Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File: UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier: A1JrifjHhilvW2fQlwN2OZyJMG6FYKHMHrQ7y5aYghM=
Subject key identifier: 9B:71:CE:4B:0C:55:8D:AC:2B:0F:07:25:36:71:73:75:2F:57:61:98
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer: /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial: 01A06EA763AAF969CA8AAAFDC055A33881CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number: 08C5
Signing time: Fri 04 Sep 2026 23:00:58 +0000
Manifest this update: Fri 04 Sep 2026 23:00:58 +0000
Manifest next update: Sat 05 Sep 2026 23:00:58 +0000
Files and hashes: 1: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: yKoh8conqjxBURwdfxZZTHhYM5P0akT78FtZuvcV2Dc=)
2: mf0gWWT9tDUujC29k27IpTbJ344.roa (hash: CIBQigWs2TocsqchNE4I1RZtMQ3hnsC16oL8fK2cCdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:63:aa:f9:69:ca:8a:aa:fd:c0:55:a3:38:81:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Validity
Not Before: Sep 4 23:00:58 2026 GMT
Not After : Sep 5 23:00:58 2026 GMT
Subject: CN=9b71ce4b0c558dac2b0f0725367173752f576198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:eb:21:bc:a1:41:9d:27:9a:ce:7c:0d:47:
39:11:0c:df:c2:c8:6c:e1:16:7c:e1:37:5a:87:50:
0a:e3:00:a8:e2:b8:ea:b6:3a:0d:6f:b7:06:bd:9f:
f5:64:d9:9a:a0:bc:44:5c:52:73:14:06:03:33:54:
82:ba:d1:a5:88:05:a1:9d:da:d3:03:57:c1:53:80:
50:4b:6f:be:33:54:07:5a:09:b4:9e:04:b1:9a:7f:
7f:05:12:b7:ca:09:83:cc:1c:33:6e:77:a4:26:77:
ba:a6:53:fe:a8:d8:2b:94:56:39:d4:5a:8e:43:3d:
ef:42:c7:f1:11:a8:9d:2e:f1:09:f5:23:fc:b8:69:
5d:2c:af:7b:4e:54:54:89:60:49:75:fe:bb:28:bb:
a2:2a:6a:54:10:43:48:81:a7:81:da:ba:bd:53:2b:
ff:e9:4b:ef:84:eb:dc:14:2f:83:45:1f:18:a4:b8:
be:45:9c:e6:9b:1a:ec:af:0c:12:a9:92:d3:a8:e3:
2c:70:fa:24:5f:7c:39:fd:04:7f:28:b3:e0:12:67:
64:6d:52:74:d7:56:3c:91:89:a2:c8:b2:98:cf:f9:
eb:a3:6c:e8:b7:a1:b5:b7:44:2a:2d:36:d1:10:21:
1d:be:d9:c9:90:69:19:7a:88:e7:8d:e9:94:d2:e6:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:CE:4B:0C:55:8D:AC:2B:0F:07:25:36:71:73:75:2F:57:61:98
X509v3 Authority Key Identifier:
keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d3:ec:fa:16:0c:35:af:11:17:ca:01:96:d4:ed:06:c3:65:
f5:dc:18:9b:ce:af:e7:48:2a:0a:bf:ea:43:3f:9f:46:da:5c:
af:62:f0:30:63:23:39:02:01:82:de:cb:fb:64:9b:82:81:a5:
40:d8:c6:35:0a:1c:99:42:fe:86:a2:73:22:2a:ad:21:3d:cb:
c9:74:30:e0:a8:f0:4b:ff:71:ac:0f:08:d6:d4:9f:87:21:5a:
ef:20:ee:7d:6f:19:6f:65:4f:16:4d:51:6c:0c:3b:cb:a8:2f:
94:2a:b2:6a:08:36:00:f6:38:3a:93:19:c5:f2:35:3e:b6:f5:
72:1a:cc:ab:ce:36:ff:64:a1:fe:6a:4a:fd:32:f8:5b:69:ec:
2d:29:16:10:f1:03:c9:94:35:89:b3:17:60:b2:8d:c1:cb:70:
98:27:21:1f:be:db:d5:82:fa:aa:be:86:00:39:a9:8a:3e:88:
81:d4:03:4d:13:ed:5e:f0:65:09:91:59:c5:9f:c9:29:12:a1:
36:96:86:20:43:6f:ce:7a:45:ed:07:d3:20:ba:3e:24:a9:4f:
bf:2a:f8:e6:11:43:76:06:16:aa:24:70:ae:8f:73:a4:67:47:
4a:a3:c2:2d:96:54:80:3e:cd:99:8b:3b:19:dd:d3:d6:ce:83:
61:aa:ee:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup2Oq+WnKiqr9wFWjOIHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjVmZTk5YmMyMjMyODg3MTE2ZmRhYzgyZDQwODJhZGJj
NmFjYjcwHhcNMjYwOTA0MjMwMDU4WhcNMjYwOTA1MjMwMDU4WjAzMTEwLwYDVQQD
Eyg5YjcxY2U0YjBjNTU4ZGFjMmIwZjA3MjUzNjcxNzM3NTJmNTc2MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhXrIbyhQZ0nms58DUc5EQzfwshs
4RZ84Tdah1AK4wCo4rjqtjoNb7cGvZ/1ZNmaoLxEXFJzFAYDM1SCutGliAWhndrT
A1fBU4BQS2++M1QHWgm0ngSxmn9/BRK3ygmDzBwzbnekJne6plP+qNgrlFY51FqO
Qz3vQsfxEaidLvEJ9SP8uGldLK97TlRUiWBJdf67KLuiKmpUEENIgaeB2rq9Uyv/
6UvvhOvcFC+DRR8YpLi+RZzmmxrsrwwSqZLTqOMscPokX3w5/QR/KLPgEmdkbVJ0
11Y8kYmiyLKYz/nro2zot6G1t0QqLTbRECEdvtnJkGkZeojnjemU0uYIVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtxzksMVY2sKw8HJTZxc3UvV2GYMB8GA1UdIwQY
MBaAFFD1/pm8IjKIcRb9rILUCCrbxqy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83N2ZhMmEtMTNmYy00ZGE2LWFlYmIt
NzQ1NmY0MzBjM2YxLzEvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83N2ZhMmEtMTNmYy00ZGE2LWFlYmItNzQ1NmY0MzBjM2Yx
LzEvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNPs+hYM
Na8RF8oBltTtBsNl9dwYm86v50gqCr/qQz+fRtpcr2LwMGMjOQIBgt7L+2SbgoGl
QNjGNQocmUL+hqJzIiqtIT3LyXQw4KjwS/9xrA8I1tSfhyFa7yDufW8Zb2VPFk1R
bAw7y6gvlCqyagg2APY4OpMZxfI1Prb1chrMq842/2Sh/mpK/TL4W2nsLSkWEPED
yZQ1ibMXYLKNwctwmCchH77b1YL6qr6GADmpij6IgdQDTRPtXvBlCZFZxZ/JKRKh
NpaGIENvznpF7QfTILo+JKlPvyr45hFDdgYWqiRwro9zpGdHSqPCLZZUgD7NmYs7
Gd3T1s6DYaru3g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:17:52 2026 by rpki-client