Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: TjRZHHQOaQ9eveDsOWiLChDfy8Kfe/VBp7leda5cr2g=
Subject key identifier: 37:D9:DA:EA:B2:B1:5B:EE:34:ED:2B:8D:39:05:BE:AA:63:EE:92:7F
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019F1830F45C7FF214F62FDFD35CD35FDE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 1414
Signing time: Tue 30 Jun 2026 11:01:29 +0000
Manifest this update: Tue 30 Jun 2026 11:01:29 +0000
Manifest next update: Wed 01 Jul 2026 11:01:29 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: yFM6Li2/MF7lwqyU+niTowjopcbgYUnLoR4+3qgzlaQ=)
2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:f4:5c:7f:f2:14:f6:2f:df:d3:5c:d3:5f:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jun 30 11:01:29 2026 GMT
Not After : Jul 1 11:01:29 2026 GMT
Subject: CN=37d9daeab2b15bee34ed2b8d3905beaa63ee927f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:36:1d:b4:3f:c0:3a:d9:af:38:70:59:4a:
28:5a:59:ef:11:c8:e6:c3:f3:d3:e1:22:eb:c2:1c:
af:9f:f7:d4:22:b5:cc:55:8b:96:fd:3f:f0:69:b3:
81:60:8d:d6:24:b2:4e:b4:5b:64:a1:63:ce:41:0f:
29:3f:7b:0e:db:0e:06:35:1a:75:39:29:0c:79:16:
d0:0f:05:5f:bb:4a:1e:7d:24:1c:65:cc:f8:e1:4f:
8f:12:f2:96:b3:f8:b4:2a:93:a7:15:1f:5f:6d:d6:
5a:8f:03:fe:25:78:e7:0f:8a:b6:f1:04:3a:32:c5:
e7:fa:ba:6b:b5:6f:d1:67:a7:38:56:97:70:cf:74:
1e:4a:a8:83:e1:0e:f5:a0:6c:37:17:63:c1:56:77:
8c:c3:f8:df:2d:b4:35:82:ba:83:ff:c9:fc:07:03:
4a:2e:71:4a:8e:8d:2e:23:1d:c3:4f:e8:d3:fb:4b:
49:d8:f0:d4:1c:6d:79:00:d8:ee:dd:68:3f:f3:30:
70:44:ea:1d:e7:cb:dd:16:7f:4f:db:df:50:7b:4f:
a4:59:b8:01:08:29:f2:0a:8c:2b:f1:6e:5d:a9:1b:
29:ed:7d:3e:2c:c6:8c:27:48:1d:53:a7:de:86:bb:
a3:38:63:b3:7b:ad:ea:67:33:25:81:d9:fa:4c:a2:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D9:DA:EA:B2:B1:5B:EE:34:ED:2B:8D:39:05:BE:AA:63:EE:92:7F
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:ec:4b:15:1b:ef:dd:6c:43:ff:6e:15:d1:9f:cd:c0:7b:
3c:36:75:a8:37:f1:c2:67:8b:d4:bd:72:3c:4c:1c:64:de:79:
c4:5d:5a:1a:c7:65:e6:db:25:17:5c:76:e9:93:a1:62:c5:bd:
fd:86:ec:b7:63:b0:41:a9:3e:b4:ea:a2:d1:d2:b6:1a:86:db:
77:0f:ff:a6:33:ca:b7:27:7c:1f:8e:9c:c8:54:10:cf:03:f7:
e0:d9:36:19:2d:9f:d2:07:88:7d:d9:94:59:ce:46:dc:75:2a:
4c:7d:ed:9c:e4:dc:a7:aa:eb:92:17:cc:f8:28:10:87:1b:e3:
b8:88:b4:28:32:b8:b4:9d:5a:b7:8b:2d:63:69:36:bd:4c:13:
c0:95:9b:29:e1:5d:8a:4a:ea:ce:d5:52:9f:73:9d:20:78:af:
74:a9:02:d5:c6:3c:86:96:90:ae:f2:77:07:b2:3b:8e:79:25:
40:85:32:25:bc:9a:33:18:fe:66:51:03:2d:d2:21:88:2e:3b:
f8:f4:f9:d0:ad:d2:fd:dc:dd:e7:04:32:39:ca:c7:6b:18:4a:
67:eb:aa:67:b8:c1:c1:fb:3f:1a:43:97:10:f9:0d:b5:1f:8b:
6f:b6:37:5d:b9:e8:77:93:81:6a:28:fd:04:40:9f:5c:9b:5e:
b2:1b:65:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:31 2026 by rpki-client