Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier: CMH8yb7/A8s83Zt+OL6zqHZXRkJZ8Jl82DHrsfypaJo=
Subject key identifier: 2C:71:C5:7B:27:52:E4:BD:DD:AB:E9:B4:11:AD:A7:72:44:4B:AA:A0
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial: 01A118622D85917CCFF2C27CDBFBE0993F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number: 031A
Signing time: Wed 07 Oct 2026 22:00:49 +0000
Manifest this update: Wed 07 Oct 2026 22:00:49 +0000
Manifest next update: Thu 08 Oct 2026 22:00:49 +0000
Files and hashes: 1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: 3uQuTvWTk6eerhEtbnyJVqD+my0pR0N7FElGfFRKE7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:62:2d:85:91:7c:cf:f2:c2:7c:db:fb:e0:99:3f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Validity
Not Before: Oct 7 22:00:49 2026 GMT
Not After : Oct 8 22:00:49 2026 GMT
Subject: CN=2c71c57b2752e4bdddabe9b411ada772444baaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:e8:fe:a4:1e:54:2a:0c:e3:d1:75:e4:1d:
c8:36:c2:a1:f4:6f:a2:f6:68:89:ab:06:10:82:d3:
02:f9:c3:fb:25:31:99:6f:17:22:ef:59:63:d7:ce:
76:3d:22:5b:3c:f0:7f:96:f4:7b:3b:5f:18:61:2d:
bd:70:57:0d:34:0b:ad:b6:1b:87:2d:cd:73:cd:be:
e1:6e:fb:4c:d2:f7:cf:ce:79:f1:46:28:f4:d6:7c:
a5:75:20:ea:a0:b9:d1:21:96:87:39:e8:d5:32:2c:
89:22:4c:ee:27:f6:81:1e:d0:8f:3c:3b:9d:e9:5d:
54:08:e2:f9:cb:90:df:11:6c:7c:c9:90:50:de:d1:
24:b8:f4:f2:6e:30:3a:02:1b:f7:f3:48:ef:d3:55:
f4:94:2a:3e:14:78:91:60:2e:eb:2f:6f:f1:8a:f7:
08:88:33:c0:ff:a2:99:19:35:29:cf:be:e8:bc:df:
71:94:14:35:0f:34:4f:ab:82:bf:44:89:e2:70:83:
a3:5e:02:71:12:20:b6:7f:1b:47:13:e1:68:86:5e:
3c:3c:17:a6:fd:74:47:3a:4e:1d:96:74:59:c7:91:
0f:40:55:16:88:91:b3:50:6d:5a:9e:72:2c:ba:53:
74:45:b2:2e:ee:c6:b1:e6:97:1f:68:b0:db:db:ca:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:C5:7B:27:52:E4:BD:DD:AB:E9:B4:11:AD:A7:72:44:4B:AA:A0
X509v3 Authority Key Identifier:
keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:24:7e:77:e4:e9:01:b8:31:c7:12:e9:77:b4:92:eb:85:11:
34:a4:9c:cf:9e:0b:f3:60:cb:9d:2d:17:1f:15:1c:18:da:6a:
73:e0:32:e2:65:2a:9e:ac:1d:68:64:67:8f:79:8f:39:29:52:
79:4b:67:eb:a4:31:29:c9:f1:c8:7d:af:11:1f:04:23:06:24:
33:01:90:0b:dd:d8:70:56:51:ae:dc:d7:2c:c3:fc:50:11:a7:
da:f7:f0:33:72:d8:4c:d5:41:ca:41:ec:74:9d:e5:20:44:dc:
2a:8a:f1:7f:8b:3a:68:61:0d:fb:59:39:72:41:76:e6:c3:86:
ab:55:8f:40:6c:28:45:c3:f5:55:8c:99:54:d5:6c:a0:69:dd:
28:e2:77:95:cc:e2:be:a2:5e:f2:fa:4b:cf:de:ef:65:c0:f9:
f8:da:23:21:68:e8:07:35:e3:93:c1:c3:e2:95:dd:9f:a8:14:
f9:70:e7:d5:fe:20:2e:27:1c:7e:01:52:97:58:5d:83:b3:62:
77:ed:f6:d0:00:d4:1a:d3:16:4b:cc:19:3c:4b:8d:a7:1d:2a:
2a:0b:c3:e8:58:34:e7:2e:f9:d9:ec:9f:2f:5f:d4:5e:28:26:
28:9a:a9:45:ed:52:bb:0d:16:9a:15:9a:f5:ca:10:7a:ca:2c:
ab:bf:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:06 2026 by rpki-client