Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.mft
File: UpJ_N-1Ur-zpI7X5l7axTug_YOA.mft (raw, json)
Hash identifier: 5bIYuB/JUfVK10esGnZ2wZ+fALSf+M+cv+gMwGwl/O0=
Subject key identifier: 45:97:33:1E:7A:EB:F5:22:7C:7F:9A:C9:E8:DA:60:B3:96:8C:F6:E7
Authority key identifier: 52:92:7F:37:ED:54:AF:EC:E9:23:B5:F9:97:B6:B1:4E:E8:3F:60:E0
Certificate issuer: /CN=52927f37ed54afece923b5f997b6b14ee83f60e0
Certificate serial: 019D371BE9D657E166873F19C38995FD1932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ_N-1Ur-zpI7X5l7axTug_YOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.mft
Manifest number: 06
Signing time: Sun 29 Mar 2026 01:01:09 +0000
Manifest this update: Sun 29 Mar 2026 01:01:09 +0000
Manifest next update: Mon 30 Mar 2026 01:01:09 +0000
Files and hashes: 1: UpJ_N-1Ur-zpI7X5l7axTug_YOA.crl (hash: 2yttsaM8/G+aoXKy7GhBOTrdBBR1yVmL9p5E8W165YE=)
2: bee1V3DAsL3vmxIGCRqRRw8rRe4.roa (hash: OXTvc3Kqn1zE0kn6NjCTGgCUldoXkwMiJcejV2NhLAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ_N-1Ur-zpI7X5l7axTug_YOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e9:d6:57:e1:66:87:3f:19:c3:89:95:fd:19:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927f37ed54afece923b5f997b6b14ee83f60e0
Validity
Not Before: Mar 29 01:01:09 2026 GMT
Not After : Mar 30 01:01:09 2026 GMT
Subject: CN=4597331e7aebf5227c7f9ac9e8da60b3968cf6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:1e:ce:9f:7e:15:68:e2:9e:98:34:8f:36:
cb:7a:58:5d:cf:cc:6e:1d:2a:b4:16:13:2b:fb:da:
b0:12:e8:e2:83:f3:fd:19:24:0e:f3:2b:71:16:ca:
9e:00:96:a1:0e:e2:f4:55:6b:fc:7a:4d:71:ac:df:
32:dc:02:56:cb:1b:9d:0f:80:fe:9b:66:0a:29:6d:
ae:1f:0f:b0:42:72:28:8f:19:6a:b8:dd:d1:15:3d:
36:32:20:f6:1a:53:61:60:1e:b1:d6:fa:41:1a:0d:
11:ea:f6:f6:c7:f7:9f:43:a7:f6:8a:89:f0:1f:46:
f4:9c:37:f7:cd:2c:53:fa:64:0b:8a:77:69:e6:3b:
e1:7a:a3:be:f7:04:dc:37:29:8d:18:43:3d:cd:97:
5f:75:54:b9:e7:9e:8c:62:1f:56:26:66:0f:91:4e:
54:d9:38:f6:b1:5d:9c:e2:93:b2:2b:c2:32:84:4d:
8e:e9:be:17:cb:ba:04:fe:bd:f6:54:52:d2:fe:b9:
d7:de:1a:26:7b:25:5b:e6:6a:5a:60:2a:dd:fb:75:
23:11:5c:a3:9e:2c:c6:5f:23:02:b4:c8:54:ee:d7:
35:05:72:2c:66:d8:f9:74:95:02:68:22:2d:02:6b:
f0:93:d9:e2:a7:a5:84:1e:c8:93:de:0f:f1:7e:b0:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:97:33:1E:7A:EB:F5:22:7C:7F:9A:C9:E8:DA:60:B3:96:8C:F6:E7
X509v3 Authority Key Identifier:
keyid:52:92:7F:37:ED:54:AF:EC:E9:23:B5:F9:97:B6:B1:4E:E8:3F:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ_N-1Ur-zpI7X5l7axTug_YOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fa:9d:2b:b9:19:20:0d:22:8e:96:8b:1e:03:74:8c:07:f8:
57:24:d3:e1:5c:82:ed:26:05:2b:df:f5:e3:71:f5:9b:eb:5f:
89:e4:bd:1a:2c:0f:5d:85:60:6b:d3:1b:1a:94:d4:d0:41:0a:
39:63:de:90:32:17:e2:d9:34:f2:39:af:bd:6d:57:4b:fb:ab:
82:53:97:ec:f1:46:34:9f:73:3c:25:f4:b1:af:31:8f:e0:7a:
f4:2b:13:51:51:1d:38:fa:34:80:67:dc:fd:4a:21:ee:40:32:
ba:d2:fd:4b:2f:ef:5e:72:47:f4:d1:2b:39:00:c8:e9:68:1b:
0d:6b:d7:75:11:9f:7c:4f:af:76:8e:86:2b:5c:15:dc:ba:05:
d0:d2:dd:3d:23:a2:a8:76:25:71:10:10:6f:75:c7:ae:08:6c:
2f:5a:e1:ed:f2:63:f6:a7:bd:a1:92:6c:76:61:6c:e8:27:f6:
fa:48:32:84:5b:66:c0:ec:69:c1:2c:e1:21:39:ce:06:a3:da:
94:9e:41:d8:b9:1f:76:ac:f6:05:47:1b:5f:09:13:cf:fa:76:
88:da:a6:26:ca:47:05:30:23:b9:65:4c:15:f3:45:a7:d5:0b:
2b:53:33:72:91:3f:74:8e:79:97:7c:4d:31:72:98:14:20:51:
5d:85:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:04 2026 by rpki-client