Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File: UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier: CzEXnP1TAvWno4eR//lfdK/KwTEmpz99OAURHDGJwcY=
Subject key identifier: 5E:D7:1D:EE:CD:B8:10:1C:FA:60:C6:C8:1F:85:A7:B1:FC:9A:84:88
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer: /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial: 01A181BE16E86E819ED895324926C9A40AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number: 0955
Signing time: Wed 28 Oct 2026 09:01:20 +0000
Manifest this update: Wed 28 Oct 2026 09:01:20 +0000
Manifest next update: Thu 29 Oct 2026 09:01:20 +0000
Files and hashes: 1: TSXro7kP0kr6K6zMwB0QwwMFymU.roa (hash: rpZixq78F8an82UTSJ6FARybyDYbVv/rRNJIY9c9W4A=)
2: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: BSPfARrSucxlizTm7fWqqb/rT6v3E2KCw5RML4ea0FQ=)
3: mf0gWWT9tDUujC29k27IpTbJ344.roa (hash: CIBQigWs2TocsqchNE4I1RZtMQ3hnsC16oL8fK2cCdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:16:e8:6e:81:9e:d8:95:32:49:26:c9:a4:0a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Validity
Not Before: Oct 28 09:01:20 2026 GMT
Not After : Oct 29 09:01:20 2026 GMT
Subject: CN=5ed71deecdb8101cfa60c6c81f85a7b1fc9a8488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:aa:bc:2a:d0:db:6e:15:40:0c:70:9f:4c:
6b:37:6c:1e:70:ba:96:40:71:be:97:78:e5:c7:af:
43:c9:27:a9:50:72:69:dc:8b:76:05:60:5a:9d:50:
24:81:60:fb:c7:c0:97:35:b6:99:b2:e3:53:be:9c:
d0:53:38:da:b2:60:38:c3:5b:9b:6c:58:60:49:a5:
37:0c:d6:74:d3:cc:f5:f5:63:8e:29:87:b4:18:e0:
6a:25:34:aa:34:a3:bb:ba:7c:58:88:94:b4:0a:1a:
8a:66:16:1c:56:f4:93:35:23:ae:d0:2c:fc:09:6e:
25:e6:4e:73:b2:94:4b:e8:81:f2:7b:6f:33:6c:69:
b3:86:fa:56:ae:02:1b:1a:73:98:ea:23:83:3b:1d:
21:9f:fa:60:4f:c4:75:3d:c3:9a:16:ab:f4:61:02:
76:77:c7:9c:db:f6:5f:0e:49:f3:e8:ed:03:35:72:
34:bc:c6:5c:25:88:e6:c8:37:3e:bf:ed:5a:88:f7:
5f:a2:af:53:c6:12:b1:02:b8:24:9f:8c:d0:e9:f6:
32:a3:69:c8:82:8b:8b:f9:33:1c:1d:8b:46:b3:ae:
79:2f:94:f3:69:1c:50:f5:8a:87:ee:e6:b4:26:b2:
cd:d6:d6:2b:95:9b:e4:77:b6:c0:a5:17:cb:26:e1:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:1D:EE:CD:B8:10:1C:FA:60:C6:C8:1F:85:A7:B1:FC:9A:84:88
X509v3 Authority Key Identifier:
keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:23:98:7b:c4:b5:d8:d4:2c:17:2f:da:3d:3c:64:6e:8f:e8:
7a:95:a9:87:35:18:c1:3f:f6:31:9d:1d:1d:e5:a6:5d:31:37:
3c:df:eb:4f:b4:12:fe:b2:a7:df:a7:cc:e6:43:51:9f:0d:34:
07:6d:04:74:1a:f6:30:b4:c9:ac:b6:29:97:d2:15:3c:57:96:
9a:6c:e0:29:4e:6a:f8:d7:59:09:0d:99:de:ce:5c:7b:db:63:
2b:c8:a6:f5:66:f5:04:22:33:3f:d7:d5:b2:76:ba:e1:ae:6f:
04:ab:41:37:bb:62:73:ee:c5:30:40:62:7b:e8:c3:ca:27:3d:
dc:b7:8c:5a:60:af:1e:9e:6f:7f:44:08:cd:2c:f0:d3:a6:f7:
7a:29:c9:63:40:b0:42:ca:b9:9d:ef:aa:b2:37:83:fc:2b:e6:
ee:1b:59:d0:6c:aa:49:7e:88:69:0e:6c:5f:4e:22:30:bc:5e:
3f:12:a0:a0:18:0e:3a:9b:36:95:b9:5f:34:3e:f4:dd:9a:f3:
e8:6c:5d:c6:a1:79:e3:af:83:df:28:c5:27:5c:97:df:c4:f8:
26:ae:01:e4:74:a4:04:35:b0:6a:31:e3:6c:1e:d3:9b:34:b8:
10:f4:9e:d9:97:b8:e9:7f:4f:80:c7:8f:ea:de:d0:e1:5f:65:
eb:9a:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:18:03 2026 by rpki-client