Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: dwMivNPEVjlPCLgNxjgMubdbFjAagw7YEYLXGrwAy+A=
Subject key identifier: 65:C6:EC:8F:8B:7B:54:9A:23:D6:F0:61:1E:81:A2:80:D3:5A:AF:D4
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 019D3A8A8AC30F55ACB4C6E96C41EC83DC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 17:00:51 +0000
Manifest this update: Sun 29 Mar 2026 17:00:51 +0000
Manifest next update: Mon 30 Mar 2026 17:00:51 +0000
Files and hashes: 1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: ysPKPLM6V7mhfeeR4+6s9qDRhyg3JEicvxGR4GiUG+M=)
2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:8a:c3:0f:55:ac:b4:c6:e9:6c:41:ec:83:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Mar 29 17:00:51 2026 GMT
Not After : Mar 30 17:00:51 2026 GMT
Subject: CN=65c6ec8f8b7b549a23d6f0611e81a280d35aafd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:93:59:e3:35:7a:fa:25:73:1f:5c:ed:86:
8e:48:46:ec:3f:d3:69:85:90:26:c7:7f:53:ba:17:
16:1d:cf:2f:7e:46:72:0a:ab:12:93:79:47:2f:e4:
68:ae:62:f2:fb:72:18:03:bc:f8:52:1a:b8:6e:e8:
c6:ac:f0:d6:ba:ef:9e:6b:ea:1d:5e:c1:88:26:5c:
23:32:7e:a8:95:ee:30:3e:4e:09:15:05:de:99:c5:
ad:1b:ef:6d:c6:1b:6a:a8:3c:28:69:bd:d4:4f:d1:
7a:12:ea:17:ad:e3:68:26:c5:dd:35:11:7f:67:c4:
7f:65:d5:85:81:4f:b2:12:15:43:c5:96:7f:2c:c2:
bd:45:4a:88:91:4b:07:84:10:1d:b6:f8:18:b0:e1:
b5:af:b7:b9:f0:56:46:25:58:4a:ac:81:13:4b:4a:
69:ee:18:51:ed:ac:a5:43:b3:50:03:79:2c:1a:73:
ff:2a:32:1e:76:1a:73:1d:39:1d:1e:93:b6:4e:b7:
1b:15:1c:db:0c:46:a0:b2:4f:99:96:85:5b:81:e0:
f1:a9:87:df:2f:0c:0a:fa:4f:a9:b1:16:4b:1d:a3:
fd:3e:f8:81:83:ea:89:ef:df:5e:70:95:1a:02:5b:
ea:16:1a:e4:47:f8:a7:9c:ac:b8:6e:55:53:6b:02:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:EC:8F:8B:7B:54:9A:23:D6:F0:61:1E:81:A2:80:D3:5A:AF:D4
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c2:d7:e9:3b:50:93:3d:00:de:9c:7a:ae:ba:97:24:f9:4a:
b9:82:8b:e1:fd:19:a1:6b:60:5a:19:52:00:0f:0e:84:36:89:
cf:35:a7:18:42:07:3f:75:cb:12:f2:95:33:d1:69:01:44:68:
48:eb:80:a9:2c:52:df:b9:8a:3e:9b:fe:7d:c7:6e:85:d0:53:
44:ef:96:1d:3e:ef:45:31:21:7f:b1:bb:39:02:94:bf:1e:57:
28:e2:79:8a:aa:11:93:0c:d5:e8:34:0a:e2:1f:9b:3d:9f:44:
15:0a:35:01:7c:d9:6d:7b:05:d5:4c:3b:78:67:cc:57:a7:18:
9d:6f:79:e3:26:8a:f2:11:fb:91:eb:79:db:2c:51:3f:63:d1:
3e:da:34:ef:69:c7:29:53:b9:fd:b0:ad:e1:38:f1:09:c0:eb:
6c:de:6d:93:08:2e:b2:98:ee:15:a9:c1:51:46:3e:59:7a:c8:
00:87:0b:9e:3b:b2:4a:8c:f3:53:9d:fe:70:64:2c:dd:13:e0:
d4:5a:5e:b9:79:e1:a9:9c:f5:14:d9:45:b5:9f:0c:43:24:2f:
0e:14:bc:c4:98:e6:a1:48:c7:e3:9b:cf:dc:e3:d2:be:0e:41:
b3:5e:21:0d:de:23:3d:20:4a:6b:2e:af:5e:ff:12:1d:3f:f6:
24:3e:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:52 2026 by rpki-client