Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: 25PUfkBrzuSOaaPTZuiMw5phC8Kd/TLHPdnXaTOPuto=
Subject key identifier: 55:85:64:8D:54:86:C5:8F:23:76:AB:D6:60:C9:94:BB:D6:35:CD:67
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 019D38D337F29A84D982D1622AADBC6DC617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 1805
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: o0Ar2DETFlUxLEOkeVUWjGR8WPc.roa (hash: opuyTRQFWnU43wU694s8uEjDvDG+GMKf+lea5jnxMmc=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: Ci2+gliey98s2sM1M3C/O/pFblwgW9ZxgeuZv3wE1HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:37:f2:9a:84:d9:82:d1:62:2a:ad:bc:6d:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=5585648d5486c58f2376abd660c994bbd635cd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:2b:f5:c7:1f:1b:46:63:94:e3:81:3b:e7:
db:55:5d:54:c7:c7:59:19:09:56:d2:22:d7:47:02:
59:1e:5e:17:0c:e5:41:31:67:ac:57:fb:36:a5:e7:
1e:27:5c:af:ed:69:f6:40:6a:82:d7:04:bb:9f:35:
00:fe:24:de:62:85:27:1b:b8:f2:5e:61:57:af:3f:
fc:69:ef:74:53:fc:b7:48:b7:d0:e0:4b:22:0d:33:
b5:d8:b9:4e:d4:3d:ab:1e:20:27:6e:60:49:f2:e2:
42:dc:e6:b0:86:85:5f:a7:71:aa:7d:40:1b:4e:0e:
e2:c2:1b:cd:df:a7:22:48:36:36:12:d3:42:66:54:
69:38:77:fb:30:c0:81:31:04:05:41:96:35:da:c8:
a5:ad:fb:4a:b1:55:b6:ab:9c:73:21:2b:bb:90:be:
70:5d:50:93:9a:7b:db:5f:fc:af:33:52:cc:49:6e:
d1:42:67:8e:22:c9:0c:e8:0b:cc:ad:59:00:95:a3:
ca:b0:2d:5e:fd:64:e6:b7:b1:87:3b:b0:a3:68:4d:
23:51:20:05:f9:68:60:ec:0c:cf:12:e4:bb:7b:63:
1c:ee:b7:81:ef:1f:a4:19:86:c6:bb:38:39:b7:1b:
3e:b4:0a:ab:28:a7:12:3e:9e:ad:b7:71:64:b8:28:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:64:8D:54:86:C5:8F:23:76:AB:D6:60:C9:94:BB:D6:35:CD:67
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:5f:3e:07:99:de:65:6c:cd:2b:b1:06:91:fa:ab:70:19:
95:4c:5f:ea:91:07:40:9b:25:b6:2e:3c:d8:47:7d:d7:09:9d:
25:28:d9:9e:9b:93:b4:20:c4:b0:b1:32:4d:17:e1:a2:6a:a2:
bf:22:38:a6:97:93:2b:c4:19:f7:dc:aa:22:2d:c9:d4:68:8b:
b9:26:43:60:06:e5:46:92:82:77:5d:03:43:d0:35:b9:ad:fd:
04:a4:50:bb:20:1b:19:a2:96:0c:de:12:fb:80:22:77:98:03:
bc:65:29:ca:0d:ec:3f:f8:dc:66:52:c3:94:e1:ed:47:6c:88:
48:1b:27:3c:57:92:8f:b7:54:20:16:61:c8:10:0f:69:77:f2:
5d:3d:41:da:64:2e:8f:c9:86:e8:ea:19:46:b9:9a:3d:ae:02:
ba:65:b5:36:c1:5b:66:bd:09:47:19:cd:44:56:a5:0f:9c:a6:
50:26:ff:8a:93:35:1c:df:6d:c2:dc:f1:11:a4:74:4f:e8:3a:
41:e2:80:cc:2b:6a:fc:08:ca:d0:b9:85:22:45:ac:ab:8b:6e:
7f:b4:f8:18:69:08:12:3f:f4:d0:27:f1:66:24:8f:8d:d1:45:
15:07:8b:88:6f:22:45:85:e5:f9:4b:14:f3:0f:e3:2d:0d:e4:
56:e5:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:17 2026 by rpki-client