Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File: UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier: 6tSr1WMLXqktdylC3QWiCRIwnmMrleV1M1Tx6GBh2zk=
Subject key identifier: 0D:EE:22:D3:90:32:12:08:9A:8E:F7:75:03:9E:58:01:09:30:92:83
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer: /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial: 01A0DEA9C4BA38C4E0D7B1C6854E9E81C9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number: 08FF
Signing time: Sat 26 Sep 2026 17:01:02 +0000
Manifest this update: Sat 26 Sep 2026 17:01:02 +0000
Manifest next update: Sun 27 Sep 2026 17:01:02 +0000
Files and hashes: 1: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: OkzgYUMcZFLl/QizqSkRyrx1513CNaxNVRY8NfyJxmc=)
2: mf0gWWT9tDUujC29k27IpTbJ344.roa (hash: CIBQigWs2TocsqchNE4I1RZtMQ3hnsC16oL8fK2cCdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:a9:c4:ba:38:c4:e0:d7:b1:c6:85:4e:9e:81:c9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Validity
Not Before: Sep 26 17:01:02 2026 GMT
Not After : Sep 27 17:01:02 2026 GMT
Subject: CN=0dee22d3903212089a8ef775039e580109309283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:56:4a:10:52:60:a1:01:fc:42:2f:8a:c2:
fc:35:43:86:71:61:d4:e0:82:da:2f:fb:6b:8b:14:
95:83:1f:1b:d4:c9:44:c1:11:e7:73:76:19:08:97:
3e:67:1d:c6:08:b3:21:f9:8e:fb:64:a7:60:b7:ea:
8d:4f:68:ae:c9:44:d7:3a:6e:d6:95:43:37:03:96:
c4:ac:5e:39:39:00:f5:06:c2:f7:53:13:08:c0:ae:
16:ed:49:a4:aa:d8:21:ba:73:4c:1c:9e:75:3d:df:
05:a8:1b:d5:05:1f:fe:e2:f6:b0:28:8f:57:ab:af:
bc:2b:e3:69:8b:ea:ab:4c:f6:6e:9e:8a:77:0c:df:
55:bc:c4:61:04:34:f3:23:e1:33:0c:4f:01:6e:cc:
4a:af:90:6b:e1:45:d1:a0:db:14:c1:9a:e9:52:5a:
c5:11:1e:ad:fe:f1:87:61:62:26:c3:71:af:b7:9e:
dd:ca:ef:0e:25:43:93:f4:64:38:c7:87:da:96:00:
2e:80:b3:bc:89:d5:df:85:a4:97:e6:4b:c0:71:d5:
95:fa:da:7a:d4:48:4a:91:c8:08:50:f5:5b:38:b5:
0f:15:69:9d:d9:9a:55:7f:bd:e6:92:75:8c:47:f9:
46:f3:d7:b8:1e:88:f9:35:aa:53:f3:dd:77:e7:3c:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EE:22:D3:90:32:12:08:9A:8E:F7:75:03:9E:58:01:09:30:92:83
X509v3 Authority Key Identifier:
keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:03:f2:5a:bf:f1:ee:9d:43:8f:f6:75:d2:65:61:71:f9:23:
80:fa:7a:27:d2:6a:be:7d:99:2f:aa:1c:fe:5e:b5:7a:0a:7a:
e8:a5:71:18:46:55:85:fb:a9:43:3d:9f:38:cc:6c:46:24:3d:
29:67:57:df:7b:e0:d3:be:2c:ef:66:5b:e2:72:31:1f:5b:20:
34:6d:e6:f2:7f:9d:49:d7:21:eb:94:df:2d:74:ad:8d:a3:7c:
46:e5:fd:64:24:86:dc:34:8f:e9:f9:4a:7f:5e:de:75:b2:78:
20:b2:a3:e1:d2:18:2a:c2:a3:b2:a0:89:ac:94:b6:31:cb:4c:
59:44:1b:a0:62:5c:36:ee:a8:ae:ff:30:b2:e7:e6:2c:a2:fe:
0d:12:fc:e2:8e:4c:bb:81:54:49:b7:bc:35:55:f0:5b:af:df:
e7:71:cc:16:0e:52:83:b8:8d:49:86:20:e7:f5:63:ff:3f:cc:
40:bb:61:2b:7a:17:79:8c:41:a0:c1:b9:f3:18:ba:73:c1:73:
31:f9:79:90:f8:ce:16:df:f6:b7:fa:c8:62:ac:10:1e:5b:cb:
57:6b:d3:73:82:3c:86:99:f4:46:f5:7b:05:40:e6:10:f5:c5:
64:41:18:ff:28:a1:a6:7d:5e:ec:51:21:8c:2e:da:7c:64:61:
d7:88:7f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqcS6OMTg17HGhU6egcmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjVmZTk5YmMyMjMyODg3MTE2ZmRhYzgyZDQwODJhZGJj
NmFjYjcwHhcNMjYwOTI2MTcwMTAyWhcNMjYwOTI3MTcwMTAyWjAzMTEwLwYDVQQD
EygwZGVlMjJkMzkwMzIxMjA4OWE4ZWY3NzUwMzllNTgwMTA5MzA5MjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBdWShBSYKEB/EIvisL8NUOGcWHU
4ILaL/trixSVgx8b1MlEwRHnc3YZCJc+Zx3GCLMh+Y77ZKdgt+qNT2iuyUTXOm7W
lUM3A5bErF45OQD1BsL3UxMIwK4W7UmkqtghunNMHJ51Pd8FqBvVBR/+4vawKI9X
q6+8K+Npi+qrTPZunop3DN9VvMRhBDTzI+EzDE8BbsxKr5Br4UXRoNsUwZrpUlrF
ER6t/vGHYWImw3Gvt57dyu8OJUOT9GQ4x4falgAugLO8idXfhaSX5kvAcdWV+tp6
1EhKkcgIUPVbOLUPFWmd2ZpVf73mknWMR/lG89e4Hoj5NapT89135zxdVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3uItOQMhIImo73dQOeWAEJMJKDMB8GA1UdIwQY
MBaAFFD1/pm8IjKIcRb9rILUCCrbxqy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83N2ZhMmEtMTNmYy00ZGE2LWFlYmIt
NzQ1NmY0MzBjM2YxLzEvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83N2ZhMmEtMTNmYy00ZGE2LWFlYmItNzQ1NmY0MzBjM2Yx
LzEvVVBYLW1id2lNb2h4RnYyc2d0UUlLdHZHckxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAPyWr/x
7p1Dj/Z10mVhcfkjgPp6J9Jqvn2ZL6oc/l61egp66KVxGEZVhfupQz2fOMxsRiQ9
KWdX33vg074s72Zb4nIxH1sgNG3m8n+dSdch65TfLXStjaN8RuX9ZCSG3DSP6flK
f17edbJ4ILKj4dIYKsKjsqCJrJS2MctMWUQboGJcNu6orv8wsufmLKL+DRL84o5M
u4FUSbe8NVXwW6/f53HMFg5Sg7iNSYYg5/Vj/z/MQLthK3oXeYxBoMG58xi6c8Fz
Mfl5kPjOFt/2t/rIYqwQHlvLV2vTc4I8hpn0RvV7BUDmEPXFZEEY/yihpn1e7FEh
jC7afGRh14h/PA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:22:42 2026 by rpki-client