Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File: UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier: 76zgyR7M1mZaqLLoouiZG8NicAFz93LKc9eqzIVaP08=
Subject key identifier: C5:3F:D3:F0:06:BA:F1:5F:6A:D6:2A:F0:0E:32:27:21:D2:0C:E7:D9
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer: /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial: 01A0D501D9466AEC67B0713E21D911DDD8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number: 08FA
Signing time: Thu 24 Sep 2026 20:01:03 +0000
Manifest this update: Thu 24 Sep 2026 20:01:03 +0000
Manifest next update: Fri 25 Sep 2026 20:01:03 +0000
Files and hashes: 1: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: kg9WwG3VQJNIRMJVxCzQrIiwwjDA0dZm0tGxKN3OsXY=)
2: mf0gWWT9tDUujC29k27IpTbJ344.roa (hash: CIBQigWs2TocsqchNE4I1RZtMQ3hnsC16oL8fK2cCdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:d9:46:6a:ec:67:b0:71:3e:21:d9:11:dd:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Validity
Not Before: Sep 24 20:01:03 2026 GMT
Not After : Sep 25 20:01:03 2026 GMT
Subject: CN=c53fd3f006baf15f6ad62af00e322721d20ce7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:85:9a:56:73:27:25:06:59:7c:67:3f:bd:
7c:33:a8:f6:f2:58:06:44:b7:70:86:6e:a0:05:96:
ec:c9:76:e8:22:7f:09:48:77:29:7e:f8:1e:9f:18:
99:f5:dd:55:ae:45:4f:7c:6f:f4:e9:a2:91:9f:cb:
be:49:8f:4e:85:53:52:d7:a9:2d:c3:2d:ff:d4:ce:
57:9a:b0:d2:eb:3c:61:61:fc:fa:60:17:77:1a:4a:
64:34:99:a6:f9:35:30:89:39:07:c0:c1:fc:64:90:
22:50:91:a3:f0:46:d4:1c:ff:68:0d:36:48:6e:34:
50:d3:f5:50:c2:22:d6:90:37:a2:5f:1b:96:92:4a:
c3:d1:03:22:bf:cf:1c:5f:96:17:52:ab:81:b6:cb:
a6:4b:5e:ed:ec:c6:a7:85:b4:86:e7:46:da:8e:f0:
7c:e0:c2:38:9b:ef:d6:0f:a5:7c:fa:79:ad:4f:b4:
72:60:f9:8d:64:de:72:fa:5f:12:4f:78:01:0c:d1:
77:10:3b:53:eb:24:bd:cb:28:f0:6c:6e:8d:4c:06:
d2:f7:44:c4:4b:fa:19:2a:1f:09:d9:63:f2:3d:64:
82:68:c7:dc:36:0a:8b:18:cb:29:80:3e:26:23:f3:
07:63:3d:51:4c:8b:3a:2b:b1:4c:00:70:85:83:1b:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:D3:F0:06:BA:F1:5F:6A:D6:2A:F0:0E:32:27:21:D2:0C:E7:D9
X509v3 Authority Key Identifier:
keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fb:91:62:33:50:05:ee:41:59:f6:af:ee:8a:31:79:d8:4a:
8d:79:51:91:8a:a3:26:9e:14:02:fa:8c:3e:3d:ed:23:55:f2:
4a:f7:ab:92:57:1c:7c:84:aa:f8:e8:a3:b0:2b:7c:7d:d5:d4:
ce:db:ce:c5:f4:a7:f0:1f:f1:d3:bc:58:05:09:dd:cf:40:25:
bd:7c:22:2c:f6:8f:c1:f3:7a:a9:f1:fd:49:cd:29:f0:3c:b6:
1f:30:67:08:61:95:b0:b1:73:54:47:c3:4f:dc:4b:53:8b:85:
f7:25:aa:ba:70:06:b0:17:fe:26:6d:9d:89:3b:16:2e:ab:75:
74:72:2f:7e:4e:38:3f:c5:7b:f1:38:2e:ab:68:93:e6:73:94:
16:1b:40:93:90:e7:36:d4:98:56:64:15:c7:d8:9a:0e:d5:90:
23:47:6b:15:eb:66:9a:36:a1:02:33:13:26:e6:4a:66:a4:41:
94:c1:91:23:d2:17:4b:45:4a:ee:73:78:9f:71:c8:e9:4f:72:
ef:0b:71:78:79:7a:5d:37:ec:10:11:e1:f0:57:02:30:9b:9e:
15:41:66:f4:98:32:56:f5:a6:1d:a1:63:e1:d2:99:0a:3d:30:
23:48:ba:3b:f0:7b:fe:d9:df:bb:1e:6a:3b:f4:0d:44:b4:25:
a8:18:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:40:04 2026 by rpki-client