Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: 0T5wl5MCvXEHV0mlOWsO7kSJfPtvy9wlTWuyr0p457M=
Subject key identifier: 74:E7:3D:D4:B2:05:A6:91:45:AB:1E:02:4B:DC:B2:82:5F:BB:90:31
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019D3940E88AD921FB15CDAE6D9903B27858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 131C
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: L1+dsh4cRmN7xcjMZtFxXIzrdzXXyPQgxG020XW3bNA=)
2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e8:8a:d9:21:fb:15:cd:ae:6d:99:03:b2:78:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=74e73dd4b205a69145ab1e024bdcb2825fbb9031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:05:fb:2d:af:ec:68:63:af:c8:76:95:56:
be:6d:ec:bc:b0:79:c2:64:21:d4:a9:4f:00:61:bc:
71:3c:80:03:a7:a9:85:ed:ac:66:d4:9c:eb:5d:2d:
d5:34:87:2e:ff:39:e1:f7:33:31:39:d3:69:a3:a1:
b6:0c:d2:de:b3:32:02:c7:af:96:66:eb:f4:fd:d7:
b4:66:77:08:5b:59:ca:fc:45:47:1f:76:49:a0:33:
58:fd:ec:bd:ba:f1:e1:f4:b9:c4:e3:72:13:1c:66:
df:51:27:e0:85:3a:36:32:a2:24:18:1a:13:b3:d2:
30:55:6d:12:61:90:24:91:3a:88:b6:80:03:14:d3:
88:87:68:53:bc:ef:26:92:a5:aa:bd:09:e3:1f:a6:
a1:31:00:84:38:d2:bf:9a:ba:9d:36:6f:60:a5:a0:
fa:18:ad:fa:51:2f:8b:c8:50:80:3b:6c:c6:0d:ca:
df:22:c0:b2:7f:d8:f7:c1:7a:b7:b5:68:f5:51:1e:
c9:2b:41:76:84:f9:f4:17:18:8c:79:48:18:18:5b:
4c:3b:38:88:bc:1f:15:a9:6e:bf:37:46:6b:5c:7c:
e3:b8:0f:f5:cc:c2:7b:17:32:96:96:ef:49:66:ed:
2b:c1:0f:91:ca:21:7e:55:d4:a1:eb:6f:7f:56:d2:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:3D:D4:B2:05:A6:91:45:AB:1E:02:4B:DC:B2:82:5F:BB:90:31
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:73:0c:cd:4a:b8:7b:a2:f2:39:49:fe:03:dd:87:4e:8c:
57:76:3c:a3:dd:21:48:60:17:f6:54:a5:96:d4:7e:16:03:44:
a0:09:13:03:81:b8:d8:45:8d:eb:43:f2:3b:c8:cb:dc:89:fc:
f5:b1:08:97:fc:ed:49:db:7b:9a:6e:49:99:d1:d1:66:b8:34:
7e:93:a7:c7:bd:e4:78:7b:52:cc:5d:1c:a1:d1:bb:58:17:c5:
48:54:b7:62:96:8e:e9:c4:f4:36:91:c2:d6:d2:5d:ae:32:ea:
eb:23:a5:b6:3f:6c:c8:e9:31:da:56:5b:07:04:57:1b:de:1a:
bc:f1:8c:95:43:30:66:81:21:92:0c:57:ad:c2:fd:bb:c0:c5:
b1:ef:56:be:78:4d:cc:70:e6:3d:88:37:65:e3:2f:4c:41:77:
45:c1:8e:90:b1:66:83:66:52:f0:47:63:31:31:bb:3c:db:65:
68:9a:71:2e:29:45:1d:7c:92:52:31:60:5f:66:ee:17:10:f3:
a7:95:10:ed:aa:25:1d:b7:da:87:f3:a9:5e:0f:5d:81:37:24:
3b:b2:f5:41:f9:8a:1c:c4:2c:61:ce:22:e0:b9:ad:aa:7e:74:
83:67:ca:ae:f1:29:81:38:c9:b5:48:4b:2b:8b:98:6b:ed:a6:
73:0a:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:31 2026 by rpki-client