Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: K1k67HUI1ENRjRS3sPcjbUvqHZxZz1CnrXV/Xrf5nag=
Subject key identifier: 94:02:5B:DD:17:4E:39:3B:08:AE:97:94:DB:D3:C4:5B:58:C9:F1:44
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 019CE3D9AE3969A87238468693B033DCB5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 12D9
Signing time: Thu 12 Mar 2026 21:00:19 +0000
Manifest this update: Thu 12 Mar 2026 21:00:19 +0000
Manifest next update: Fri 13 Mar 2026 21:00:19 +0000
Files and hashes: 1: KaG_9OhAuCqS6mVHabC7lxG9AHI.roa (hash: xWY0bvnvxQN2TpeVYq9xqInKcrALeii0RU0rJgA/S3U=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: HmsEPTF/vQ7ved2FdX8MxiFsPvE/RoEdsTKpvRPkAsY=)
3: rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa (hash: XsViLJQyG2NreXyqGpIHBcrhArHit5h+1P1uRFDEaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:ae:39:69:a8:72:38:46:86:93:b0:33:dc:b5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Mar 12 21:00:19 2026 GMT
Not After : Mar 13 21:00:19 2026 GMT
Subject: CN=94025bdd174e393b08ae9794dbd3c45b58c9f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:77:d8:99:84:eb:e5:2a:eb:6f:c0:5e:54:
8c:1c:0c:84:83:c4:5b:1c:6a:0a:3a:57:ef:a0:12:
32:59:58:ac:59:b2:ae:83:35:2e:0f:2a:84:7d:18:
74:a7:f6:4e:bc:df:65:27:c1:bf:5b:a7:a5:c0:a6:
59:92:ba:69:20:fc:57:ad:f1:08:53:c5:07:47:a1:
90:75:ac:08:ea:cb:b1:fa:d0:31:ea:ec:55:3d:8d:
90:95:30:21:71:f2:29:ef:b4:33:6c:c1:5b:a6:99:
9a:fe:38:f7:50:b1:75:f0:67:7d:76:81:f7:d4:da:
b2:86:f6:fc:28:8d:09:f9:e1:73:e2:7c:ba:61:cc:
73:80:c7:7a:cc:2f:5a:da:39:86:da:3d:ac:4a:3a:
9c:18:24:c1:07:3f:2a:5e:0a:de:78:81:14:0e:dd:
41:70:1a:c3:e7:bc:d6:f5:a3:ae:5e:7c:f8:3e:8c:
ba:7b:ee:7b:5e:b2:f2:22:eb:92:77:56:da:bb:67:
95:26:85:a1:f9:39:ba:6d:8f:f5:d4:57:4a:44:10:
e2:02:c3:4f:6d:09:6d:cb:49:ea:a7:3a:90:c6:0a:
83:f0:37:63:d7:4d:f1:62:b0:91:79:cb:37:a2:cc:
66:14:18:2c:60:bb:9d:6b:ec:43:c3:d7:81:f7:2a:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:5B:DD:17:4E:39:3B:08:AE:97:94:DB:D3:C4:5B:58:C9:F1:44
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:a5:1a:ec:cf:68:9b:a9:52:9f:e7:0c:83:60:98:b1:e3:
4d:c0:c6:40:4f:84:ae:02:5f:8b:e8:28:1b:cf:c9:28:c6:91:
30:68:fc:33:56:e2:f3:52:a3:64:25:18:a4:67:e2:7a:18:e1:
76:7b:c6:f0:08:cb:f3:60:a8:87:d4:cd:ef:39:13:de:d9:fa:
29:26:fe:58:14:ed:a7:84:91:ba:87:79:1c:5a:f8:d9:a1:de:
f2:f2:b6:a7:f3:ec:af:b2:05:71:d3:7c:5d:e6:e4:9e:e2:f9:
58:23:c2:39:7c:50:b1:d0:b8:58:28:f7:8c:35:a8:a5:b5:64:
4b:e9:1c:8c:9e:65:fa:9c:15:6e:25:f0:56:fa:a2:b9:14:56:
a9:33:d2:45:f9:10:4e:14:27:e4:f1:80:3f:35:fd:84:1e:12:
e6:a7:41:65:fe:7d:4f:c6:b4:dd:8d:9f:87:24:3a:11:42:d3:
2c:2f:83:f8:52:a6:ce:f1:78:ad:c1:20:78:e8:81:f6:f3:d5:
84:ab:b7:52:83:c3:55:27:42:6e:aa:3a:28:75:5a:5f:75:6a:
ef:78:d8:ef:0e:e1:cc:e1:8b:3d:3c:1c:51:36:cc:68:45:56:
de:5a:1b:f9:83:d1:bd:7f:f2:56:95:98:a2:c3:cf:ba:7f:47:
e2:41:21:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2a45aahyOEaGk7Az3LWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOWZiYWI1MTcxYTVjYjIyZjZjNTRmMTBiM2EyY2I2ZGI1
MTcyM2UwHhcNMjYwMzEyMjEwMDE5WhcNMjYwMzEzMjEwMDE5WjAzMTEwLwYDVQQD
Eyg5NDAyNWJkZDE3NGUzOTNiMDhhZTk3OTRkYmQzYzQ1YjU4YzlmMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnt32JmE6+Uq62/AXlSMHAyEg8Rb
HGoKOlfvoBIyWVisWbKugzUuDyqEfRh0p/ZOvN9lJ8G/W6elwKZZkrppIPxXrfEI
U8UHR6GQdawI6sux+tAx6uxVPY2QlTAhcfIp77QzbMFbppma/jj3ULF18Gd9doH3
1Nqyhvb8KI0J+eFz4ny6YcxzgMd6zC9a2jmG2j2sSjqcGCTBBz8qXgreeIEUDt1B
cBrD57zW9aOuXnz4Poy6e+57XrLyIuuSd1bau2eVJoWh+Tm6bY/11FdKRBDiAsNP
bQlty0nqpzqQxgqD8Ddj103xYrCRecs3osxmFBgsYLuda+xDw9eB9yoI+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQCW90XTjk7CK6XlNvTxFtYyfFEMB8GA1UdIwQY
MBaAFFKfurUXGlyyL2xU8Qs6LLbbUXI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQt
NzczNzMyNjUyZjRmLzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQtNzczNzMyNjUyZjRm
LzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHSlGuzP
aJupUp/nDINgmLHjTcDGQE+ErgJfi+goG8/JKMaRMGj8M1bi81KjZCUYpGfiehjh
dnvG8AjL82Coh9TN7zkT3tn6KSb+WBTtp4SRuod5HFr42aHe8vK2p/Psr7IFcdN8
XebknuL5WCPCOXxQsdC4WCj3jDWopbVkS+kcjJ5l+pwVbiXwVvqiuRRWqTPSRfkQ
ThQn5PGAPzX9hB4S5qdBZf59T8a03Y2fhyQ6EULTLC+D+FKmzvF4rcEgeOiB9vPV
hKu3UoPDVSdCbqo6KHVaX3Vq73jY7w7hzOGLPTwcUTbMaEVW3lob+YPRvX/yVpWY
osPPun9H4kEhrw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:42:27 2026 by rpki-client