Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
File: upcN4SazoLVI2tdvXvqIhVxvH_I.mft (raw, json)
Hash identifier: nXEuwrjxtZ6i5wD5AkHrPbwun1wGNvWk16SnCutxdyk=
Subject key identifier: 55:AA:A8:A5:E1:C6:BE:0D:2A:73:8D:4B:06:5A:BC:82:C4:82:EA:72
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Certificate issuer: /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial: 019D992AF86DCDE7D6C29413DDC5FEC79A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
Manifest number: 0C48
Signing time: Fri 17 Apr 2026 02:00:23 +0000
Manifest this update: Fri 17 Apr 2026 02:00:23 +0000
Manifest next update: Sat 18 Apr 2026 02:00:23 +0000
Files and hashes: 1: Q_P7X5C1lmaNlkbuzVGT844GFfo.asa (hash: nwImYSIcMFyAUiCaJ41mpvQb3aaHOwHGxJ4PTZp+Yz0=)
2: sH_i52u9I2QPQooV8iPsfP3TRkE.roa (hash: 3i21QPZ/ky3oP395rnMd9Ue3A3mgKCo4RMpPmWOaqwk=)
3: upcN4SazoLVI2tdvXvqIhVxvH_I.crl (hash: QZuN3L0e87Nff1dbWGBwiWPapsgcwM1JzXvEZpP1KIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f8:6d:cd:e7:d6:c2:94:13:dd:c5:fe:c7:9a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Validity
Not Before: Apr 17 02:00:23 2026 GMT
Not After : Apr 18 02:00:23 2026 GMT
Subject: CN=55aaa8a5e1c6be0d2a738d4b065abc82c482ea72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:b0:ad:fc:a9:49:4c:3f:06:75:54:a8:95:
ef:75:9f:3c:2f:12:62:f8:4a:0b:84:20:5f:e6:da:
db:c9:97:d7:2f:ba:f0:84:ea:98:92:e0:1f:9e:16:
72:59:89:21:4f:2f:44:c4:5b:31:6c:c6:c6:70:05:
0c:76:3a:90:49:da:7e:c1:ca:f0:9d:56:db:18:11:
c3:99:2d:9d:04:5f:06:b8:93:55:ac:fb:42:8d:87:
99:c9:d7:8a:72:4a:12:fe:dc:e1:4f:57:ed:c7:fe:
a4:9f:f4:16:49:6a:f5:85:a2:4e:92:5a:72:52:1e:
d8:e6:83:29:34:ed:63:af:80:0a:28:89:29:c4:e9:
8e:7c:a1:58:09:a5:ed:c6:29:dd:3a:d8:3d:1d:9e:
91:72:ce:d5:2e:1e:f9:a6:2e:92:f2:c1:97:aa:fd:
16:72:d3:73:68:be:41:69:38:52:85:0f:ff:4f:ac:
77:ca:1c:47:1b:c3:d5:2b:1c:6d:ff:1c:f7:93:79:
53:60:74:6d:f8:56:61:2a:ea:da:a9:8a:49:7e:26:
3d:a8:39:da:24:6c:ec:75:f5:47:8a:fa:c9:ce:d6:
b9:ce:fc:71:dd:a1:29:c6:f4:f8:84:ed:f2:f6:bf:
b4:27:24:6b:d1:e6:a0:5a:a8:8d:ff:36:3a:07:2f:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AA:A8:A5:E1:C6:BE:0D:2A:73:8D:4B:06:5A:BC:82:C4:82:EA:72
X509v3 Authority Key Identifier:
keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:84:a7:d1:63:5c:f6:10:64:39:4a:fa:4f:39:6e:cf:d4:ea:
70:bc:99:91:9a:6e:9b:0f:0f:e7:bf:15:30:3d:85:28:b1:b5:
22:77:76:4b:31:5d:36:c4:b1:bf:17:87:4b:59:d6:51:76:ce:
6e:15:bf:40:5c:ef:f0:18:1d:ea:2c:9a:63:62:7c:f4:db:eb:
0b:11:5d:e0:58:b1:87:ae:7d:e4:03:64:db:b9:a0:19:90:38:
cf:89:99:18:ce:e4:dd:22:b2:f7:f9:be:34:03:f5:30:d0:ae:
f7:91:9a:70:c0:5d:bc:43:98:fa:77:9b:b8:11:78:bb:d0:87:
41:50:de:a8:45:64:da:e6:55:e8:c7:e7:46:0f:4e:68:57:70:
d6:ba:6a:04:d5:f6:9d:37:65:5d:09:5b:45:91:ba:3d:03:16:
9b:3f:65:62:f7:cc:79:46:95:c9:50:10:59:79:bd:f2:ec:69:
0c:58:02:0b:3a:94:83:60:48:f3:a9:18:0b:60:9d:2f:d2:05:
0c:81:1f:9d:27:38:ff:4e:dc:0d:96:6f:04:28:3b:80:3c:77:
bd:99:1e:d1:5c:9f:4a:da:6f:f0:e7:98:c8:98:4d:d2:13:f1:
2b:13:36:f5:5f:b9:db:ef:32:74:05:98:ab:93:64:34:4d:87:
3f:96:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:07 2026 by rpki-client