
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier: luPIHItlSCIDb7Wvcu7qWz5s/qT2xhllFXAuEEhwUQc=
Subject key identifier: 17:1D:BF:9A:7C:C5:AD:C0:92:FE:F1:5C:87:8C:71:76:E2:7C:22:1B
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial: 019D3909BB1413B89D42D43CC5872C26B232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number: 046A
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: VWr29fUp6t7Ddnz7gRagtmDohTw1VKrM7y9E/FnfCpE=)
2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bb:14:13:b8:9d:42:d4:3c:c5:87:2c:26:b2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=171dbf9a7cc5adc092fef15c878c7176e27c221b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:83:af:26:4d:08:e4:90:79:ab:a5:c7:c1:
04:fa:38:68:64:03:5e:bf:23:69:e8:db:19:54:00:
59:4b:96:db:23:6d:23:8c:01:8e:17:d3:35:66:09:
0e:6a:ab:ac:df:35:9d:d5:70:ba:4c:55:48:da:4d:
5a:ab:28:32:be:5c:80:22:43:56:b6:9e:e5:ad:7c:
de:32:d3:fc:b5:6b:ca:a7:77:a9:d6:1a:f3:ee:f7:
67:ca:3f:3f:22:15:fe:6d:0a:39:8e:81:ac:9b:b2:
3e:20:10:c0:f4:a8:7d:3a:c2:53:70:15:8c:66:db:
80:6e:2f:bc:c4:4f:50:fb:bf:c3:12:d6:60:b3:d9:
d8:79:c4:59:1d:cc:82:d4:43:d9:f9:55:cd:6e:0a:
b4:6f:17:fa:ac:4d:cf:86:3a:6a:36:6f:3f:10:9a:
83:5d:65:80:3f:4e:00:6d:88:88:88:de:76:2f:3e:
bb:dd:9d:1f:41:5f:e7:10:fd:48:ed:72:05:45:db:
11:63:11:df:d3:ba:9d:13:73:26:41:19:22:a4:4e:
80:66:ff:d7:f4:cf:6b:1e:e6:00:81:4b:c2:22:0e:
58:07:a9:be:fd:21:eb:6e:61:27:5f:fa:83:53:f3:
17:82:5a:95:b9:e4:59:5a:54:5a:64:7f:2f:a2:67:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1D:BF:9A:7C:C5:AD:C0:92:FE:F1:5C:87:8C:71:76:E2:7C:22:1B
X509v3 Authority Key Identifier:
keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:61:db:55:53:de:46:38:9a:2b:48:49:ef:0f:1f:0a:25:
da:5d:25:a7:e0:fa:d3:30:43:86:68:99:c1:be:00:78:73:62:
54:b2:e4:05:31:ac:4a:06:ec:01:aa:74:76:6a:cb:8f:4d:6c:
c0:97:6f:5e:9c:c9:80:bd:bb:0d:e2:78:99:77:c1:5e:c5:f5:
82:b4:f8:f6:0d:c8:cd:a8:40:d0:e2:0c:10:d7:73:d8:11:32:
19:20:81:3b:e5:17:bc:42:2f:e4:94:c7:70:a2:0e:3d:a4:d2:
21:c2:b3:89:96:a7:a1:d6:93:90:17:5e:3f:d9:15:1f:53:c7:
7a:3e:2b:fd:f4:b4:e5:c1:c0:6d:56:45:33:d4:b9:d6:0f:30:
15:9b:59:b8:73:66:48:f2:0b:92:7d:22:16:81:a3:36:f8:5f:
ed:61:0f:09:14:5a:54:b2:ec:37:8a:19:fd:06:7e:ab:07:62:
44:f4:3d:7a:78:f8:6f:d9:0c:5e:99:ad:19:8f:ee:51:8d:ca:
ee:cb:57:39:e3:f9:9a:6d:a5:bf:69:cc:51:ee:3e:aa:1b:4f:
c4:ce:d1:71:39:42:2f:ea:42:78:95:3e:be:79:97:bd:4f:7b:
3f:86:d3:d9:00:cc:34:74:04:30:f4:fb:69:56:43:fb:75:3a:
70:87:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:39 2026 by rpki-client