Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: /bfN07SPcPxP5+K7bSrTgxZRAugoTE093qK8BVNx8oM=
Subject key identifier: 22:DA:17:B7:B6:3D:7F:7D:F4:47:56:99:6A:E1:6D:4D:B7:57:3A:09
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 019DCF757F2C0E0A8420FCF9DAAE198103B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 1353
Signing time: Mon 27 Apr 2026 15:01:16 +0000
Manifest this update: Mon 27 Apr 2026 15:01:16 +0000
Manifest next update: Tue 28 Apr 2026 15:01:16 +0000
Files and hashes: 1: KaG_9OhAuCqS6mVHabC7lxG9AHI.roa (hash: xWY0bvnvxQN2TpeVYq9xqInKcrALeii0RU0rJgA/S3U=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: CIRMt/Ib5dG0T35xsCO4Fz00BdC/XtmiHoZK3rJOujs=)
3: rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa (hash: XsViLJQyG2NreXyqGpIHBcrhArHit5h+1P1uRFDEaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:7f:2c:0e:0a:84:20:fc:f9:da:ae:19:81:03:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Apr 27 15:01:16 2026 GMT
Not After : Apr 28 15:01:16 2026 GMT
Subject: CN=22da17b7b63d7f7df44756996ae16d4db7573a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:da:7c:6d:d6:4b:56:4e:fc:51:54:88:3e:
7f:d4:f8:19:6e:7b:a8:78:54:ff:c3:36:8e:56:9a:
5f:16:01:ce:56:ad:ee:3e:41:2a:cc:9a:a7:54:ad:
44:83:4f:5f:1a:0f:18:62:da:70:39:be:62:9a:11:
c3:97:51:c6:ec:bd:07:1c:82:49:0a:4f:8b:6a:cc:
f2:25:70:fc:ac:f1:08:21:0d:bc:e8:26:06:6e:85:
f0:99:3f:0b:c2:2b:78:53:a0:c5:cb:82:c4:21:03:
9e:1c:6f:25:15:22:6d:2b:46:62:dd:fd:5f:9e:d5:
82:aa:a4:6e:d8:ff:ae:18:aa:0e:40:e6:21:4a:b0:
19:54:5c:50:5b:03:5f:1e:85:0d:43:90:d7:7d:e8:
20:0a:5e:d5:d3:32:94:20:21:e8:48:48:c9:49:0c:
b9:a1:29:9c:5f:6b:7b:4a:78:4b:3e:ec:9f:09:66:
e8:eb:63:3d:2b:28:3f:de:f2:53:02:48:57:eb:a4:
d7:4a:ff:b3:eb:51:3e:cc:21:9a:f5:da:5e:67:5d:
8d:e1:ff:7c:db:fe:40:88:1a:87:92:4b:85:d7:48:
0c:0e:c3:dc:26:ea:2a:ed:48:46:83:33:cf:49:96:
42:bc:a4:5c:3d:a2:23:8c:9a:f6:6b:3c:2d:79:cc:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:17:B7:B6:3D:7F:7D:F4:47:56:99:6A:E1:6D:4D:B7:57:3A:09
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:83:5d:29:5e:be:db:43:9b:4a:6d:17:e6:7b:9e:b7:a4:c7:
92:f8:07:bd:54:29:7c:ff:9d:a7:b8:85:33:f0:11:cb:bf:cb:
60:5a:c2:e7:c3:25:20:37:53:db:09:11:27:48:85:92:ed:e4:
3d:48:d4:1a:2a:f2:e3:e5:75:b4:38:61:69:ce:62:10:4a:bd:
92:bf:06:91:2c:56:3e:81:c9:e7:1a:5b:c2:d2:d2:4f:8f:21:
f6:98:6b:89:d4:9d:92:c7:f9:ca:4e:34:47:41:31:5e:1b:c4:
7d:6e:56:d5:d8:4f:fe:2a:86:b8:2b:4f:9f:e1:2d:09:63:53:
1f:28:bc:8a:ab:7d:10:41:1e:bf:dc:a6:f0:dd:d7:02:8d:75:
6d:b1:cf:9f:70:c6:ed:e2:65:6a:8e:d9:f2:40:ad:c5:9b:42:
51:78:a6:c6:49:3a:6a:93:cf:3d:ce:e9:ce:0d:f5:59:fe:07:
86:72:d5:80:ca:42:7b:0c:86:d3:78:32:e1:e7:60:4a:be:c9:
70:de:2a:11:c7:0a:52:17:3d:49:3d:a6:74:8d:58:d1:d0:dc:
18:94:23:af:fb:09:f4:6b:9b:f8:3a:b6:e4:3f:b9:f9:f7:40:
f8:fe:58:86:1a:05:38:dc:4e:2b:1c:24:f2:78:2e:b4:d7:11:
86:64:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:37 2026 by rpki-client