Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: bP8ErazzuvwIAj6+RmTOkVtz2e++aPLgZf7CF1FZoZc=
Subject key identifier: AE:33:34:4C:9F:D4:FA:2F:14:EC:3D:53:92:12:E8:BC:BF:BA:01:83
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 01A08C437FA5CBBB95FE89995E49F86142D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 17:00:28 +0000
Manifest this update: Thu 10 Sep 2026 17:00:28 +0000
Manifest next update: Fri 11 Sep 2026 17:00:28 +0000
Files and hashes: 1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: eSBfcCLvXOxw0AzAIpyoqqpzVukHi1Td+XRgAQFQtuE=)
2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:7f:a5:cb:bb:95:fe:89:99:5e:49:f8:61:42:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Sep 10 17:00:28 2026 GMT
Not After : Sep 11 17:00:28 2026 GMT
Subject: CN=ae33344c9fd4fa2f14ec3d539212e8bcbfba0183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:48:c9:85:1e:3e:87:30:38:7d:ce:6d:d3:
ee:0a:8f:e0:3d:b3:d6:1b:4a:b9:96:76:38:05:15:
d2:f2:e8:d4:ab:20:0c:73:54:53:80:d4:42:73:30:
55:96:b0:32:35:5d:d4:d5:8a:da:11:e7:1a:28:27:
10:c9:54:06:e6:56:f7:e5:bb:cd:ad:0b:15:37:e1:
d7:3e:c3:1d:7a:df:c5:71:36:5e:ca:90:28:84:d1:
be:51:6a:7e:af:db:6b:ee:9d:28:ab:9d:ea:ca:e3:
5c:62:b7:fe:ae:36:12:5e:67:c3:25:35:4d:7e:dc:
76:4a:19:83:5a:d5:c7:5f:b7:9c:a5:83:6d:7a:f1:
03:77:53:64:42:75:27:5b:50:d3:66:b1:78:e1:d3:
cb:5c:ff:44:40:1d:9d:58:12:55:6e:32:e9:4a:ed:
aa:ac:d6:38:e8:5c:86:c4:bc:34:9d:02:0a:b2:ec:
22:68:be:d6:ad:da:08:a8:ab:29:48:1a:3f:13:4d:
a1:d6:b8:00:ef:63:58:14:e7:94:34:5d:f8:f1:f9:
47:83:01:bc:be:b0:61:8d:58:2c:74:08:9d:05:ba:
df:12:7b:25:93:97:ae:5f:d9:d0:6d:15:14:40:e4:
40:34:c0:ea:fd:98:6e:d9:0b:06:89:4e:b1:2a:11:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:34:4C:9F:D4:FA:2F:14:EC:3D:53:92:12:E8:BC:BF:BA:01:83
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:f3:7b:01:7c:b2:cc:0b:b0:8c:22:71:0b:88:46:5c:26:
17:b6:60:a3:e3:c1:ab:8d:a8:d5:b1:cb:08:bc:b7:2b:a3:33:
94:3f:a0:54:06:72:80:ae:02:d3:35:8a:a5:af:d9:7c:5c:6f:
12:ef:4f:6b:a9:84:30:5f:c9:de:d8:8c:ad:a1:ca:c0:f0:3e:
06:95:32:f0:9d:bf:de:60:eb:9a:6d:0e:60:aa:37:66:dc:02:
cb:01:03:98:f8:11:f0:5b:05:2d:ed:9b:95:b1:39:36:bd:02:
6f:16:63:94:1e:b6:f2:37:4e:51:47:90:55:93:7b:e9:31:c9:
9e:46:3a:5e:47:cc:1b:b2:8f:e5:4d:2b:9d:6a:83:f6:e3:ef:
ee:22:d6:2f:cd:a8:a5:d8:c9:e5:c0:13:8b:63:53:01:cb:3f:
4d:6a:de:9d:f5:37:1a:2a:5c:2d:12:30:51:f2:2e:be:e5:dc:
58:e2:49:ad:e2:19:0d:4f:bc:d9:86:28:21:3a:5a:1d:3e:51:
8f:0f:8d:1e:f2:a9:e8:6f:17:87:9c:2f:dc:25:45:dc:3a:13:
3f:bd:27:0d:ba:f9:03:c9:ba:24:af:bf:46:06:af:ac:fa:25:
6c:10:cb:ec:cc:d2:62:91:f1:29:77:6e:3f:1a:a7:46:b8:1a:
56:07:ce:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ3+ly7uV/omZXkn4YULRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTIzMWIyNDdiZmY2NWI0YzYzNDE5MDdlY2Q1ZWFiYTdm
OWNhOTIwHhcNMjYwOTEwMTcwMDI4WhcNMjYwOTExMTcwMDI4WjAzMTEwLwYDVQQD
EyhhZTMzMzQ0YzlmZDRmYTJmMTRlYzNkNTM5MjEyZThiY2JmYmEwMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYtIyYUePocwOH3ObdPuCo/gPbPW
G0q5lnY4BRXS8ujUqyAMc1RTgNRCczBVlrAyNV3U1YraEecaKCcQyVQG5lb35bvN
rQsVN+HXPsMdet/FcTZeypAohNG+UWp+r9tr7p0oq53qyuNcYrf+rjYSXmfDJTVN
ftx2ShmDWtXHX7ecpYNtevEDd1NkQnUnW1DTZrF44dPLXP9EQB2dWBJVbjLpSu2q
rNY46FyGxLw0nQIKsuwiaL7WrdoIqKspSBo/E02h1rgA72NYFOeUNF348flHgwG8
vrBhjVgsdAidBbrfEnslk5euX9nQbRUUQORANMDq/Zhu2QsGiU6xKhG+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4zNEyf1PovFOw9U5IS6Ly/ugGDMB8GA1UdIwQY
MBaAFFKSMbJHv/ZbTGNBkH7NXqun+cqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQt
NjUxMzVjZjJmODE1LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQtNjUxMzVjZjJmODE1
LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1fzewF8
sswLsIwicQuIRlwmF7Zgo+PBq42o1bHLCLy3K6MzlD+gVAZygK4C0zWKpa/ZfFxv
Eu9Pa6mEMF/J3tiMraHKwPA+BpUy8J2/3mDrmm0OYKo3ZtwCywEDmPgR8FsFLe2b
lbE5Nr0CbxZjlB628jdOUUeQVZN76THJnkY6XkfMG7KP5U0rnWqD9uPv7iLWL82o
pdjJ5cATi2NTAcs/TWrenfU3GipcLRIwUfIuvuXcWOJJreIZDU+82YYoITpaHT5R
jw+NHvKp6G8Xh5wv3CVF3DoTP70nDbr5A8m6JK+/RgavrPolbBDL7MzSYpHxKXdu
PxqnRrgaVgfOVQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:40 2026 by rpki-client