Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: 3O5rnoVzoqmI2zWZw8qeiB0TazBc/0Z+oSiFirtLteY=
Subject key identifier: 07:9F:20:6C:60:B2:06:EF:99:95:8C:37:11:23:A0:B1:47:4B:CF:3F
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 01A17815A4F7D2609840ACC0D8564A9739D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 1538
Signing time: Mon 26 Oct 2026 12:00:46 +0000
Manifest this update: Mon 26 Oct 2026 12:00:46 +0000
Manifest next update: Tue 27 Oct 2026 12:00:46 +0000
Files and hashes: 1: KaG_9OhAuCqS6mVHabC7lxG9AHI.roa (hash: xWY0bvnvxQN2TpeVYq9xqInKcrALeii0RU0rJgA/S3U=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: whbI36uoLFRsfYQDjliQQoDXqRzlMxQUpvpzRM98rqA=)
3: rYZwUkzyP8IkW0bsFAPXOVOt9lI.roa (hash: XsViLJQyG2NreXyqGpIHBcrhArHit5h+1P1uRFDEaRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:a4:f7:d2:60:98:40:ac:c0:d8:56:4a:97:39:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Oct 26 12:00:46 2026 GMT
Not After : Oct 27 12:00:46 2026 GMT
Subject: CN=079f206c60b206ef99958c371123a0b1474bcf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:c0:5b:13:bb:da:8d:1a:c8:fa:2d:62:fb:
8b:29:8c:ce:ea:3e:59:e1:9d:44:00:c3:9a:f2:4a:
c8:87:f6:ec:73:2e:c4:bf:5d:9d:a6:94:34:04:33:
3b:10:e4:40:2a:9b:e0:e3:af:6c:da:d9:78:d7:7c:
44:51:12:4b:6e:df:93:0e:85:99:5d:41:41:9a:b3:
1b:c5:25:99:41:fd:34:10:2c:d0:06:4a:62:61:ef:
2d:7c:e0:a6:f5:5e:67:b0:ed:84:4a:e4:38:dc:a1:
99:ba:15:aa:f0:bf:36:33:25:71:4a:2a:eb:9e:c8:
a3:5d:0b:75:ca:0d:10:9e:79:1a:f5:10:e3:98:48:
37:e3:ac:4c:57:2f:71:6b:25:02:d5:d0:74:ba:95:
32:a3:7c:48:33:42:6c:09:b0:55:f8:9a:37:7c:8d:
6a:e0:2b:3a:9d:14:24:72:9b:9a:8f:c2:64:39:97:
91:d8:3b:94:2f:3b:52:36:00:af:7a:61:90:57:f0:
8a:9b:8e:bf:76:96:aa:4d:67:9b:b0:dc:0f:c7:d2:
72:8a:7a:39:6d:b0:5f:46:25:bb:97:2a:d2:46:6a:
2a:3a:0e:42:13:82:1d:77:7b:b1:f7:fc:b6:a6:ac:
54:5c:f9:6e:9c:27:12:d9:77:57:a3:a0:6b:36:57:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9F:20:6C:60:B2:06:EF:99:95:8C:37:11:23:A0:B1:47:4B:CF:3F
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e8:95:c9:c0:a9:77:a9:f8:5d:19:5b:06:dc:7a:94:1c:60:
b3:b2:ad:98:ad:ed:f4:49:cb:19:e7:2f:58:cc:90:2f:08:aa:
f0:dc:52:29:78:40:33:a2:d4:99:53:b9:66:0d:d3:2d:3a:2d:
30:2d:8f:b0:f1:3e:ec:cb:7f:6a:58:5b:6b:9e:2b:30:d9:79:
4f:20:7a:aa:0b:a6:17:4e:11:64:5c:54:b1:a7:a3:3a:ea:19:
c4:e2:96:74:4b:fc:e4:2f:ec:dc:df:a8:37:12:35:47:aa:06:
4f:96:96:8a:81:85:49:29:25:96:1c:55:37:f1:71:d5:89:80:
f9:9e:36:88:11:f5:e9:05:36:10:e2:52:da:50:6d:3f:b4:32:
3b:e0:16:34:7a:c4:ec:38:87:89:e4:bb:08:03:a4:b8:a7:8b:
30:f6:07:a5:f2:d8:e5:73:82:92:68:d9:f8:00:7c:89:81:14:
01:4c:f0:bf:2a:46:43:94:c2:7d:0f:07:6d:33:52:4f:dc:c6:
72:56:57:be:43:9b:35:bc:b6:b0:ca:5e:c2:6d:91:9b:10:92:
e0:24:1e:f2:b5:c1:ef:d4:11:3d:5b:0f:c8:29:0e:92:12:3c:
3c:f5:a5:82:0e:dd:0d:2b:97:85:b0:c6:32:99:6c:a4:d7:9f:
e8:eb:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:19 2026 by rpki-client