Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier: /t7hXA7zllDDgpwPIXmk4QpXFxhgHDLPuikuQZNxaRs=
Subject key identifier: C1:E1:60:2F:C3:A3:A9:AE:39:B7:C5:F8:2D:5C:21:B5:A5:57:FE:99
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial: 019CB0913B73445B0E2C9D3F0A1C44874268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number: D2
Signing time: Mon 02 Mar 2026 22:00:33 +0000
Manifest this update: Mon 02 Mar 2026 22:00:33 +0000
Manifest next update: Tue 03 Mar 2026 22:00:33 +0000
Files and hashes: 1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: AtWCSUEY6FkH2rOpI/7AjePnfzPSmnepLHcLVT3N1EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:3b:73:44:5b:0e:2c:9d:3f:0a:1c:44:87:42:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Validity
Not Before: Mar 2 22:00:33 2026 GMT
Not After : Mar 3 22:00:33 2026 GMT
Subject: CN=c1e1602fc3a3a9ae39b7c5f82d5c21b5a557fe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:32:2c:05:e6:b4:62:0c:94:a3:ff:30:20:
67:0f:8c:70:47:91:61:de:cb:1b:fe:70:b9:ee:bc:
73:4b:38:ab:b6:bd:32:3c:f6:d5:44:0a:a5:8b:b8:
1a:c9:aa:32:bb:f7:45:45:53:a0:27:3e:02:f5:13:
ba:ee:3e:d1:c4:95:58:99:f1:35:3b:dd:18:2a:a2:
96:e5:bf:53:8c:a1:1b:b7:f3:b0:6f:4f:7d:7b:29:
c9:a8:84:42:08:a1:e9:42:fa:d2:4e:a7:4f:ba:16:
90:4e:2b:0c:2e:e4:22:7f:c5:8f:f0:1f:55:69:ec:
9a:91:3d:35:66:fd:4f:1d:bd:2c:04:d3:9c:5e:c7:
0b:f4:85:d9:a2:75:44:c8:15:84:be:23:ba:ee:cd:
8d:a5:b8:28:d9:c3:09:4c:5f:29:09:97:d5:55:2b:
35:49:a2:d1:fb:52:36:95:c8:ce:93:28:55:d6:fa:
e7:9f:18:96:08:60:0a:06:d9:79:ed:c9:82:43:00:
4e:6f:9d:98:41:e8:82:2d:c9:7f:f5:fd:11:06:bd:
d6:1c:6d:df:59:1c:8b:1c:d6:f0:d6:f9:79:cd:85:
f2:9b:d2:e2:63:ad:e4:12:3f:9f:d1:cb:8e:c0:0c:
7e:4d:a7:1f:79:18:ea:d7:b4:02:49:95:53:4b:92:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:60:2F:C3:A3:A9:AE:39:B7:C5:F8:2D:5C:21:B5:A5:57:FE:99
X509v3 Authority Key Identifier:
keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:fd:b1:56:e1:fa:48:0e:5d:0c:f4:e2:69:d0:f8:e2:c3:
59:be:59:57:d1:8b:27:2b:66:6c:f9:99:87:0a:4d:49:b1:05:
be:78:18:55:71:d2:af:ab:cb:c0:a8:3e:ec:c6:37:d4:1b:d5:
28:01:83:22:2b:79:a1:1d:78:6e:d2:f5:b5:0b:d1:ba:fc:64:
21:30:ae:7d:72:71:cc:1e:35:d7:43:1f:ce:09:b5:9b:a0:4e:
68:ff:54:41:d3:c8:b9:9e:5e:78:6e:65:d4:a7:02:b7:5e:05:
43:be:b1:9a:71:2f:b5:5a:06:9d:bc:d4:82:34:a7:73:85:10:
2b:09:38:d4:d1:ba:66:4e:c7:fe:cc:48:2c:47:7f:a2:47:84:
14:bc:56:78:2f:8f:25:8b:22:bb:be:00:b2:90:fb:97:5d:49:
62:c8:d2:a6:8d:61:6d:fe:2d:41:70:b8:a6:b8:03:25:7f:6f:
60:7f:3d:06:b9:a4:b1:08:8b:8a:57:02:b8:f7:0f:1e:d5:32:
ee:8c:5a:81:eb:f3:09:9b:80:13:09:d8:10:d3:4a:f4:71:c3:
fc:ce:15:ee:6d:e8:60:d7:4b:6a:9c:39:c7:9e:25:07:65:ae:
86:1f:2e:b4:c1:fa:ba:aa:b1:15:a3:2b:f7:67:44:36:8b:24:
80:7b:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:20 2026 by rpki-client