Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
File: upcN4SazoLVI2tdvXvqIhVxvH_I.mft (raw, json)
Hash identifier: f4wwTIRNyC2mI4SXLlep8iFA/TUfs7cyImcRUFnnl2k=
Subject key identifier: 1F:8C:A3:D0:E5:B4:04:F5:16:6E:B1:50:48:77:04:01:54:F5:61:58
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Certificate issuer: /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial: 019CA9B3DE3472EB945AFFA53ACBEB29F7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
Manifest number: 0BCC
Signing time: Sun 01 Mar 2026 14:01:03 +0000
Manifest this update: Sun 01 Mar 2026 14:01:03 +0000
Manifest next update: Mon 02 Mar 2026 14:01:03 +0000
Files and hashes: 1: Q_P7X5C1lmaNlkbuzVGT844GFfo.asa (hash: nwImYSIcMFyAUiCaJ41mpvQb3aaHOwHGxJ4PTZp+Yz0=)
2: sH_i52u9I2QPQooV8iPsfP3TRkE.roa (hash: 3i21QPZ/ky3oP395rnMd9Ue3A3mgKCo4RMpPmWOaqwk=)
3: upcN4SazoLVI2tdvXvqIhVxvH_I.crl (hash: GdDaAzOluXKG3YvL1Qhq0cRbLQE5DSaEV9mNkLSTOtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:de:34:72:eb:94:5a:ff:a5:3a:cb:eb:29:f7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Validity
Not Before: Mar 1 14:01:03 2026 GMT
Not After : Mar 2 14:01:03 2026 GMT
Subject: CN=1f8ca3d0e5b404f5166eb1504877040154f56158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:47:17:78:32:71:4f:e5:50:12:be:4c:4b:
f9:14:39:40:9e:b9:49:96:0f:1c:d7:e3:bb:5d:b0:
b7:ac:95:64:c6:dc:8f:52:f8:33:4f:77:20:00:ad:
79:22:77:f5:db:ae:81:cb:41:3d:54:de:42:cf:df:
7f:3e:1f:55:57:34:42:33:8b:99:67:08:b8:63:c2:
84:b1:94:f0:06:12:81:64:79:19:0a:6c:2b:f3:9e:
d9:2b:2f:84:85:ec:d9:08:54:fd:56:6b:36:d5:5d:
d2:0d:d1:71:14:c8:05:76:a5:d8:e2:04:e4:d9:a0:
f8:c2:8f:7f:c4:26:38:2e:ae:f1:11:8a:d2:8e:ac:
43:09:d6:bb:61:80:d5:81:2f:6d:3d:51:a2:a0:85:
6c:3f:33:3b:25:64:85:ec:ce:24:a6:c0:c2:62:ba:
d0:b3:7a:a0:cb:52:14:ee:be:1a:b8:ae:07:e0:44:
8f:34:b9:7d:ba:8d:ae:e4:d3:0e:a6:a9:57:14:02:
bf:57:91:61:60:0f:1e:00:67:38:24:23:ad:7c:0c:
bf:26:a9:a4:36:0a:d6:b4:ef:83:77:f7:ba:6d:65:
1c:96:b1:25:9d:ba:dd:4e:8b:31:dd:b4:f4:5a:a8:
c7:9c:c8:9f:67:12:1d:0b:4e:5a:8e:1e:2d:51:79:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8C:A3:D0:E5:B4:04:F5:16:6E:B1:50:48:77:04:01:54:F5:61:58
X509v3 Authority Key Identifier:
keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:f5:08:4e:5e:69:4c:4b:2a:98:07:9d:d3:08:0f:53:dc:
5b:00:91:99:e2:75:a9:16:ea:9e:5a:81:ee:84:1a:90:2a:5f:
72:28:5f:c9:cc:50:2d:08:5f:38:8b:4f:55:72:a6:3d:d3:6a:
70:56:8a:1e:24:cf:66:d6:3f:4b:60:e0:0d:c2:c5:09:b4:c9:
83:dd:9a:06:6c:6f:09:c6:50:17:08:18:53:42:51:d9:51:0a:
00:8f:a3:c3:95:74:51:c4:c5:55:5a:55:c2:97:a3:8b:cd:33:
d7:8b:31:bb:19:7b:0d:72:a6:69:5a:c7:07:e3:0c:0c:a9:03:
6d:25:24:64:78:60:22:9e:91:c4:11:7c:c5:3c:6d:db:40:2c:
f1:b6:43:43:e0:60:fe:4c:23:93:a4:20:f5:82:23:a3:13:21:
b4:c4:3f:b6:45:f5:a9:e9:5a:cf:03:78:11:dc:3b:ce:24:58:
bc:ea:7b:de:d1:4f:97:27:00:4a:dc:57:39:b9:35:78:ec:a6:
2d:25:f6:7c:98:41:25:59:3e:12:50:70:60:01:a7:c7:41:6d:
45:c3:16:bc:9b:e5:de:7c:ea:e0:4c:60:1a:c2:af:14:cf:5f:
a4:d6:54:1a:d0:ca:16:58:8c:88:4b:8c:02:7e:4f:4f:b0:28:
a4:2a:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:27 2026 by rpki-client