Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: 1UTm03SmY2SPfZBfbZM4VUNDkMWX1GE37uuyh/SMnEc=
Subject key identifier: 3C:32:DF:62:85:53:73:0E:68:3E:A1:D6:A7:97:67:C3:9E:73:3F:C6
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 019D9AABA2B1BA3F85C990BCE001109C6BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 09:00:32 +0000
Manifest this update: Fri 17 Apr 2026 09:00:32 +0000
Manifest next update: Sat 18 Apr 2026 09:00:32 +0000
Files and hashes: 1: H3jTyRlviQDZUSJc8TpRwj8PKRA.roa (hash: p+++YoYuwo888NrE0/pgeoUageDuwSXAR7Cb5CIQ67s=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: 12CvSUoUSJUGYYUKG0T0oqS/z8F/HAEFWGYrleGuyJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a2:b1:ba:3f:85:c9:90:bc:e0:01:10:9c:6b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Apr 17 09:00:32 2026 GMT
Not After : Apr 18 09:00:32 2026 GMT
Subject: CN=3c32df628553730e683ea1d6a79767c39e733fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:2d:28:fe:64:59:05:2a:6d:e0:0c:e7:db:
6c:21:dd:76:6b:4e:4e:6f:d2:cb:6a:cc:9a:2f:50:
c5:fc:7d:d3:19:13:c2:cf:b9:35:c6:9f:4b:0b:76:
e5:7c:8b:0e:10:c9:87:63:f7:76:0e:99:62:49:c6:
19:12:12:99:bd:8b:31:ca:76:01:79:3c:b4:31:53:
bc:85:57:f5:60:5e:b6:1b:b2:c6:1b:2a:89:f8:7f:
12:21:d3:de:09:e8:53:1d:f1:22:0b:12:c4:91:bf:
31:e6:94:8c:6d:34:3f:96:4e:2e:66:90:a8:ac:a4:
31:86:be:cd:10:d6:1b:7d:49:9a:8b:b9:d8:6f:b9:
ff:20:85:f2:93:ea:16:18:93:ed:22:c6:27:a9:27:
ee:47:97:89:d6:b4:fc:01:11:c3:38:08:3a:dc:bb:
90:fc:9b:6d:ab:c8:7b:6a:83:db:95:f3:ca:64:8f:
9d:bc:44:8d:6d:70:b1:67:92:39:4a:7a:48:9a:ef:
4c:d2:91:1b:be:b2:57:8b:ba:7e:9b:00:1a:62:b1:
60:87:49:65:cf:9b:b3:c3:1e:5c:51:a8:9a:98:7f:
2b:0e:6e:96:2f:4d:cb:88:18:a3:11:7b:d4:de:88:
61:1a:bb:73:02:7b:96:71:35:be:17:d4:06:ae:6a:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:DF:62:85:53:73:0E:68:3E:A1:D6:A7:97:67:C3:9E:73:3F:C6
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ec:b0:f9:a0:ad:a5:b8:95:56:b3:24:a5:d5:41:21:35:ea:
80:75:63:de:3f:cf:30:83:61:ae:e3:36:fb:c7:74:19:8d:bb:
93:20:2d:01:c3:05:a1:50:fd:9f:d5:82:d1:02:ca:83:74:f1:
36:64:9a:38:58:05:40:80:bd:c5:37:c1:c2:84:f6:4f:e6:84:
2e:93:54:2b:40:df:a3:8c:c9:2b:91:53:da:4d:12:0a:37:cf:
0a:48:8f:42:98:b8:f3:81:c6:c5:76:9f:3d:3e:14:3b:99:e7:
8c:ce:2e:2e:cb:40:e4:03:71:00:e0:bc:08:b4:7c:33:1f:08:
22:ae:21:94:4e:84:64:f3:0d:69:f9:ac:a6:60:1d:44:4d:83:
ae:af:b4:dd:13:10:9c:63:c1:f2:81:0d:f4:f2:5e:db:5d:4a:
86:8c:a9:d4:10:1a:e4:4f:d3:f9:f2:2c:dc:73:f9:02:d1:74:
fc:19:cc:c5:8a:d5:17:5b:47:2b:9d:fd:26:ee:d9:29:f1:30:
67:16:1e:a3:26:91:fa:b4:bc:15:31:73:a8:ad:0b:c0:50:75:
09:43:65:61:89:2f:20:1f:6a:08:cc:45:ab:de:b4:26:79:58:
e7:f4:26:a9:2e:6a:fe:a4:fa:ff:34:44:68:7d:04:af:68:04:
24:39:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:53 2026 by rpki-client