
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: acSSrmKGf9NS21QXtXYiho2M6D6ff7uwlUnXZNfVG/k=
Subject key identifier: 08:08:BC:25:C5:5D:0A:CE:67:9F:69:AF:88:43:82:BD:06:A4:D8:5E
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 019CB926FF7FAEDE35FF669237707BE2F2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 184D
Signing time: Wed 04 Mar 2026 14:01:06 +0000
Manifest this update: Wed 04 Mar 2026 14:01:06 +0000
Manifest next update: Thu 05 Mar 2026 14:01:06 +0000
Files and hashes: 1: BTr2Bc99DKi4PYk5BqGlyVPBOtg.roa (hash: maZYRfEl0/BLOYS89UUlLOXtRggKxupS0Wn4TM8HfvQ=)
2: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: Ru47RMXMQQacFUGBKaDn471LEOly/G3felrWLvs79sY=)
3: mwdbhh4MkK3UW3MoUj-OSpitJtg.roa (hash: 73ZzUx+ayS9nz0SZi6BSEwxRgJ3onIVJGwZYT4nKqtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:26:ff:7f:ae:de:35:ff:66:92:37:70:7b:e2:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Mar 4 14:01:06 2026 GMT
Not After : Mar 5 14:01:06 2026 GMT
Subject: CN=0808bc25c55d0ace679f69af884382bd06a4d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:cc:30:f2:ab:28:b9:18:ad:1a:b3:c2:0f:
ed:05:01:b3:c7:19:71:41:30:8a:39:e9:83:a1:47:
b7:db:59:5e:20:e9:b0:d6:b0:f3:b0:d3:37:56:1d:
b2:d5:42:7b:32:25:a4:0f:cc:bf:29:0d:cd:6f:0f:
67:87:3f:f5:b5:47:a9:bf:30:35:bb:53:4c:d9:44:
e8:a2:01:bb:26:28:1c:c5:8c:78:dd:da:2e:14:d4:
2a:bb:f6:c1:db:e4:ec:32:c9:38:6b:00:38:63:88:
6d:63:76:b0:16:7d:4e:2b:de:5f:ae:66:29:79:69:
dd:be:f0:8a:30:e9:88:9a:b5:cf:a1:0e:c2:27:e5:
c1:85:01:81:95:38:11:70:3a:70:b0:3b:bf:db:96:
f2:f7:34:3a:67:a9:11:09:36:1a:f7:9b:57:51:86:
2e:83:bc:8d:7d:11:0a:8a:68:a9:74:90:67:6d:3b:
2d:d0:ac:2a:65:68:64:fc:8c:e8:92:87:5a:41:98:
04:7b:e2:a2:8c:3f:ce:4c:47:30:28:14:29:bf:db:
83:9a:c6:44:04:ca:b9:64:1e:e8:7e:09:3f:5c:ec:
e0:c0:84:7c:c5:43:99:45:37:3e:29:d9:2c:5d:53:
67:53:35:e9:08:e4:ea:71:ab:1f:5e:bb:9d:4f:95:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:BC:25:C5:5D:0A:CE:67:9F:69:AF:88:43:82:BD:06:A4:D8:5E
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:e3:ce:cc:01:bb:e3:84:e9:50:5c:02:94:19:01:df:52:
77:bc:eb:b3:33:56:a6:50:ba:39:3b:a8:56:00:b4:5a:f1:ee:
9b:b6:57:70:12:51:6a:1a:76:38:72:e4:ff:ae:37:9e:52:52:
a6:5a:9f:1e:ab:94:b5:fd:34:b3:e1:84:61:50:96:2b:96:99:
e0:81:e4:bb:5f:d3:2c:2b:de:f0:07:27:3c:22:67:2f:c4:cc:
71:90:84:09:93:af:cd:f7:27:0b:8f:2a:c8:4f:53:16:4a:93:
9f:bf:be:56:16:4e:46:ce:51:3d:0b:e7:47:e6:5a:59:72:16:
cb:48:30:25:4a:24:2a:93:71:f0:c7:77:5b:bb:58:60:b0:b5:
0c:73:21:ab:62:e1:23:2e:f2:ef:18:1d:c7:59:ec:d0:ab:a8:
96:f2:5e:f5:b2:e5:47:6f:62:97:50:e4:07:2f:3a:54:fb:d2:
00:a8:21:ad:5e:16:0a:a8:cb:0f:9e:02:8e:4c:7a:bd:6d:e3:
ce:04:52:75:0c:37:c8:c9:bf:26:ac:d2:a9:98:32:4c:5c:95:
42:90:ec:85:8f:df:0b:e1:12:fb:59:e4:9f:e0:c3:bb:62:ee:
6b:45:0f:d4:f7:72:65:e7:1c:f4:e9:74:92:64:67:72:41:19:
9d:bf:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 23:37:19 2026 by rpki-client