
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: A6qwRhTRbb8xPoijWdnVGGr6nyE/jyNmofnA9BofGS0=
Subject key identifier: C1:F0:17:61:94:AF:7B:2A:62:AA:23:D8:3D:5B:D0:7E:C0:01:E0:24
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 019FA0A8F2013719CFBB29E9A95262CDA8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 23:00:54 +0000
Manifest this update: Sun 26 Jul 2026 23:00:54 +0000
Manifest next update: Mon 27 Jul 2026 23:00:54 +0000
Files and hashes: 1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: 282Uf4I6NU1/G1GnMIavssJ6/nxHsxfHsZ2mldlI+aU=)
2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:f2:01:37:19:cf:bb:29:e9:a9:52:62:cd:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Jul 26 23:00:54 2026 GMT
Not After : Jul 27 23:00:54 2026 GMT
Subject: CN=c1f0176194af7b2a62aa23d83d5bd07ec001e024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:01:6b:e7:67:91:74:84:28:09:da:a1:2b:
31:61:fa:fc:54:27:cc:f3:f5:ad:45:02:7b:b0:fd:
9c:3f:8a:04:ad:f5:a9:af:22:19:c9:d2:9f:da:e6:
1f:18:b3:16:5a:bf:23:4c:9e:1f:af:36:85:92:25:
1b:df:21:77:bd:a1:13:75:3c:d1:75:e8:60:d1:dd:
e6:ce:91:a8:d3:ce:57:2c:e5:98:69:40:f8:fc:a1:
32:32:c6:37:92:d0:df:e4:b4:66:f8:e7:41:ba:ac:
2f:16:05:67:df:b0:c0:2d:52:68:94:a1:c7:03:41:
72:c3:d4:92:78:44:9e:05:52:d0:65:f6:be:ee:b6:
18:55:51:23:5b:bc:a1:9c:a7:46:59:43:d4:c0:41:
9b:85:d0:54:58:82:1b:b8:b0:5e:a5:83:31:c4:c0:
bc:98:bf:ac:63:8d:9c:34:72:5c:b3:98:74:a5:03:
c4:b5:98:6f:e1:6a:ef:bf:53:3e:84:a4:a0:b3:15:
bf:9d:53:6f:94:f4:43:f5:3e:0b:55:73:3d:fb:c7:
f2:24:c5:89:05:e4:fe:70:14:90:20:f7:08:f5:23:
63:ff:03:7e:0a:60:85:d6:41:f4:1a:f8:ca:2e:0e:
55:62:32:18:95:c6:d6:da:67:87:ee:74:99:02:74:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:17:61:94:AF:7B:2A:62:AA:23:D8:3D:5B:D0:7E:C0:01:E0:24
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:ab:1a:a1:f4:4c:61:b4:75:40:a9:de:3a:88:cb:d4:b8:
bb:a6:56:78:51:99:c9:98:65:cb:04:f3:c8:c2:66:11:b4:82:
c7:95:83:86:de:d1:7c:e1:85:39:88:7d:65:c8:6b:27:ff:d9:
17:88:8e:ac:49:a6:0f:ac:57:40:3a:5f:77:72:e1:b4:12:d4:
26:9e:db:bc:eb:5e:e6:ee:42:c1:f3:b2:82:1a:a4:34:e0:69:
7d:9c:1a:9e:7c:dc:f0:c0:31:9f:0d:a7:1d:a0:b0:69:ab:76:
32:76:d5:87:04:84:a3:3a:06:4e:d0:b3:2f:05:1a:e0:be:64:
26:ce:8c:9c:32:6b:b7:ed:d5:c6:40:7d:cc:65:f6:40:79:14:
6c:0e:3e:9c:76:5e:3c:ae:f8:66:ab:38:e4:81:31:ac:b9:07:
d4:6a:a9:44:57:5f:74:26:5e:1b:73:e0:ca:7d:17:87:de:1a:
51:f4:5e:86:49:1b:f4:cb:0d:3a:ff:47:fc:6e:1a:1a:84:97:
3e:9e:c5:ca:a8:ab:72:a1:6e:7b:14:26:36:34:dc:06:49:f4:
a6:a6:0b:fb:cb:7a:13:70:72:23:aa:bc:f8:3a:0a:50:94:33:
39:d9:dc:69:97:1c:c2:15:95:a3:7d:80:79:b5:70:c8:92:bc:
18:42:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:08 2026 by rpki-client