Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File: UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier: Wzug2hMAmrh5WZgxEATOm7tQIPY6G6Fjfvd3AEM9BrI=
Subject key identifier: CC:9A:05:CE:43:C3:FE:99:7A:8D:FD:68:B9:80:3B:3C:77:C8:B7:5B
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer: /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial: 019F927EEAAFC277CCEE12B31A53FB6081A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number: 0853
Signing time: Fri 24 Jul 2026 05:00:18 +0000
Manifest this update: Fri 24 Jul 2026 05:00:18 +0000
Manifest next update: Sat 25 Jul 2026 05:00:18 +0000
Files and hashes: 1: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: /JFJcu+2ONjOM80OjehZfizugzwp1EFvNh8OgXKlPgc=)
2: mf0gWWT9tDUujC29k27IpTbJ344.roa (hash: CIBQigWs2TocsqchNE4I1RZtMQ3hnsC16oL8fK2cCdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:ea:af:c2:77:cc:ee:12:b3:1a:53:fb:60:81:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Validity
Not Before: Jul 24 05:00:18 2026 GMT
Not After : Jul 25 05:00:18 2026 GMT
Subject: CN=cc9a05ce43c3fe997a8dfd68b9803b3c77c8b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:74:15:d0:e8:e6:a2:b1:a9:3d:16:6a:8f:
4b:f6:77:e9:6d:32:35:2f:c2:96:f7:f0:eb:cd:30:
72:73:c5:e1:a1:7f:3a:ef:0f:e8:9a:d2:aa:24:1b:
ac:0a:cc:8c:17:d3:a6:93:2b:12:8e:e5:ad:36:ec:
49:ba:2b:1d:81:53:6e:a9:09:be:08:fc:be:6c:7a:
fd:46:3f:a2:8b:ee:c2:cf:43:b7:3b:9a:be:96:76:
9f:2c:4a:22:42:03:26:3f:dc:86:f3:e8:a0:5b:23:
f3:71:17:a8:8f:7f:b6:ba:ae:85:1e:a6:6d:87:de:
6d:48:c0:18:f3:02:9a:6c:f3:c7:31:0f:7d:07:ad:
c9:a5:b8:d7:a2:b5:b0:a2:2d:6e:e0:57:ba:c9:a7:
3d:48:73:8b:b4:57:b8:62:54:21:97:4f:d4:5a:27:
6d:c4:5f:6f:12:60:cd:6e:5f:89:d0:ca:34:ec:4d:
94:8e:51:e2:ea:7f:a6:32:5c:0f:29:ae:5b:82:85:
ab:91:23:23:78:6f:d1:e2:55:d2:66:49:a7:97:f2:
e1:c1:1a:a7:db:96:76:c4:27:6e:0e:83:b5:83:2a:
37:ea:e0:55:bf:a8:ce:61:10:76:8e:13:1c:36:a0:
12:40:ef:d0:76:01:29:9f:73:d8:14:c1:7e:2a:65:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:05:CE:43:C3:FE:99:7A:8D:FD:68:B9:80:3B:3C:77:C8:B7:5B
X509v3 Authority Key Identifier:
keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e6:7f:40:03:f4:58:1f:61:15:48:2f:af:c1:80:a2:fc:79:
a5:11:67:7f:50:7e:d1:84:66:9c:cd:c1:6b:01:9a:f0:16:4f:
9b:ff:a5:59:be:c7:2b:be:9f:40:91:40:e0:82:b8:08:f1:fd:
a1:5d:38:1c:07:a4:93:4a:62:a6:2a:97:f6:7f:9d:b4:bb:e1:
15:9b:2e:7f:c0:20:5f:9e:4b:8e:13:56:19:6f:3b:89:78:a0:
ec:b4:bf:e6:ec:4e:5c:50:d1:c0:01:a8:9e:06:87:bb:fe:b0:
6a:aa:5e:17:1c:c8:46:c8:e0:fd:fa:98:f0:c1:5a:2e:8b:fc:
ba:7e:a8:03:9f:da:e1:66:0d:eb:7a:43:7e:24:19:d3:6f:89:
f0:76:25:6f:e6:e3:1c:00:0b:9e:c5:93:a4:d6:6c:65:95:88:
c5:1b:48:80:db:b6:1b:73:63:eb:08:d7:fb:fb:9d:21:40:58:
96:e5:9a:60:db:ee:b8:0c:c3:48:c2:92:a4:41:af:87:d3:38:
d8:f8:2b:25:b8:92:bb:64:bf:36:46:6a:24:06:7c:67:ff:b1:
4c:e2:44:9a:af:70:e9:16:05:87:4a:26:b7:e7:36:5d:a2:6d:
f7:0f:33:ab:25:44:87:16:87:87:9b:e6:15:dd:7b:31:64:a8:
22:e1:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:08 2026 by rpki-client