Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: S6WenixYu7yUl06/g+enBjte6SNHSpASOvEwGeDcyK4=
Subject key identifier: 2A:6E:51:07:E1:23:85:3D:89:59:28:CF:69:2F:B7:10:EE:47:D6:D2
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 01A0F48CE67A5678164AA8D296D4DEE99885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 1A82
Signing time: Wed 30 Sep 2026 23:01:09 +0000
Manifest this update: Wed 30 Sep 2026 23:01:09 +0000
Manifest next update: Thu 01 Oct 2026 23:01:09 +0000
Files and hashes: 1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: ysRi/5ej3RTziH+zA665JsFDRJz02vdDn735UgXeW2c=)
2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:8c:e6:7a:56:78:16:4a:a8:d2:96:d4:de:e9:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Sep 30 23:01:09 2026 GMT
Not After : Oct 1 23:01:09 2026 GMT
Subject: CN=2a6e5107e123853d895928cf692fb710ee47d6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:04:df:61:af:78:a3:dd:5d:8b:82:b9:c7:
b5:ac:b4:00:b6:84:2c:2f:01:5e:b8:cb:83:ed:25:
57:01:5c:3d:cd:a9:0b:d6:ed:b9:8f:71:0a:31:98:
df:f1:fb:f5:f0:28:37:e1:7f:2d:31:8f:cb:3e:c1:
c1:44:10:42:6c:90:56:f3:21:c4:f4:33:a1:d8:04:
05:09:b3:7c:ab:cf:59:f8:3b:20:c5:34:55:a8:7f:
fc:27:56:3d:75:d6:80:d3:c0:87:86:c0:f3:e7:bc:
95:82:74:46:e1:49:b0:46:f6:41:67:2b:55:88:2a:
c4:e1:0d:3c:fc:d3:3a:11:ee:72:be:71:3d:ea:74:
5e:dd:e3:be:80:92:9b:0e:19:28:8d:5e:56:c0:cf:
9d:6b:66:b2:bd:ec:e4:b8:93:e3:78:49:65:d4:a3:
7d:cf:26:7a:f2:e9:8c:2d:b2:11:dd:66:f3:b3:2a:
ca:9d:65:0a:42:9a:e9:20:1e:38:5f:65:df:21:d1:
4e:27:97:97:d5:63:8a:5f:e3:0d:7c:4d:b5:25:fd:
8a:dc:f0:49:78:55:f0:71:03:4e:19:69:c3:76:46:
c0:7b:cb:dc:c3:9a:80:96:f2:fc:28:86:ee:59:07:
a3:e8:78:ac:20:66:a4:14:62:fc:0b:3f:bd:3d:1d:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:51:07:E1:23:85:3D:89:59:28:CF:69:2F:B7:10:EE:47:D6:D2
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:08:54:3b:85:47:f9:72:05:2e:be:57:a1:23:f5:be:36:c3:
f5:95:fb:d1:ab:ef:71:aa:15:b0:af:e2:25:de:6c:19:79:75:
e5:c0:36:03:f0:d4:bb:88:b0:69:12:e9:28:ae:e9:4b:c5:71:
c2:74:f9:52:84:52:77:71:82:3b:33:f2:38:fb:86:49:4d:8e:
58:e4:64:80:77:0e:da:6d:57:bf:f8:ab:e0:3f:e2:36:a5:e8:
f4:8b:f9:01:de:10:db:45:c6:9e:57:16:1f:c2:85:2b:d6:65:
fb:59:c0:65:17:e4:8f:4f:f7:e7:11:db:c5:96:d2:e4:83:91:
fe:f8:d0:fb:d9:22:61:55:47:c7:c8:0e:7f:1e:c6:0b:c3:5e:
a1:64:a8:41:a0:44:e1:47:5f:62:12:1a:3c:fe:3e:dc:64:bb:
21:9d:8c:1f:76:72:95:9f:cc:56:77:e6:88:68:ee:5d:c5:55:
e7:af:7a:86:ec:78:46:b9:9c:b4:a2:40:4b:8a:1a:c1:0d:3e:
52:33:1e:5c:56:99:0a:ce:e1:bd:c1:17:e2:95:d6:1a:8a:75:
b7:a5:e5:5f:93:8a:d3:c0:af:cf:7a:01:d4:09:d8:bf:a9:09:
0c:76:4e:17:b5:c8:fc:7b:9f:e9:1f:c3:8f:fd:9d:ac:0b:37:
bd:d2:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:06:45 2026 by rpki-client