Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: oiJkByshAN3nmQzrb7H16aLqil8yQrbnWWaVlgvOMak=
Subject key identifier: 4A:63:D9:9B:A7:03:D7:D0:16:E0:09:33:D2:14:73:F0:70:64:96:21
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 019D3909AB8A9E1AB6695FE9DCC6759B3371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 166C
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: w46hlOGmaTZB8HINhcI/7Q39ThGKTfRxoSrM4SUzX2g=)
2: eFoLkSuYHSfJyZWDzIUZu8IRO1o.roa (hash: dD85celI+xdv/VzLzNSyQVejNzZ7b5z/nWIX6tyr6xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ab:8a:9e:1a:b6:69:5f:e9:dc:c6:75:9b:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=4a63d99ba703d7d016e00933d21473f070649621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:c2:99:04:d7:37:29:c0:46:1f:40:2a:cf:
80:61:85:a1:eb:95:cd:f9:9e:4a:4b:8e:5e:ca:3f:
ef:cd:44:1c:d8:0b:96:bb:65:6f:7d:1c:33:c7:4f:
67:e2:73:11:3b:51:8e:50:27:db:17:ed:02:70:6e:
ad:71:0f:be:10:52:a6:a8:75:98:a3:56:27:2b:fa:
13:f7:57:4f:cd:b8:96:70:43:0d:86:37:2b:a9:ac:
9e:5e:16:2f:57:5a:d6:e1:17:14:ad:eb:b8:37:7b:
3c:92:1e:03:87:4c:16:ea:8a:a6:21:03:39:06:cf:
37:d3:c3:34:4f:f1:c6:8b:5b:58:79:8f:9a:e0:44:
09:fd:50:65:df:57:eb:1f:68:6e:c7:da:9e:e1:7f:
97:e0:fa:ca:51:47:91:8c:22:6f:b3:d1:e7:d8:69:
8d:79:1c:9e:7d:d6:39:c6:e5:74:40:29:10:76:b8:
e5:1f:06:9d:21:a7:88:44:15:0c:ee:f9:62:38:db:
9b:13:b5:25:64:0d:46:63:37:ff:3d:c1:11:97:9c:
ae:5d:c7:27:ef:bc:55:d3:a6:3c:a0:fd:31:55:bc:
2a:09:ed:3e:d2:36:d4:f9:11:b3:1b:dc:7e:40:4e:
61:47:14:b2:0b:95:f4:9e:06:83:8a:1d:c5:2e:67:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:D9:9B:A7:03:D7:D0:16:E0:09:33:D2:14:73:F0:70:64:96:21
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:62:76:1e:33:52:20:34:98:a2:2b:5d:32:61:9e:2d:5e:ce:
34:29:f5:79:97:f0:40:ed:96:9a:d5:de:af:d8:df:4d:1e:38:
f8:6e:62:67:1a:db:f9:20:26:82:8b:8b:d2:97:67:a0:38:3a:
3e:08:6a:65:28:1b:de:ff:a9:ca:f8:be:01:e6:3b:e0:8b:5d:
f1:26:01:45:6e:89:0e:2b:1f:6d:bb:84:77:57:3f:7e:3f:00:
23:61:20:c4:ba:ab:f8:ab:ec:ea:57:d6:f6:4d:7c:ed:07:a3:
03:81:36:8f:bd:ac:8e:60:f4:8a:22:7b:9c:74:6a:fc:24:98:
48:a5:98:2e:47:d6:d5:34:5f:33:11:9d:3e:70:67:cb:12:05:
a9:e4:bd:4d:bd:ed:b2:78:99:7e:c5:7a:c4:eb:83:90:0e:2e:
19:8b:08:c0:3e:ea:c9:7f:ba:ae:3c:b7:44:32:17:46:a3:61:
15:4f:a0:35:ec:c5:e3:ba:77:43:e0:c1:16:db:64:0b:4a:1a:
ad:5e:a9:f0:d8:ae:4b:4a:ff:1f:ae:08:3e:55:48:ec:76:03:
ff:46:58:60:45:3f:99:87:78:09:32:5f:14:aa:a1:c1:dd:d3:
24:7c:49:27:e9:ac:a2:42:02:d7:4c:03:43:3c:19:79:30:42:
68:d5:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:19 2026 by rpki-client