Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: UHhmU0HOkVgUKKghdcSjA5mCCUs+iCDiixr9cG8kfCE=
Subject key identifier: 9D:AA:E0:2C:16:EC:2C:1F:AA:1A:15:AF:E6:4C:DA:49:7B:A5:8A:74
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 019D98F480E65F2CA8A37F0B81EE7BD6AED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 154A
Signing time: Fri 17 Apr 2026 01:00:53 +0000
Manifest this update: Fri 17 Apr 2026 01:00:53 +0000
Manifest next update: Sat 18 Apr 2026 01:00:53 +0000
Files and hashes: 1: UfY9uP-gSFGDl_psdLY21k8D6rE.roa (hash: liAqA+LlTWz2PCuepJi3NtGWRqXh2SEVE/+htWLewMQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: 2xydBnbN+Fy1eXyO8f9PYFAcPfAkBkJ/BGVS0njisHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:80:e6:5f:2c:a8:a3:7f:0b:81:ee:7b:d6:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Apr 17 01:00:53 2026 GMT
Not After : Apr 18 01:00:53 2026 GMT
Subject: CN=9daae02c16ec2c1faa1a15afe64cda497ba58a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f9:32:45:de:a5:7f:cb:79:f5:e4:bb:e5:3c:
d6:ce:5c:9a:ea:b3:d4:6f:29:e7:50:ae:32:9b:da:
c6:bb:7a:e2:69:86:f1:f8:4e:8a:db:84:0a:f1:aa:
6f:96:5f:1f:f1:31:a1:b2:cb:dd:1c:98:f2:ba:de:
c0:60:15:d2:03:af:28:d5:ce:65:a3:6f:f4:5e:34:
de:9f:64:d9:cb:c8:a9:b8:57:42:3d:12:e3:03:6c:
0e:c8:96:60:67:04:72:88:05:d1:c7:25:8a:5a:1f:
68:41:bc:e9:f5:3b:b0:27:54:2c:3c:7f:3f:19:9f:
e1:d6:a2:ff:cc:a1:c0:04:fb:00:d4:34:ca:9d:57:
3d:8c:32:e9:71:f7:79:57:7a:0f:1c:8c:97:24:49:
18:92:68:4a:ab:24:7b:0b:9c:15:b6:e7:b3:74:41:
a7:07:2f:a5:a0:28:c2:74:c9:a2:68:33:66:e7:d2:
df:05:a7:60:11:b0:e0:84:a9:62:67:80:31:6c:f0:
31:43:7b:31:0c:54:02:10:bf:38:d8:c3:3f:5c:18:
ed:98:15:6f:bf:f1:28:37:f6:a8:36:f0:64:f7:9b:
a9:59:f2:8f:f2:07:58:67:95:ba:2c:1f:e4:1f:9e:
83:81:56:cd:65:f8:8f:1b:96:7b:5c:a4:13:fc:f8:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:E0:2C:16:EC:2C:1F:AA:1A:15:AF:E6:4C:DA:49:7B:A5:8A:74
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:66:7c:2a:ab:9b:f3:bc:4c:12:b9:f2:db:25:40:d7:07:a5:
bc:49:2f:2d:94:77:39:0b:33:79:3e:81:20:e9:43:69:22:3e:
96:cb:46:f7:2a:3d:e7:35:96:1e:82:d1:9a:49:03:bc:ea:8e:
9b:c8:41:23:fe:69:2f:ae:b3:d9:71:05:8d:0a:5f:c9:98:c1:
18:ca:e7:50:b9:8b:bc:64:75:24:d4:55:91:fc:35:1e:5d:f6:
07:2c:c8:a7:bd:a4:cc:30:9c:63:b7:6c:07:92:08:ee:c0:22:
df:ef:49:d8:98:99:38:4f:7f:65:73:c0:38:c7:a8:a0:d1:8f:
a6:d0:3c:e8:1a:73:06:fe:4b:a5:7e:fa:04:3d:9b:57:2b:3c:
ea:f4:6a:35:d9:52:54:d4:78:22:55:28:ae:fe:fe:24:ce:b5:
4e:8f:2e:bc:0a:d1:f0:fd:07:4a:45:75:c0:c5:84:1c:00:91:
98:f8:47:57:b2:59:d1:0c:98:d0:2b:3e:ff:26:a4:7b:c5:00:
05:4d:3b:3b:3a:73:ed:47:e1:e1:b5:fe:d7:d3:cf:8a:6c:b4:
ca:86:43:70:76:ff:bf:5e:36:be:44:e1:8d:0f:75:82:a1:3b:
16:44:ed:78:a5:7f:e6:5c:66:e9:26:2e:57:07:44:0b:24:d3:
33:d1:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:54 2026 by rpki-client