Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File: UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier: j0fsiAEW2IbfqkOLUEkWUtPK1oZAsHiy6H2SwwScAXY=
Subject key identifier: 37:62:7C:BA:F2:28:8C:BD:D8:C3:31:9C:A3:92:B6:50:13:20:83:C1
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 019D39411FAB54E98EEF36713853081C1227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number: 1165
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: EAOFgsswvgwRlPj7OWHb1R8rNOk.roa (hash: FC+ZRJyJB9rppEAqwCLWFUsYKboUDNq0Ke4iyrNeyNU=)
2: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: 9FFtklYRMw52EEjasXjXIa0MXA6/FRYu3AVDAbpP0Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1f:ab:54:e9:8e:ef:36:71:38:53:08:1c:12:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=37627cbaf2288cbdd8c3319ca392b650132083c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:a9:a8:43:49:43:be:a0:af:1b:59:04:8f:
65:0a:bd:73:15:da:f7:bd:7f:1c:35:49:e8:88:4f:
a8:75:5d:34:84:88:cc:a7:28:ce:e3:40:88:39:f5:
9f:b9:54:d9:3d:32:f6:9f:ad:54:3c:6f:eb:17:4f:
dc:aa:b3:0e:3b:12:54:fa:b9:95:2b:a3:af:65:80:
45:41:b4:ac:ae:73:84:7b:42:f0:c4:da:e7:09:6d:
e5:92:ee:1a:8e:fd:29:89:83:b1:f2:d6:26:4b:39:
22:d1:d8:de:9f:d2:92:76:6f:c8:e5:ec:29:67:39:
f1:4d:b3:cb:d6:0c:f5:cf:41:71:46:ed:90:3e:76:
1b:71:2f:49:34:05:37:3c:a1:75:c4:a5:ca:f8:6c:
55:f5:75:64:8e:50:30:05:06:bc:90:dd:4e:83:88:
31:7f:53:db:9b:3e:ef:e6:58:5f:10:ab:56:4c:67:
7d:28:32:17:80:a0:94:90:cf:80:b1:9a:61:ff:ac:
56:ff:59:71:12:e9:3c:b0:a4:a7:23:11:b0:8c:f2:
1d:6e:ad:56:e8:c7:fe:ee:73:58:22:10:1f:dd:6c:
4d:40:5f:8d:5c:6d:8a:82:4f:6b:26:24:a9:8f:4a:
62:66:8a:f8:8f:a8:ae:59:7a:4f:f0:95:e4:3d:9e:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:7C:BA:F2:28:8C:BD:D8:C3:31:9C:A3:92:B6:50:13:20:83:C1
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ee:a7:a6:36:53:d4:9b:55:74:90:d1:de:f2:dc:90:a2:85:
a9:5c:b3:7b:a8:74:81:ff:46:6c:c9:0b:d9:d5:9b:95:30:77:
f7:80:16:fb:34:ad:d0:d2:b3:08:41:d7:7b:78:7a:d6:ef:54:
fd:f5:15:c8:97:bb:d1:05:f3:9b:20:3d:5b:86:1a:85:fc:44:
08:6b:ef:31:3e:7c:11:53:ac:c5:16:0d:a2:1c:50:f1:e4:2a:
a2:89:ca:fd:4e:5b:f1:37:a3:8a:d0:ec:5a:33:fa:ee:43:0f:
17:eb:11:55:f0:ba:fd:10:8e:b3:d9:4f:f7:0f:1c:29:3b:f2:
40:9d:ee:53:56:3f:d5:b8:1a:8c:72:60:77:6a:1a:b0:78:14:
8e:c4:a8:44:14:ba:2d:b6:ed:2c:87:f7:6d:21:ca:d9:ee:14:
82:17:98:f0:c0:ed:c3:ab:b9:89:78:7e:56:07:cd:07:6a:c6:
d9:72:e9:fe:9e:7f:5a:b8:6e:8a:e0:8c:87:a3:ed:5b:62:68:
b8:48:c2:1b:ed:cb:2e:fb:32:85:46:e6:d2:35:f9:29:70:d2:
57:05:9b:de:7f:0a:53:18:e7:b6:a5:54:32:ba:49:dd:c7:a9:
48:b4:46:19:83:71:db:69:6b:7b:af:8a:4b:a9:09:4c:c4:6f:
7e:d5:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:42 2026 by rpki-client