Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier: 6bO18kkMRQd9BI/2bFdKRj8fCnrKOg2QlGAD7OM1aKg=
Subject key identifier: 00:09:1D:63:D3:11:0B:67:6A:CF:AF:F8:2A:58:F4:EC:4F:63:A4:25
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial: 019D37C058B4B8F43082F213339A0239A749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number: 0118
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: VlBCVIsDcySG16pXjvghoJdKU3dUpLSiW6oij+a2YmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:58:b4:b8:f4:30:82:f2:13:33:9a:02:39:a7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=00091d63d3110b676acfaff82a58f4ec4f63a425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:f3:38:63:00:ba:1e:c0:4e:47:27:31:68:
0c:9e:9a:cd:ed:c4:55:92:30:ca:79:71:70:9d:c0:
65:02:ba:63:eb:0d:bb:a6:4a:dc:37:bf:6a:e8:89:
e2:4f:08:31:90:a8:f7:02:34:39:dc:88:e3:31:f6:
b4:d7:7f:50:40:8c:a3:c3:ed:86:ea:37:c5:56:d0:
4c:53:1f:36:e9:ec:b6:66:0f:80:bb:ca:b6:09:6c:
3a:c1:ad:79:a6:da:25:92:51:3e:c4:c5:42:12:7d:
36:94:09:21:dd:c2:0e:83:86:a7:9e:7d:43:f8:98:
e3:3b:73:59:df:60:3e:a9:30:02:fa:e5:a0:78:c8:
1b:ea:ee:48:ff:52:e4:f7:3a:49:53:bc:db:e5:07:
6d:e8:ff:60:33:3e:ab:c3:f4:36:26:d7:3b:82:f3:
0e:e5:fd:9c:10:4c:7a:9a:0e:13:74:1a:ff:b3:29:
4e:a2:86:94:3f:45:d1:69:ba:42:d1:8f:f8:95:54:
75:d3:d5:ce:d2:0e:d2:ce:3f:1c:23:39:d8:d2:2f:
9c:e2:3d:ad:8c:71:2f:7f:8d:75:49:92:c4:c6:4f:
67:cb:b5:61:42:51:2a:b7:e5:94:e9:fc:6c:99:43:
e3:bb:ce:b7:55:f8:8d:13:17:da:31:22:b3:d3:eb:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:1D:63:D3:11:0B:67:6A:CF:AF:F8:2A:58:F4:EC:4F:63:A4:25
X509v3 Authority Key Identifier:
keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:67:eb:f2:7d:0e:2d:a1:51:cb:30:13:27:b8:c2:9d:55:
78:37:7c:1b:3c:2b:31:db:9c:de:30:6d:af:28:ca:16:51:da:
96:5d:1c:82:f3:6d:d9:a4:da:33:ba:08:0e:ca:1f:76:aa:c0:
db:5f:0b:a3:b4:cc:e9:3a:fa:08:54:a8:db:5d:d1:24:83:21:
94:38:7f:2f:01:63:0e:43:fa:6a:8b:7f:81:32:be:1e:98:44:
b5:9b:c1:12:28:d5:8b:e0:8c:36:a5:33:47:ef:7b:58:db:6c:
49:79:d5:d5:f6:32:67:f1:58:a9:be:2a:17:de:67:0c:d4:e7:
bc:57:f4:06:c6:2d:f4:25:68:1d:2d:36:f1:ad:66:0e:a2:8b:
c0:9a:c1:0d:1c:d7:38:b9:36:a8:87:e1:94:15:c5:ab:0c:09:
90:43:ff:6f:eb:82:68:b6:d5:dc:cd:cc:d1:29:f0:85:be:13:
01:54:c7:ac:86:5a:10:9a:cc:74:1f:7f:a1:65:37:b3:84:2d:
65:9a:13:b1:c3:a3:94:65:75:b6:e7:54:af:a8:25:31:55:63:
21:f8:0a:26:74:bc:84:b1:57:85:bc:1c:df:64:70:91:8c:88:
3c:b5:68:57:3a:6b:e9:01:fe:0f:e2:98:b4:8f:71:f3:2c:9f:
74:8a:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:37 2026 by rpki-client