:c1:8a:fa:0e:
bc:b3:f8:d9:fb:e0:2e:99:4b:94:76:1e:6f:b6:d1:88:9e:7b:
e5:33:18:11:2f:1f:e2:4f:bb:4e:89:60:53:67:48:df:07:a0:
8e:bf:45:69:39:14:d1:17:b2:cb:0f:8e:c9:5f:b9:d1:65:aa:
fa:7a:8f:92:a0:c3:91:ae:41:7c:5c:d2:26:19:04:7c:1d:1e:
d1:f3:88:cf:97:46:a6:4e:00:67:19:e2:d2:32:b2:10:14:38:
71:18:1b:7b:a0:40:b2:6b:44:55:e1:8e:ba:03:b8:47:25:22:
ca:52:80:ed:54:97:5b:fc:2c:03:99:22:fd:d5:e5:51:20:9f:
f8:e1:d4:30:68:0c:54:0f:b5:6e:56:56:85:b9:b1:da:b7:b0:
50:44:a8:7e:1d:a7:cd:fc:0f:a5:81:30:b1:d9:18:35:bf:e4:
57:32:f2:a5:76:48:b1:aa:2f:c9:e7:32:a3:b2:41:d2:66:5c:
61:c2:ac:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA6tGuEFrl8vTpzl83bOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTI3ODMyZDM5ODUwZTg1MWVlY2I1YTA1MTE2OTI5OTFk
ZGE1ZDkwHhcNMjYwMzI1MjIwMDQ0WhcNMjYwMzI2MjIwMDQ0WjAzMTEwLwYDVQQD
EyhhMWI5MTM5NzM4NWQyYzIwMGUxNjcwYmYxY2Y4MThkYTgxYWE0YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23OTxMjgErvErHfBWSfUt2zRSaj0
pHAC+s3YODwpv7r72ZmqL47xwLf8w43qH2SZsjvzftTkNmH5tZlP2lwj82nHcaM5
+OZOtHV/o/RcXqTwcG6xhaMluUukz0srpkFOaoVhgo32ujV9dH+NKKLn/J+RVbE6
ewSfqZ82we31cR/H6C1r4y0y0oh3uvMqidPAF/8VkOBXTDtT0aw7zQKSmrUrkYuS
C0XBRa+baZFHGltl2iR+FBZHU3bwf7bGXl80on37eaZHra3AA/+99jo5QPIS7mEi
0zFbsKanqwZFjiUmfJPtdJe4n710A7Z6sKi10b+d6KSA1IkCEr2j4S+LbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG5E5c4XSwgDhZwvxz4GNqBqktKMB8GA1UdIwQY
MBaAFFKSeDLTmFDoUe7LWgURaSmR3aXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTkt
MjU2ZGIzZWQ4MzM1LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTktMjU2ZGIzZWQ4MzM1
LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIxMbpQW
m9FFdP3r6yw3X4hcNokffR/xWGucZfGSDHH/IteCP6gu2Oc0b4eO2sQCrc7IP3Zm
JhIGkz6k4pTmG87ALM7BivoOvLP42fvgLplLlHYeb7bRiJ575TMYES8f4k+7Tolg
U2dI3wegjr9FaTkU0Reyyw+OyV+50WWq+nqPkqDDka5BfFzSJhkEfB0e0fOIz5dG
pk4AZxni0jKyEBQ4cRgbe6BAsmtEVeGOugO4RyUiylKA7VSXW/wsA5ki/dXlUSCf
+OHUMGgMVA+1blZWhbmx2rewUESofh2nzfwPpYEwsdkYNb/kVzLypXZIsaovyecy
o7JB0mZcYcKsuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:55 2026 by rpki-client