Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File: UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier: rKlAmP0gZEaOiHPcXOwi79mfa/H1wbo6NodQPO/ZiQo=
Subject key identifier: 64:29:C0:A7:C1:79:60:67:A9:F1:B6:A1:D6:03:71:E6:6F:31:FE:4C
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer: /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial: 019E9B4E47CD1B4264C8F59071E5912E89CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number: 07D3
Signing time: Sat 06 Jun 2026 05:00:58 +0000
Manifest this update: Sat 06 Jun 2026 05:00:58 +0000
Manifest next update: Sun 07 Jun 2026 05:00:58 +0000
Files and hashes: 1: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: uAeQ3UPSz2TvFgJ0Q55BGZ8OraYYw98RfGt1+lLsHb4=)
2: mf0gWWT9tDUujC29k27IpTbJ344.roa (hash: CIBQigWs2TocsqchNE4I1RZtMQ3hnsC16oL8fK2cCdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:4e:47:cd:1b:42:64:c8:f5:90:71:e5:91:2e:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Validity
Not Before: Jun 6 05:00:58 2026 GMT
Not After : Jun 7 05:00:58 2026 GMT
Subject: CN=6429c0a7c1796067a9f1b6a1d60371e66f31fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:93:a2:2e:58:e4:b9:0e:8f:b5:ee:a5:16:
9c:2f:c7:28:d4:d8:6a:e0:e7:5b:25:3c:82:38:c6:
ec:3b:fb:27:74:ef:c1:3f:6d:9c:38:64:52:ae:14:
10:45:30:c8:4a:26:ae:cf:44:f6:9a:aa:e8:44:40:
0b:ae:04:3f:96:cd:78:98:3b:d7:6e:7f:70:5d:91:
b8:aa:f9:e1:09:b1:72:b2:9b:6d:9b:dd:83:4d:26:
1e:47:c6:6f:5e:72:a9:d8:0b:b4:b7:b0:b2:50:7b:
04:6f:4d:a3:45:15:44:6b:be:8c:2a:11:32:fc:76:
8d:4c:d6:99:ca:88:cf:54:c2:6e:cc:61:0b:34:26:
60:be:92:a6:69:a7:4e:e5:25:46:a4:24:29:d5:c4:
a2:fc:99:3d:e8:d3:74:5c:58:b5:59:5c:6f:e4:23:
32:30:5b:bc:84:1f:c4:94:7d:51:91:20:bc:5d:44:
c1:7f:5e:e7:84:28:1c:d7:8c:b4:4d:cb:55:27:fc:
2f:9c:c1:fd:44:60:b7:6a:e5:71:ee:6f:2a:19:48:
b8:fb:4d:cb:93:b2:65:e0:67:84:d4:02:64:eb:c5:
b3:9b:cb:73:e1:8b:de:d0:4c:ae:14:fd:04:92:65:
4d:22:d0:31:18:ed:24:ab:c3:e6:7a:8e:85:b5:56:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:29:C0:A7:C1:79:60:67:A9:F1:B6:A1:D6:03:71:E6:6F:31:FE:4C
X509v3 Authority Key Identifier:
keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a5:85:35:29:1c:a2:2f:ce:6d:62:46:a8:7a:de:91:b5:e2:
2e:6b:13:40:c3:57:0b:c7:ca:4c:e6:23:18:97:8c:e6:bf:45:
15:51:36:c9:a7:0b:f3:8a:69:6b:40:4a:dd:7b:93:c6:c6:0f:
a1:89:26:ed:d0:82:2f:56:63:05:da:41:42:e2:1f:0a:42:4f:
52:ff:a7:54:b3:75:f5:83:77:c4:9f:79:70:90:eb:15:0d:c0:
3d:fc:b2:38:91:49:70:25:77:9e:00:05:4b:98:51:4b:b7:68:
ab:f4:fc:cf:20:2f:89:65:38:47:14:3b:20:10:18:13:42:b6:
bc:7a:4f:eb:b0:3c:88:59:e6:dd:3b:26:e6:f2:78:19:7c:dd:
cd:d8:52:80:ff:d3:a3:bc:04:e6:0f:08:f3:f2:3e:0f:6d:33:
de:fe:1d:e3:e5:2b:85:ec:c8:8b:a8:72:98:d7:23:28:68:13:
1e:ed:d8:d4:9c:75:86:1b:16:68:33:ba:79:5a:f8:29:94:5d:
5c:a5:7d:b5:22:ec:ac:39:ea:e4:44:70:2d:d7:93:33:37:75:
50:9b:86:2e:1d:4f:5f:35:fd:35:a1:1d:e2:c3:17:62:35:fe:
bf:ef:50:23:ad:c2:e0:8f:0a:5b:ce:60:45:90:51:7f:3b:cb:
f3:df:c3:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bTkfNG0JkyPWQceWRLonNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjVmZTk5YmMyMjMyODg3MTE2ZmRhYzgyZDQwODJhZGJj
NmFjYjcwHhcNMjYwNjA2MDUwMDU4WhcNMjYwNjA3MDUwMDU4WjAzMTEwLwYDVQQD
Eyg2NDI5YzBhN2MxNzk2MDY3YTlmMWI2YTFkNjAzNzFlNjZmMzFmZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnraToi5Y5LkOj7XupRacL8co1Nhq
4OdbJTyCOMbsO/sndO/BP22cOGRSrhQQRTDISiauz0T2mqroREALrgQ/ls14mDvX
bn9wXZG4qvnhCbFyspttm92DTSYeR8ZvXnKp2Au0t7CyUHsEb02jRRVEa76MKhEy
/HaNTNaZyojPVMJuzGELNCZgvpKmaadO5SVGpCQp1cSi/Jk96NN0XFi1WVxv5CMy
MFu8hB/ElH1RkSC8XUTBf17nhCgc14y0TctVJ/wvnMH9RGC3auVx7m8qGUi4+03L
k7Jl4GeE1AJk68Wzm8tz4Yve0EyuFP0EkmVNItAxGO0kq8Pmeo6FtVYkawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQpwKfBeWBnqfG2odYDceZvMf5MMB8GA1UdIwQY
MBaAFFD1/pm8IjKIcRb9rILUCCrbxqy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83N2ZhMmEtMTNmYy00ZGE2LWFlYmIt
NzQ1NmY0MzBjM2YxLzEvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83N2ZhMmEtMTNmYy00ZGE2LWFlYmItNzQ1NmY0MzBjM2Yx
LzEvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaWFNSkc
oi/ObWJGqHrekbXiLmsTQMNXC8fKTOYjGJeM5r9FFVE2yacL84ppa0BK3XuTxsYP
oYkm7dCCL1ZjBdpBQuIfCkJPUv+nVLN19YN3xJ95cJDrFQ3APfyyOJFJcCV3ngAF
S5hRS7doq/T8zyAviWU4RxQ7IBAYE0K2vHpP67A8iFnm3Tsm5vJ4GXzdzdhSgP/T
o7wE5g8I8/I+D20z3v4d4+UrhezIi6hymNcjKGgTHu3Y1Jx1hhsWaDO6eVr4KZRd
XKV9tSLsrDnq5ERwLdeTMzd1UJuGLh1PXzX9NaEd4sMXYjX+v+9QI63C4I8KW85g
RZBRfzvL89/D/g==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:40:45 2026 by rpki-client