Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
File: 1-UPALG97-Xkq7khaM3tMeFLWrEw.mft (raw, json)
Hash identifier: lNidhXFq+A5ZZ8tmrWTHE7rKi1uSmCTakJiZJHq7EUk=
Subject key identifier: 3F:DE:12:9A:C0:41:0B:E1:2E:CC:A3:83:59:02:A6:9D:85:43:5B:A1
Authority key identifier: F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
Certificate issuer: /CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Certificate serial: 01A0EBF8CE1760EEC63B1F579F80C9EC8799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 07:02:26 +0000
Manifest this update: Tue 29 Sep 2026 07:02:26 +0000
Manifest next update: Wed 30 Sep 2026 07:02:26 +0000
Files and hashes: 1: 1-UPALG97-Xkq7khaM3tMeFLWrEw.crl (hash: QDg1ja+ruJ6YM3KU/Je7FCq5n/U2tcLs4pjhUhBPr7I=)
2: 87x1D7pYeaB1gXkvbE0BFkgXr-8.roa (hash: Ln5Bb2F89AAwGIw+We1i3J/fjL0LEyPyu8CtB1jNHEg=)
3: Z5HQd2VmGvdvOf7t3Ho1pKxlgXE.asa (hash: gfL13FB4bnR0D1Y6SJGLKvYmhF/HLaJxqtVHMWK6VJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f8:ce:17:60:ee:c6:3b:1f:57:9f:80:c9:ec:87:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Validity
Not Before: Sep 29 07:02:26 2026 GMT
Not After : Sep 30 07:02:26 2026 GMT
Subject: CN=3fde129ac0410be12ecca3835902a69d85435ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:c0:5e:b4:f9:32:4e:6e:43:a4:50:81:be:
28:25:c4:2c:e1:08:87:b4:2e:d6:d9:fc:16:ab:a4:
91:65:7b:27:9c:33:31:b6:02:14:f9:73:ce:65:c1:
7d:8b:65:98:f0:7b:75:bb:33:28:53:54:ff:f9:94:
79:d9:9f:53:cc:81:ae:3d:98:69:5b:2b:70:e9:4c:
98:32:94:c4:8d:2c:c7:1e:9b:34:cf:7e:78:d1:89:
5a:0e:c3:0f:66:65:9e:ec:bf:fc:9a:20:00:b6:17:
5e:82:e9:cd:4d:4b:e0:63:bf:22:2d:5f:f3:db:57:
96:0a:89:13:18:b5:df:c6:db:49:cd:52:5b:37:99:
4e:e7:f9:c7:cf:61:08:2b:e5:45:31:7d:cb:e2:ce:
7d:79:80:96:77:1a:bd:f8:15:9b:54:ba:7f:2b:ec:
72:78:cc:7a:39:a1:17:40:2a:22:c1:45:24:7c:12:
d0:f1:fc:48:97:7c:43:af:8c:55:63:0f:cf:06:cd:
c3:62:4b:ac:53:69:08:88:45:f4:5b:d5:e1:ac:ba:
ce:c7:1f:3a:8a:ab:21:05:ce:5d:95:4b:d2:bf:78:
ff:8d:66:55:a6:1a:d8:27:ea:80:4e:9b:e3:64:e1:
85:33:f8:83:bc:54:fd:50:df:0e:a3:a5:af:e3:9b:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:12:9A:C0:41:0B:E1:2E:CC:A3:83:59:02:A6:9D:85:43:5B:A1
X509v3 Authority Key Identifier:
keyid:F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:d9:3a:d8:1b:f4:5e:6b:82:b3:86:2b:61:6e:5b:cf:fb:
e5:0c:88:e4:c6:12:d2:ae:f4:0c:07:03:97:8d:11:ef:c3:59:
7c:05:20:2b:c9:8d:d8:3b:c7:33:3e:2d:e9:29:a9:26:d6:fe:
1a:a5:cd:98:e6:53:7c:f8:b6:32:74:75:f0:8b:2d:4b:38:ce:
e1:11:70:6c:bc:bf:35:4f:d8:6c:71:ae:6b:bb:28:f3:98:9b:
c3:ca:98:ad:87:cd:48:d0:af:a1:c9:59:9f:5e:fd:0a:88:4b:
e8:3b:fc:a7:7c:9a:b0:03:69:e1:89:9c:d7:ed:5b:79:44:72:
ef:9e:68:e3:4a:1a:45:45:e7:30:b4:7d:62:f7:5a:58:76:48:
82:16:b5:31:13:d9:7a:f6:2c:97:ba:a3:3f:96:94:89:7c:12:
49:dc:a7:3b:74:09:dd:6b:2b:18:53:91:9e:7b:a9:9a:80:a4:
24:c6:f9:bb:b4:0f:fa:b1:97:7b:c1:b3:21:44:b1:e9:54:8b:
46:09:f9:07:8f:70:5e:64:82:fa:fa:f2:cd:ac:f9:df:05:9e:
b1:bf:4b:99:07:39:f4:44:9d:6f:84:d9:17:62:a7:49:1c:8e:
ac:41:e4:b8:2d:43:fc:af:52:66:09:bc:9e:12:7e:37:ad:fa:
b5:d0:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:39:25 2026 by rpki-client