Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: I4TmxE8krmaDlA0RWEJjdRbyJwhbw4wzEP0zzK+SaUA=
Subject key identifier: 12:F2:3D:DD:39:C1:41:02:13:6C:E1:AC:47:77:F0:B8:92:B9:2F:92
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 01A181870BC477D285D731B4C968E71FB3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 08:01:13 +0000
Manifest this update: Wed 28 Oct 2026 08:01:13 +0000
Manifest next update: Thu 29 Oct 2026 08:01:13 +0000
Files and hashes: 1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: t1YSO54S2O3F5iuO+H9MYcN2YR4zzryjdmsSl8WYSdk=)
2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:0b:c4:77:d2:85:d7:31:b4:c9:68:e7:1f:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Oct 28 08:01:13 2026 GMT
Not After : Oct 29 08:01:13 2026 GMT
Subject: CN=12f23ddd39c14102136ce1ac4777f0b892b92f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:42:c9:5c:61:9f:39:6c:e7:5e:75:bb:5d:
31:8f:65:29:77:13:21:88:18:a0:05:bd:66:40:b5:
ac:a3:5e:12:e5:e1:43:3f:7c:3f:ef:10:23:76:6d:
a8:4f:9d:3e:ca:9f:26:58:05:13:9e:30:4b:73:62:
67:05:a9:ff:e1:61:ef:61:68:28:a8:94:dd:05:50:
f4:fc:92:ff:69:6f:55:4f:ad:4f:e8:00:89:30:b5:
e8:4e:e4:b7:12:01:cf:11:40:c5:3a:75:47:2b:f4:
1d:fb:db:87:b6:09:ec:d6:6b:09:60:7e:0d:e0:8b:
d5:21:cf:7e:6b:1a:c7:e1:38:6c:4d:0c:cd:10:9d:
cc:14:21:60:10:1f:e0:63:56:fe:76:21:96:16:1d:
05:8b:76:39:b0:31:d2:7a:77:8b:5e:30:33:53:9b:
46:84:99:69:de:6d:64:2f:8f:dd:5f:af:d4:e2:75:
67:47:41:6e:a4:5a:ca:c6:98:15:04:da:84:51:9a:
69:a7:de:62:b2:57:84:b9:ef:e0:fb:1c:a6:cc:6c:
ba:13:a1:82:de:4f:50:db:0a:0a:4f:f6:65:47:27:
c6:d8:7d:86:90:f9:69:e9:5b:9a:1c:83:2f:da:10:
94:12:0a:71:2f:ed:4a:5a:0a:50:52:d2:90:24:23:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:3D:DD:39:C1:41:02:13:6C:E1:AC:47:77:F0:B8:92:B9:2F:92
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:59:b2:7c:ea:b1:f6:56:e7:93:3e:a6:c4:c1:c6:01:54:
97:ab:20:1b:c2:6d:57:96:05:4e:93:cc:b4:2d:d2:8c:a1:a2:
3e:d4:e4:c8:20:f4:37:81:9b:37:f4:ca:26:57:ed:f9:a2:ef:
5f:55:dd:e5:46:76:8c:b8:47:2b:d4:4e:98:f4:7f:50:d4:31:
62:cc:90:fd:ef:64:25:3f:a1:09:e0:c1:49:f6:04:dc:60:f0:
47:8d:2f:bc:94:65:20:1b:66:74:31:81:75:fc:a8:26:aa:c3:
82:39:52:82:40:ef:a3:e4:8c:1a:94:b1:75:50:10:d6:d4:0c:
8e:2a:56:28:90:2b:d0:34:20:f7:07:45:4c:22:5f:d4:c4:6a:
7e:1b:89:c0:18:32:b0:bc:44:da:dd:e7:3d:6a:2f:ca:59:0c:
32:67:dc:20:1f:69:d4:57:11:2b:c2:9f:12:ca:9b:e9:da:ef:
e9:3c:00:0d:93:3e:89:85:54:7c:04:8c:56:f3:a9:74:a7:23:
50:95:13:e7:0c:3c:a2:1b:8f:34:35:51:ef:c6:4e:1c:e7:e5:
1a:42:a5:ba:7f:ab:e2:a8:d9:97:86:22:da:e8:84:4c:69:2e:
e9:f9:ac:9e:32:30:7e:7a:a4:c7:d1:ee:05:04:54:1e:5f:47:
02:87:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:21:59 2026 by rpki-client