Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: FxL9Ekcq3bHzpksHm0hYF2k4xOERIrP6k/EC+SEbGWs=
Subject key identifier: EF:D8:90:28:03:DD:1E:DB:D3:92:4E:E7:E0:DB:02:30:B6:1E:14:03
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019E3072C33ABE3A6747CC1089BB5ED98048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 139C
Signing time: Sat 16 May 2026 11:01:27 +0000
Manifest this update: Sat 16 May 2026 11:01:27 +0000
Manifest next update: Sun 17 May 2026 11:01:27 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: UiAwWKXkidf6T7AEpD/7gEKSC8r1OzyrBIzdMeaBxEM=)
2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:c3:3a:be:3a:67:47:cc:10:89:bb:5e:d9:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: May 16 11:01:27 2026 GMT
Not After : May 17 11:01:27 2026 GMT
Subject: CN=efd8902803dd1edbd3924ee7e0db0230b61e1403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:b2:ac:73:b3:84:6a:92:d8:ad:57:a9:b3:
05:48:8d:91:4e:d0:cf:1d:2c:50:da:fa:cb:6b:63:
be:ea:b4:f4:db:cb:a9:5b:ab:5f:74:61:dc:4c:ec:
bf:2a:83:23:3a:6e:0a:be:46:4c:52:28:7b:94:c8:
64:fa:d0:3c:cf:cf:97:28:c4:87:40:ca:99:51:af:
21:c1:50:9c:4f:63:ea:24:6c:d0:dc:dd:87:56:85:
50:f1:ec:e7:a7:7c:17:7a:48:c3:1f:cb:da:21:30:
cb:c2:b1:91:a8:9a:be:33:bc:8b:1c:21:41:18:96:
4e:d5:65:2a:70:15:46:72:e5:ea:2f:7f:1e:0c:88:
ce:ea:a8:49:24:10:9a:91:e1:b4:09:42:25:61:d9:
5e:04:76:63:03:7e:14:ba:0a:f3:92:74:eb:60:9e:
1c:20:05:ce:ee:30:8c:be:3b:31:a4:78:ed:64:d8:
f7:4a:0d:97:ec:13:06:38:fc:c6:fd:67:ea:2f:ab:
17:e6:56:a3:7e:cb:2e:fb:9a:f6:40:f3:64:f9:77:
45:4d:14:b2:3d:2f:c1:79:c5:7c:66:e9:10:73:85:
4d:2b:f0:5d:ff:b4:ea:fa:bb:21:36:97:9d:33:05:
a9:93:70:ff:65:36:2e:5e:5f:55:e5:2e:7c:d3:c5:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D8:90:28:03:DD:1E:DB:D3:92:4E:E7:E0:DB:02:30:B6:1E:14:03
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:46:a4:5c:0a:fa:33:99:20:39:98:94:4b:37:c4:e7:fd:
25:a9:32:0f:a0:69:6f:90:94:f2:e5:f1:91:b2:e6:79:92:b4:
1d:58:78:b4:31:21:72:f0:cc:fc:75:05:80:99:da:f1:e7:2f:
a1:d4:20:f5:5a:ca:fc:1a:33:1f:02:bf:c4:1c:90:9a:70:ef:
e2:e0:a6:74:ea:4d:e5:33:52:7c:b1:c5:67:23:e9:0b:28:66:
63:1c:db:22:c1:45:fc:90:40:7f:38:70:1f:15:d0:d0:c3:d2:
08:f2:4b:4d:3c:6e:6a:fb:8e:53:50:31:6e:d1:07:d3:3a:46:
43:53:03:0f:23:ee:b3:81:e5:1e:51:ca:b2:1f:4c:02:d0:3c:
36:dc:6e:a4:91:77:b2:1f:ad:3b:3c:64:1a:f6:43:00:6d:73:
af:d2:e2:17:5d:9d:9f:0a:e9:17:13:f4:77:e2:e7:b3:65:5d:
d4:e5:2a:2b:0a:13:df:10:25:1d:f6:57:b2:3f:49:fe:e3:c6:
e9:a5:56:a5:1b:ab:79:8b:73:8b:5f:30:38:08:a1:5f:58:67:
30:b0:0a:c9:01:92:c7:28:3a:f3:26:71:5e:5e:87:55:7a:43:
3c:d0:c3:c8:f8:7a:0d:2e:e1:ae:bd:72:67:ba:22:b7:9d:09:
9a:be:93:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcsM6vjpnR8wQibte2YBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNGE2MzE4YjJlZDZkMGM4MjM0Zjk4MjA4Zjg4ZGUwZTlk
NDY5OGUwHhcNMjYwNTE2MTEwMTI3WhcNMjYwNTE3MTEwMTI3WjAzMTEwLwYDVQQD
EyhlZmQ4OTAyODAzZGQxZWRiZDM5MjRlZTdlMGRiMDIzMGI2MWUxNDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg6yrHOzhGqS2K1XqbMFSI2RTtDP
HSxQ2vrLa2O+6rT028upW6tfdGHcTOy/KoMjOm4KvkZMUih7lMhk+tA8z8+XKMSH
QMqZUa8hwVCcT2PqJGzQ3N2HVoVQ8eznp3wXekjDH8vaITDLwrGRqJq+M7yLHCFB
GJZO1WUqcBVGcuXqL38eDIjO6qhJJBCakeG0CUIlYdleBHZjA34UugrzknTrYJ4c
IAXO7jCMvjsxpHjtZNj3Sg2X7BMGOPzG/WfqL6sX5lajfssu+5r2QPNk+XdFTRSy
PS/BecV8ZukQc4VNK/Bd/7Tq+rshNpedMwWpk3D/ZTYuXl9V5S5808V2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/YkCgD3R7b05JO5+DbAjC2HhQDMB8GA1UdIwQY
MBaAFPFKYxiy7W0MgjT5ggj4jeDp1GmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQt
Yzg2ZWQ0ODYyNTAxLzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQtYzg2ZWQ0ODYyNTAx
LzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV05GpFwK
+jOZIDmYlEs3xOf9JakyD6Bpb5CU8uXxkbLmeZK0HVh4tDEhcvDM/HUFgJna8ecv
odQg9VrK/BozHwK/xByQmnDv4uCmdOpN5TNSfLHFZyPpCyhmYxzbIsFF/JBAfzhw
HxXQ0MPSCPJLTTxuavuOU1AxbtEH0zpGQ1MDDyPus4HlHlHKsh9MAtA8NtxupJF3
sh+tOzxkGvZDAG1zr9LiF12dnwrpFxP0d+Lns2Vd1OUqKwoT3xAlHfZXsj9J/uPG
6aVWpRureYtzi18wOAihX1hnMLAKyQGSxyg68yZxXl6HVXpDPNDDyPh6DS7hrr1y
Z7oit50Jmr6TXw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:39 2026 by rpki-client