Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: jP28WavyojtDRnGK0kDRnmajOZ1FjCm1G626cICh+HY=
Subject key identifier: D2:85:7E:C2:05:39:9E:59:13:9F:E0:40:A2:F5:49:8F:85:48:B1:1E
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019CAA58DBC9B0D892AEACADEF9A92F46470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 12D2
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: PGD43/NWwSypKWJ3h9PuyYVo+YHl4DhlEB2wbcmmh8s=)
2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:db:c9:b0:d8:92:ae:ac:ad:ef:9a:92:f4:64:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=d2857ec205399e59139fe040a2f5498f8548b11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:2c:16:31:87:ad:68:8f:35:90:e4:42:3c:
f1:39:4c:d1:95:ca:4d:40:7f:41:16:fb:b0:6f:85:
8b:89:d4:86:24:d6:aa:b7:43:42:b6:33:14:f3:78:
0a:1c:c8:9c:08:b8:99:67:9b:21:12:cb:02:d1:3a:
a8:59:87:29:17:ef:ca:4f:9c:ba:7a:42:06:95:81:
a6:60:4d:9d:e7:bc:05:6c:15:8d:1e:31:08:70:a1:
9d:1b:69:9e:92:d6:66:cb:95:fc:c3:5a:ed:57:e8:
54:45:34:03:77:59:7a:1a:6b:67:b9:9b:ba:79:34:
bd:a1:24:cc:73:7b:60:a1:19:a0:c8:9b:1d:ad:04:
e5:cb:ca:41:4f:09:0e:a0:4a:9d:eb:64:4a:74:3d:
94:1d:29:6f:ee:4b:75:3b:4b:6a:6c:de:55:4a:42:
28:e6:ec:2f:75:23:3c:d6:f6:9e:b3:f0:64:ea:3e:
0e:26:9e:0c:35:fc:a4:80:19:3c:bc:5f:49:43:72:
00:9e:e6:5a:92:bc:6c:fc:8f:4c:ce:e5:38:42:24:
f6:23:68:65:bc:49:de:ea:d5:d6:d9:c1:92:49:ed:
7b:85:cb:d4:0c:14:80:ab:86:9c:db:f2:43:6a:35:
fe:1e:ba:eb:b1:de:f2:1a:e6:52:7f:4f:a5:7f:b9:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:85:7E:C2:05:39:9E:59:13:9F:E0:40:A2:F5:49:8F:85:48:B1:1E
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:b3:29:c2:e9:a0:b1:c1:58:96:41:74:d2:8d:bc:86:1f:
34:6c:26:40:05:3a:0f:e3:60:62:45:6d:c6:c9:87:72:e6:79:
f8:70:d9:0f:56:00:a0:54:88:e9:8b:9a:e4:16:41:15:ef:bf:
24:61:63:13:ae:a4:ee:9d:6a:27:11:95:15:9b:d1:94:6c:e7:
21:c5:c7:d6:e7:0c:01:ba:a0:5f:74:60:0f:0c:89:9a:0c:71:
91:10:4e:29:d1:af:a3:98:b8:5d:d6:25:5b:d5:d4:a5:81:ca:
02:43:55:38:14:03:a5:4b:cb:80:53:01:bc:c1:32:7c:12:58:
50:0d:f0:86:13:f2:9b:db:c6:1b:50:72:da:60:4d:f8:e0:95:
24:1b:35:ce:b1:0e:a9:42:aa:7c:04:c9:6c:34:65:35:ea:3c:
72:d7:15:18:44:51:14:ab:f7:27:53:e1:78:23:df:23:b8:b4:
10:3b:7a:f1:b0:8f:8b:41:1a:04:e3:f7:50:9c:0f:1d:23:6e:
27:ce:d5:14:62:ea:e3:fb:72:3d:c6:d8:0d:83:b4:6f:27:42:
3e:ea:1d:41:63:61:e9:10:10:14:f4:de:d8:a7:f4:52:ef:d9:
01:56:d9:a1:90:7f:24:93:cc:6b:4d:6e:af:9a:d5:ac:e9:2e:
d0:d9:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:43 2026 by rpki-client