Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: v/gZGm6CiJXjJ1mJUAgjPpSoYznG3kHEfBPV5GMACpY=
Subject key identifier: CA:87:BE:1D:CD:DD:57:FC:2E:A7:B3:91:7B:E7:D5:45:8B:54:CE:7A
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 01A08A1F40CD9F329C9B31327C0D9DAFB829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 0FB7
Signing time: Thu 10 Sep 2026 07:01:38 +0000
Manifest this update: Thu 10 Sep 2026 07:01:38 +0000
Manifest next update: Fri 11 Sep 2026 07:01:38 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: zkcO/WjIbss7S8jx1dlwFMGEr9X6vcukcOHGLBtaIog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:40:cd:9f:32:9c:9b:31:32:7c:0d:9d:af:b8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Sep 10 07:01:38 2026 GMT
Not After : Sep 11 07:01:38 2026 GMT
Subject: CN=ca87be1dcddd57fc2ea7b3917be7d5458b54ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:0c:f0:bd:71:be:66:9c:63:81:0d:b2:d1:
0e:e8:65:bd:22:3f:08:79:4f:de:fc:cf:1c:e9:d9:
86:7e:d5:2a:03:9f:65:dd:a9:fc:90:83:6f:74:77:
b5:70:10:84:40:7e:90:11:65:33:31:c5:f0:a8:19:
61:1b:b7:64:a1:64:2b:cf:54:3b:ef:bb:7c:d1:0c:
67:47:28:ce:4b:13:38:3c:e7:bf:fa:a9:b3:0f:a7:
07:79:9b:a3:13:22:dd:6f:bf:80:7c:39:5b:f5:53:
11:a0:8a:0a:9a:d4:89:44:e7:c0:28:92:7f:c6:7d:
be:a7:e5:33:5b:21:07:6e:39:ca:e9:c6:4f:93:7b:
39:4e:5e:06:46:e9:40:08:cb:6e:36:8e:b9:2b:7e:
1a:df:13:3a:70:51:12:83:49:76:df:f7:d1:5d:e2:
ad:77:f8:3d:e7:49:30:71:e4:7c:ff:8e:b5:db:16:
bd:e8:7f:e7:52:37:a3:7c:25:af:55:fc:04:cf:a0:
d5:8d:1c:0d:65:28:c3:6a:54:48:64:f3:4a:d3:7b:
11:b9:f7:0c:e6:10:fd:4d:ea:18:df:49:4b:70:48:
9d:51:b3:56:ab:d3:fb:7f:e1:33:4f:36:ca:1c:26:
0e:08:fb:4d:d5:fe:a3:e6:47:df:68:d2:96:e8:1c:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:87:BE:1D:CD:DD:57:FC:2E:A7:B3:91:7B:E7:D5:45:8B:54:CE:7A
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:db:e5:a2:a8:d0:b9:50:d5:eb:bf:78:d9:60:42:7d:b4:31:
4b:aa:e2:27:76:8d:4f:53:28:13:c4:9d:94:c6:22:7c:6f:1f:
88:ea:75:95:00:b1:1e:cb:34:55:f2:98:a1:ac:ea:a6:87:6a:
7e:1f:f7:b8:9e:e8:2c:b8:15:e9:1b:b8:e3:7e:00:b6:c1:a0:
aa:a9:d2:df:8d:b9:ee:95:27:0c:dd:73:37:17:e1:32:d9:23:
67:85:4a:88:e4:c2:5e:2e:9a:75:aa:c4:55:91:e7:25:59:b8:
f0:a1:a2:23:5a:3c:2a:9f:50:05:49:4b:c3:d3:88:bf:ee:e9:
71:3a:f0:bf:73:46:6c:4a:24:b9:8a:d4:11:1d:14:1b:cd:18:
34:fe:25:5b:63:dd:05:90:96:32:10:1f:c2:cb:c0:fa:c9:94:
d2:33:d9:30:a9:e8:2d:f0:12:72:f9:04:a0:80:9c:2a:9c:e7:
ec:dc:6e:54:e6:93:1b:bb:c3:e0:6d:08:1e:00:97:9c:15:73:
25:1b:a5:e4:3c:b7:8e:26:1a:36:db:b8:54:da:18:a4:67:f0:
fa:7b:9e:d0:0f:88:5b:f2:f3:63:3d:60:6a:d6:0b:02:d3:6c:
d5:97:61:e3:12:4a:fc:55:5e:aa:b6:17:e1:a0:a3:ba:d7:4f:
b7:c7:f9:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKH0DNnzKcmzEyfA2dr7gpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWM5MTAwYjMyZmNmNjJkNWRmZDgyMWNiZDA1NmFiNzNk
MmU0NTUwHhcNMjYwOTEwMDcwMTM4WhcNMjYwOTExMDcwMTM4WjAzMTEwLwYDVQQD
EyhjYTg3YmUxZGNkZGQ1N2ZjMmVhN2IzOTE3YmU3ZDU0NThiNTRjZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5kM8L1xvmacY4ENstEO6GW9Ij8I
eU/e/M8c6dmGftUqA59l3an8kINvdHe1cBCEQH6QEWUzMcXwqBlhG7dkoWQrz1Q7
77t80QxnRyjOSxM4POe/+qmzD6cHeZujEyLdb7+AfDlb9VMRoIoKmtSJROfAKJJ/
xn2+p+UzWyEHbjnK6cZPk3s5Tl4GRulACMtuNo65K34a3xM6cFESg0l23/fRXeKt
d/g950kwceR8/4612xa96H/nUjejfCWvVfwEz6DVjRwNZSjDalRIZPNK03sRufcM
5hD9TeoY30lLcEidUbNWq9P7f+EzTzbKHCYOCPtN1f6j5kffaNKW6Bx30QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqHvh3N3Vf8LqezkXvn1UWLVM56MB8GA1UdIwQY
MBaAFLqckQCzL89i1d/YIcvQVqtz0uRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQt
OTJkMGQwMTEzOWY5LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQtOTJkMGQwMTEzOWY5
LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNvloqjQ
uVDV67942WBCfbQxS6riJ3aNT1MoE8SdlMYifG8fiOp1lQCxHss0VfKYoazqpodq
fh/3uJ7oLLgV6Ru4434AtsGgqqnS34257pUnDN1zNxfhMtkjZ4VKiOTCXi6adarE
VZHnJVm48KGiI1o8Kp9QBUlLw9OIv+7pcTrwv3NGbEokuYrUER0UG80YNP4lW2Pd
BZCWMhAfwsvA+smU0jPZMKnoLfAScvkEoICcKpzn7NxuVOaTG7vD4G0IHgCXnBVz
JRul5Dy3jiYaNtu4VNoYpGfw+nue0A+IW/LzYz1gatYLAtNs1Zdh4xJK/FVeqrYX
4aCjutdPt8f5eQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:34 2026 by rpki-client