Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: 6u300YmOV4MRRqizsJ+XJp7Mek//Fon6SZJL1nzcjn0=
Subject key identifier: 9C:56:AB:1C:06:E0:68:A0:B6:10:6C:68:24:88:41:7F:10:1C:27:CB
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 01A04C88DCFE3B7E13C16A6AE1037A6D0895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 1A27
Signing time: Sat 29 Aug 2026 08:00:32 +0000
Manifest this update: Sat 29 Aug 2026 08:00:32 +0000
Manifest next update: Sun 30 Aug 2026 08:00:32 +0000
Files and hashes: 1: BTr2Bc99DKi4PYk5BqGlyVPBOtg.roa (hash: maZYRfEl0/BLOYS89UUlLOXtRggKxupS0Wn4TM8HfvQ=)
2: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: 80kXqGkv2DMkpyhUcNW28VBGByCy7VXY0WAIAYE3ixA=)
3: mwdbhh4MkK3UW3MoUj-OSpitJtg.roa (hash: 73ZzUx+ayS9nz0SZi6BSEwxRgJ3onIVJGwZYT4nKqtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:88:dc:fe:3b:7e:13:c1:6a:6a:e1:03:7a:6d:08:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Aug 29 08:00:32 2026 GMT
Not After : Aug 30 08:00:32 2026 GMT
Subject: CN=9c56ab1c06e068a0b6106c682488417f101c27cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:95:5a:54:8b:a5:7e:84:8b:94:dc:18:3f:
59:9f:7e:7c:00:cf:64:fc:7a:cc:39:38:07:51:68:
6d:6c:7f:9d:7b:fa:a1:18:39:46:28:ea:03:54:ea:
4d:ba:f6:a2:a7:ea:5f:f4:d3:f1:71:f9:00:94:86:
af:d1:07:5a:94:a2:6d:0c:f9:8f:a9:c3:df:ba:1d:
92:4b:be:78:d7:65:1d:f5:d9:28:6d:4b:2c:cf:26:
fa:51:3e:3c:19:be:95:6c:d4:fd:6e:94:64:3c:98:
e8:83:08:98:69:00:23:33:c6:70:77:6d:73:4f:a8:
b7:7c:92:b7:55:e2:fb:32:36:1a:8d:8c:14:91:65:
6c:57:8e:ae:8d:45:30:0b:11:8b:cb:60:b3:88:af:
2b:87:55:db:56:fc:fe:98:36:b2:03:cd:22:b1:a3:
05:36:60:eb:ce:12:48:c8:99:b5:73:b9:65:19:67:
82:38:11:71:89:e5:32:ad:bf:40:a1:97:9a:b6:09:
0c:9d:98:e0:f6:22:aa:38:aa:78:8c:73:fc:a4:5a:
92:aa:a5:36:20:a5:da:26:e6:70:37:2c:0e:16:04:
9f:31:0c:b1:84:0c:88:68:b2:67:4d:77:ec:48:f7:
74:80:65:06:20:e6:11:bc:a2:3e:55:19:a6:7c:97:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:56:AB:1C:06:E0:68:A0:B6:10:6C:68:24:88:41:7F:10:1C:27:CB
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9e:b1:20:d3:7a:67:7d:ab:e7:fe:b6:35:d8:03:24:97:a7:
94:9e:75:b4:d2:49:32:78:e5:f9:88:3f:a8:30:f0:a1:2a:5a:
06:8c:86:d5:a3:10:55:10:13:c7:0a:fc:df:89:34:95:0a:bd:
4c:b3:6c:d6:b7:69:99:b0:b3:d6:a8:b3:e2:ec:1b:33:e6:04:
f4:1c:78:74:8c:f3:03:26:7c:e7:c9:56:0e:20:f9:b5:a2:54:
e5:ab:56:cd:84:47:e6:dd:3a:0c:0e:ce:e0:1d:b0:09:7f:40:
29:c8:dd:b8:90:93:5a:b0:ae:8d:41:ff:fb:0e:7a:16:34:e9:
45:01:be:37:be:23:05:64:70:31:12:a0:bc:07:eb:65:f4:f8:
81:5a:05:e4:b2:37:36:b7:ba:06:7d:2b:dd:63:11:a0:7a:a3:
ea:dd:6a:38:dd:4f:7f:4b:b5:6f:65:80:34:72:88:96:c4:bb:
75:4a:86:01:21:5c:f3:a2:07:ca:15:16:2d:cb:f1:a5:58:8d:
e6:33:a7:20:40:9f:42:65:55:d0:30:82:bb:49:9a:9c:98:15:
10:13:1e:15:9c:86:27:b4:18:88:66:d0:fc:9a:f9:8c:fb:20:
65:ef:89:32:ba:16:ac:f8:6f:70:15:89:00:d2:2c:4f:a3:88:
82:e7:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 12:47:36 2026 by rpki-client