Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: yldicc/RdgLeXj7thSsYbjEQaLVB6bfGNZkujOo8p4E=
Subject key identifier: E2:F6:BC:C2:20:E0:04:CB:7D:86:83:5D:D0:8C:D3:38:0C:30:71:3E
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 019D98F5020BABAD710B46EB3864AF7DA8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:26 +0000
Manifest this update: Fri 17 Apr 2026 01:01:26 +0000
Manifest next update: Sat 18 Apr 2026 01:01:26 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: 9AoJy01MNLcnHsMDlSkzys+jNvqbteP5ghxwBJZn5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:02:0b:ab:ad:71:0b:46:eb:38:64:af:7d:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Apr 17 01:01:26 2026 GMT
Not After : Apr 18 01:01:26 2026 GMT
Subject: CN=e2f6bcc220e004cb7d86835dd08cd3380c30713e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:a1:b9:6b:a8:32:1a:3f:03:da:13:f0:b9:
4c:6e:26:99:75:cf:8d:f1:7e:0f:36:35:f2:6e:06:
be:b4:de:c4:72:2a:41:5f:50:01:5f:87:c4:60:bf:
cc:b2:2b:cb:56:5f:9f:7d:a6:07:1a:0f:73:74:b0:
7f:24:3a:ce:e7:59:dc:60:99:7d:59:3a:31:2e:12:
67:9d:51:ca:5b:b6:0f:7b:b8:e7:78:4f:a2:b0:f8:
6a:71:61:b6:b9:b7:7e:da:3a:18:1c:a0:93:d4:a0:
61:14:95:89:fe:c2:3d:45:aa:49:11:f7:4c:be:84:
8b:62:96:f5:0e:d6:89:9f:9f:22:8f:b1:64:96:8a:
1e:ff:73:78:dc:50:68:e3:e5:27:6a:f9:15:8a:11:
b2:b6:2d:76:59:78:e8:6c:89:d2:af:22:fb:b6:0b:
93:51:aa:9e:cf:f8:70:43:a9:90:2f:c6:b7:3e:51:
93:a7:4c:e8:4d:45:2a:f4:57:f4:d7:af:c6:96:fd:
f3:75:67:46:e9:1b:07:8d:75:45:7a:37:3d:69:27:
58:75:73:8b:5d:52:43:c5:3a:81:83:16:8e:93:b2:
01:9b:d6:ef:83:e9:8c:fd:4b:c1:53:ce:05:be:54:
c1:5a:f7:2c:1a:60:2c:db:18:4f:fe:33:a8:2a:1e:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:BC:C2:20:E0:04:CB:7D:86:83:5D:D0:8C:D3:38:0C:30:71:3E
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:dd:65:7d:7e:58:eb:1d:fd:7f:e2:93:95:9c:1d:b6:c0:98:
d3:c1:65:76:76:74:5e:f4:3a:82:23:2a:d9:79:a8:6c:8f:b3:
0b:59:41:a1:f1:3f:ca:27:14:ae:60:61:cf:ff:9f:09:5e:64:
2e:f0:da:76:d1:5b:3a:9a:f3:0a:00:3e:3c:8a:ec:96:20:d4:
ca:d9:ff:d4:9f:ff:11:85:68:74:38:ec:ed:a6:0c:4f:47:57:
ab:95:0d:1c:a4:c1:55:89:ac:42:1b:dd:e4:6f:94:12:97:42:
35:0f:17:be:6f:fd:0c:78:b9:1e:28:01:7a:66:dd:b7:12:7f:
03:91:1b:c9:66:d1:63:be:fe:8c:fd:fc:2a:20:67:c7:04:50:
86:a4:e9:84:46:ee:57:c3:a5:40:1f:36:36:c6:5e:cc:1a:78:
49:95:88:7e:d5:98:a2:72:ef:93:2c:e6:c9:5e:96:f5:eb:75:
ea:8e:c4:84:24:06:55:e5:7d:1b:aa:cf:d2:0a:98:57:6c:6b:
1e:e7:d5:18:5c:58:c7:18:22:69:63:14:ec:aa:8e:58:74:a1:
05:b7:f2:52:3c:c7:53:94:28:ff:b1:54:7a:f6:48:e0:0d:c3:
ba:e2:67:27:4b:b5:73:2b:4b:e1:3c:96:58:03:f4:b2:cb:bc:
03:2c:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:29 2026 by rpki-client