Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: O7jAUvGlAxbuwP/tC3SRfRbP/So4xF7W1ER3dRhTKMQ=
Subject key identifier: B7:9A:59:DC:BC:63:AF:02:F6:94:92:20:4F:D3:8E:00:55:52:C2:42
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 019D382E91E47E2F4B9F81C010282EA96ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: H3jTyRlviQDZUSJc8TpRwj8PKRA.roa (hash: p+++YoYuwo888NrE0/pgeoUageDuwSXAR7Cb5CIQ67s=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: GxqiG6VAPWo1HWvggL2iF40WyAuNGdHNMVHY71wqY5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:91:e4:7e:2f:4b:9f:81:c0:10:28:2e:a9:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=b79a59dcbc63af02f69492204fd38e005552c242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:a2:22:60:0c:89:71:86:63:c0:ce:43:15:
1f:c0:30:d0:7f:9b:60:fc:dc:1f:fd:3f:f1:df:b4:
12:33:48:8a:c0:c3:3b:b0:44:38:d3:3e:9b:d7:d7:
eb:09:30:3b:54:09:54:b7:9e:ef:b9:ea:49:96:23:
cd:49:27:83:44:b3:47:9c:c3:46:d3:b5:0c:10:23:
6b:df:68:65:9b:6c:87:05:6d:30:12:77:37:2b:7c:
ce:57:ef:ec:4a:bb:a1:af:51:1c:48:08:e8:e7:e7:
dd:d0:e5:93:32:6b:08:8a:f8:84:c0:56:d1:d1:61:
ae:4b:22:94:88:c1:05:5e:8d:2b:15:70:ff:d1:0f:
82:7d:08:ab:5c:0d:73:fb:62:ac:94:3c:1d:cd:14:
c4:bf:08:29:dd:59:fe:a6:34:86:e8:4d:cc:d7:76:
b6:ae:fa:bc:92:8f:9c:4b:3d:cf:93:ac:16:9b:48:
bf:23:a3:54:9b:bd:b5:b0:14:c2:70:44:4c:71:60:
d6:2e:7c:ee:b1:d4:a7:c6:72:18:7d:3d:08:44:17:
de:f7:84:ba:6b:26:b8:09:7b:fe:34:4a:3a:08:42:
aa:8b:75:1d:08:45:e4:4f:d3:68:94:a6:5a:b6:5c:
4d:31:63:bd:29:a1:4e:7d:dc:5e:e0:21:f8:7f:53:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9A:59:DC:BC:63:AF:02:F6:94:92:20:4F:D3:8E:00:55:52:C2:42
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:4b:84:93:cf:45:82:3a:26:bd:83:56:51:bb:d6:75:9e:
87:0b:9b:35:ff:86:5f:8d:7f:e9:70:47:ac:e6:3e:c6:30:a3:
d4:22:b9:25:8d:4f:a1:f2:ce:99:6f:b9:2a:90:52:8d:3d:b4:
fa:90:05:a1:05:96:cc:82:d9:95:91:13:2f:ac:e3:a9:0b:72:
da:3e:f3:65:50:c6:95:d4:33:0e:c9:c1:39:dc:05:32:1b:c0:
67:1d:5b:46:13:9c:1e:9d:fe:bd:63:b0:f2:75:50:e2:cf:19:
f2:64:22:02:19:c3:2b:8d:e6:bf:30:93:6e:16:99:41:bd:b8:
fe:89:08:12:e4:b3:c2:6b:c7:24:2a:33:f6:dc:33:fa:21:98:
3f:bc:fa:fc:d0:85:dd:d7:c4:4c:05:11:79:53:74:c7:27:cd:
f2:20:4e:34:30:df:d8:e4:18:52:83:90:a9:98:97:96:03:eb:
41:14:43:f9:f7:44:f1:35:81:e9:1b:00:05:0c:a7:97:37:f9:
34:83:db:d7:04:d2:72:ba:bf:8e:76:c1:42:f4:45:55:c0:27:
58:b4:cb:73:cd:16:f2:9e:53:33:e8:91:03:60:a4:2e:da:1a:
01:be:d8:01:70:29:ec:52:03:72:08:b4:1e:3d:5f:f5:3c:45:
a3:be:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:18 2026 by rpki-client