Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: 6HhoyurMYlXLqMFne2uSwEj/GgkyBijTkrBxKuRPZJ4=
Subject key identifier: 4F:C8:AF:E2:F6:58:72:8C:F9:8C:25:14:63:B4:1E:AD:10:B2:40:2E
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019FAAF5E76CFDE12706FB45E318F23774CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 1460
Signing time: Tue 28 Jul 2026 23:01:09 +0000
Manifest this update: Tue 28 Jul 2026 23:01:09 +0000
Manifest next update: Wed 29 Jul 2026 23:01:09 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: 2l/DOzPHbYl34MztMfyBZQoESOcmsbojy459mxRz96g=)
2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:e7:6c:fd:e1:27:06:fb:45:e3:18:f2:37:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jul 28 23:01:09 2026 GMT
Not After : Jul 29 23:01:09 2026 GMT
Subject: CN=4fc8afe2f658728cf98c251463b41ead10b2402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:c1:06:de:75:cc:06:15:6d:95:5e:c5:55:
34:d5:9a:b5:b6:4d:9a:9e:ff:ef:9e:0a:f1:bb:a8:
fa:2c:28:74:8b:6b:c8:f6:4a:19:4a:2e:7c:5e:5a:
f2:8a:e1:b9:f3:77:0c:78:63:3f:94:ee:f9:84:bb:
84:f9:17:07:98:81:4b:29:25:94:d6:64:1d:90:0b:
9d:6f:30:bd:2b:dc:21:54:04:df:e7:bf:2f:25:c0:
83:d5:12:a1:95:f6:0c:6b:6d:85:fa:96:de:e1:be:
6b:87:f0:56:c2:d4:dc:b0:c4:e4:70:72:f3:f2:43:
10:a3:60:8f:45:c5:dc:f1:82:12:6c:22:55:6a:e8:
f1:43:ca:68:eb:08:34:12:63:2c:eb:e3:97:9f:cc:
ec:fa:ea:96:dc:39:0c:a6:1c:18:13:08:ac:5a:ce:
8d:c1:87:81:6e:56:b1:29:1e:48:02:48:c6:64:29:
75:35:4d:f0:d2:e4:81:58:02:e1:66:f0:07:e6:aa:
60:0b:ba:86:95:e8:df:00:66:8f:f9:58:a0:73:c8:
72:aa:42:5a:b7:fd:4d:a2:01:bc:e7:ef:c4:4c:21:
69:e6:1a:06:78:7b:f4:a4:08:e5:b9:68:c7:de:a4:
e3:7c:41:ca:0f:a3:5b:56:04:1e:44:c7:9f:fe:30:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:AF:E2:F6:58:72:8C:F9:8C:25:14:63:B4:1E:AD:10:B2:40:2E
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b4:2b:f0:be:58:ed:18:0d:b1:6a:2b:15:41:9f:dc:06:fc:
61:90:b4:5e:40:cf:80:63:e0:39:59:ec:eb:37:14:4f:ea:13:
3a:81:f0:a2:99:f3:26:91:e7:66:1a:66:63:bb:e6:6d:01:9f:
b4:24:f8:87:89:a6:1a:47:8c:fe:d6:cf:e1:2b:60:44:1e:65:
65:c8:8b:a7:94:a3:51:4d:39:96:0d:00:48:ff:ce:c1:fb:6f:
99:a9:af:73:ab:39:1e:09:8b:a2:88:d9:4b:6f:36:b8:eb:5b:
4f:59:84:cb:52:17:e0:dd:ae:a4:2f:f5:7e:dd:9f:ce:c1:d7:
eb:5b:cb:c5:c4:49:bd:b8:77:11:ed:8e:80:87:ab:37:f7:95:
a3:0a:6f:37:22:27:27:65:69:db:03:5d:e0:90:0c:a3:a9:65:
67:ee:b0:37:31:60:df:89:8d:4a:b8:95:ad:fe:6d:f7:6b:b2:
d5:20:14:76:3a:1a:bc:d8:5c:4f:88:7f:51:be:6f:08:b6:d8:
40:80:58:43:7e:5b:cb:67:e0:9c:20:7e:2a:fe:46:f2:73:90:
68:a5:00:17:12:72:5b:73:9c:e2:d3:9f:0b:91:0e:48:98:7e:
39:14:fc:c3:fb:d1:af:36:39:70:1b:21:15:f1:4e:5f:dc:7c:
d7:7d:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:52 2026 by rpki-client