Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: H9vTvcw7tdfhCd+kg+yYoURXGw1zV3t5XhAy78expLw=
Subject key identifier: 5F:11:61:35:55:9B:7F:91:7D:0C:83:9B:E1:76:BA:B1:A2:8E:14:6D
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 019CAB6B51FE19EA0C067FC6EB5DC942616E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: 5J+xiaqlGTCAO5lhqsTf6mHaQs6L26dpYCFkWG/HU1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:51:fe:19:ea:0c:06:7f:c6:eb:5d:c9:42:61:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=5f116135559b7f917d0c839be176bab1a28e146d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:7d:da:71:0a:27:db:29:52:e0:2e:0e:29:
d2:66:d9:cf:ea:11:9b:81:fe:cd:f3:ff:b7:f4:5a:
b9:1f:6f:72:b3:0e:8c:33:95:aa:38:cb:e9:d3:72:
fd:58:83:7d:73:12:6f:12:46:26:61:86:5b:36:39:
b4:3a:ff:ad:7e:6f:cd:1c:42:3e:e1:d1:d8:23:3f:
7c:4d:03:bd:a7:53:d6:7d:16:c6:3a:a9:4a:33:64:
63:90:51:40:e3:c6:37:5a:cd:96:42:f5:29:ce:58:
04:bd:6b:54:3c:90:64:15:46:6e:91:22:8c:36:4a:
43:1f:a4:2a:bd:0e:a1:89:e1:70:0e:ba:23:45:eb:
30:11:8c:da:ac:3b:87:17:10:f2:6b:a1:cc:8b:fd:
d2:0a:68:dc:ec:7c:a5:db:d9:66:f7:e6:95:ad:8f:
57:6d:1d:7c:39:a4:39:8f:53:61:1d:6e:e3:1f:29:
0b:00:86:39:1a:b5:06:ce:8c:7a:af:2a:48:b9:4f:
48:7f:2a:72:49:1c:38:0c:4e:ac:7d:e3:a4:d8:63:
ef:c7:3d:34:db:b2:fc:fb:c1:83:f2:2b:83:f7:98:
3c:c1:1e:a4:7f:23:a3:10:b6:ae:31:8d:27:65:56:
90:0b:10:4c:bb:d5:40:ae:fa:89:9c:07:be:cb:bf:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:61:35:55:9B:7F:91:7D:0C:83:9B:E1:76:BA:B1:A2:8E:14:6D
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:82:54:fc:99:5d:9f:0f:46:42:9a:73:3b:d8:39:f1:95:49:
a8:fd:3c:df:e3:15:d7:7c:be:7f:cb:56:63:2e:72:86:19:cf:
36:e5:d8:cb:56:86:d0:dd:a1:b4:1c:32:5d:61:b4:84:fc:aa:
8d:b8:96:f7:df:66:1a:43:6e:42:64:6b:4a:1f:17:77:a5:4e:
18:d2:4c:67:ab:ea:87:ab:58:e5:b3:27:63:86:31:a1:ed:72:
ad:1a:3b:50:dc:b6:97:ee:6a:88:04:40:40:bb:d2:e7:6f:e9:
9b:20:8d:91:2e:a3:3b:3b:73:67:3d:89:5a:37:e7:59:aa:d3:
4b:6d:2c:33:e3:24:1d:7c:d4:c6:24:5f:90:d7:44:9a:d4:0e:
1f:d3:9b:02:69:4b:c2:3c:1f:b4:e2:ff:f3:54:de:a8:64:f3:
0c:7d:d0:d8:19:29:b4:8d:12:26:39:c1:3c:6c:31:75:09:66:
64:32:30:85:70:f1:99:6e:8b:7b:8d:be:fb:94:cf:31:ee:e1:
c7:1a:ef:1e:9d:e3:d1:b2:94:b4:94:91:1d:81:37:65:ae:e0:
9a:0b:f9:15:ce:68:06:e0:d1:57:87:0d:7f:63:b3:79:36:ca:
a3:64:25:7f:7d:60:ff:39:a4:8d:a2:6e:2c:38:2d:8b:c0:57:
94:40:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:33 2026 by rpki-client