Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: cpgBGKvGIcBWyftnleWCohVvW1fWQFHzWzx73pdn5A0=
Subject key identifier: 16:98:D0:A9:71:DB:98:B0:00:DC:7D:4A:44:5F:F9:8A:EE:D7:8C:BA
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 019CAB6BD7D428A7D05B08FC2564E02916DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 14CF
Signing time: Sun 01 Mar 2026 22:01:37 +0000
Manifest this update: Sun 01 Mar 2026 22:01:37 +0000
Manifest next update: Mon 02 Mar 2026 22:01:37 +0000
Files and hashes: 1: UfY9uP-gSFGDl_psdLY21k8D6rE.roa (hash: liAqA+LlTWz2PCuepJi3NtGWRqXh2SEVE/+htWLewMQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: XOuoGDSSqSAgwRF1CMtHNEkCp9Bxq5iOGr7lVkhhgIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d7:d4:28:a7:d0:5b:08:fc:25:64:e0:29:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Mar 1 22:01:37 2026 GMT
Not After : Mar 2 22:01:37 2026 GMT
Subject: CN=1698d0a971db98b000dc7d4a445ff98aeed78cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:fe:62:3a:3e:58:b7:05:88:dd:ab:2e:82:
b0:2d:43:b2:5b:26:34:68:48:b5:2f:86:9d:3c:22:
c5:07:64:a4:77:61:69:91:b6:e6:d4:9a:57:93:8e:
f4:ad:93:08:11:99:bb:b2:90:a3:94:3a:8d:d6:4c:
75:fb:0f:df:9e:2f:d6:2c:4c:0b:ee:1b:79:04:aa:
10:5c:4e:79:e1:0b:66:37:f8:19:22:dd:42:08:42:
04:dd:53:8a:b4:54:6a:f9:68:fa:61:d5:24:21:31:
09:26:4f:96:d4:81:0d:1b:a0:fd:08:b5:47:68:13:
56:ec:db:6f:2c:8c:8a:39:30:b7:df:0f:a9:95:14:
a0:1c:78:33:96:2c:a7:c2:f1:22:6b:5f:8e:ce:f4:
96:18:33:9e:b9:f1:38:8a:f3:6c:5d:5e:88:d2:88:
87:2b:f1:ab:2e:13:31:37:3b:8a:42:35:a3:0b:3c:
a2:ee:a0:4c:3f:97:5d:b3:c4:99:01:61:0a:9b:e5:
2d:25:43:aa:58:4d:df:e9:6d:a6:54:1b:c2:cb:0f:
4d:90:89:8d:64:c5:60:fe:34:11:34:72:14:74:44:
cc:b4:06:e4:1b:bb:f7:f7:7f:44:a0:f1:72:8a:f8:
89:8b:24:c1:f7:a4:36:4e:2f:17:ba:ef:0c:93:dd:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:D0:A9:71:DB:98:B0:00:DC:7D:4A:44:5F:F9:8A:EE:D7:8C:BA
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:71:c2:f7:39:e9:91:b6:50:28:73:fe:4e:2e:43:c0:f2:39:
59:16:7e:e8:8c:ec:b0:9e:29:25:c7:7c:7c:c1:9a:09:50:c3:
99:dc:2d:49:13:e5:c8:87:fc:5b:53:7f:bf:1f:6d:10:21:a2:
0f:c7:17:3c:78:bb:b0:ae:c5:62:77:ed:e9:7f:d2:12:3f:7a:
4d:51:53:d1:8b:f8:46:27:04:51:2e:0d:5a:a4:9d:4d:68:f8:
9e:b1:5f:c1:14:fe:06:44:ce:5d:9d:c8:0b:54:6f:16:16:4b:
3f:a3:5a:2c:d9:21:62:3f:3d:9b:05:97:4d:11:9e:d3:b0:13:
18:27:c7:70:ad:0a:20:b2:ad:e4:20:73:1a:96:e7:4e:e1:24:
fb:b8:5e:ec:0b:3c:e0:d9:e0:34:77:62:bd:91:e1:73:a1:1d:
60:de:3a:56:aa:dc:31:1d:ab:f7:5a:10:f2:c9:b0:86:78:6c:
38:02:20:90:0e:11:84:51:e2:65:fe:a6:7f:5b:8b:60:d3:f2:
b5:30:99:ae:0c:12:fc:2c:61:7f:64:e9:33:71:eb:90:fa:68:
40:b7:6a:ec:e0:db:6a:88:0b:71:7c:07:1c:3c:d9:76:f1:58:
7f:14:64:c0:9a:26:16:04:d1:38:99:cf:f8:a4:cc:5e:73:82:
06:4c:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:30 2026 by rpki-client