Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: IOZT0ja7thWak+2MWxjLspxmVIdcl4Ya5G28LLOCuy8=
Subject key identifier: 2C:51:DD:11:A8:20:7E:7D:CC:29:AC:1B:59:6A:D2:94:52:C3:79:99
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 019E322A41D496D124D2460AB7B31E28D1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 16ED
Signing time: Sat 16 May 2026 19:01:30 +0000
Manifest this update: Sat 16 May 2026 19:01:30 +0000
Manifest next update: Sun 17 May 2026 19:01:30 +0000
Files and hashes: 1: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: +EnkRcT/75I7ha6Fop20yZlo+SxIPPpY/JuDfyThGcI=)
2: eFoLkSuYHSfJyZWDzIUZu8IRO1o.roa (hash: dD85celI+xdv/VzLzNSyQVejNzZ7b5z/nWIX6tyr6xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:41:d4:96:d1:24:d2:46:0a:b7:b3:1e:28:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: May 16 19:01:30 2026 GMT
Not After : May 17 19:01:30 2026 GMT
Subject: CN=2c51dd11a8207e7dcc29ac1b596ad29452c37999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:98:07:88:c4:30:24:c9:67:ab:5c:8f:70:
f4:6f:3a:4c:07:29:d9:0f:03:1d:04:17:14:0a:84:
d3:da:85:c6:67:5a:f0:e7:df:2f:5d:06:43:a7:11:
71:4b:82:13:74:8e:e8:88:49:65:2e:40:af:6a:89:
28:11:d8:3e:e3:2f:6a:57:df:de:26:39:c6:69:c3:
9d:0e:c1:07:79:56:ab:c6:5e:ff:26:f3:a9:7f:e5:
da:c5:83:3e:0b:e8:a1:58:50:26:b6:44:7d:ad:6e:
be:65:99:6a:07:dc:e5:1d:40:7e:d7:9e:c7:0f:3b:
71:25:56:37:6f:c3:26:c1:8b:89:5d:2d:f9:6e:cc:
c2:9e:e7:48:9d:cc:3d:bd:ac:d5:77:66:63:77:44:
53:de:0d:8b:ef:2f:c8:45:af:f4:68:01:c5:c8:32:
e6:06:6b:a5:10:36:6b:30:23:1e:32:b6:18:a1:5d:
cd:06:f2:4f:05:af:70:d0:7c:99:44:42:ce:23:5c:
f4:92:e3:56:0b:25:94:bf:9d:23:70:60:99:42:41:
7b:f1:08:df:50:02:e8:0e:bb:14:17:9c:d9:51:b2:
d8:c3:ea:37:60:cd:f9:9e:3d:5b:4b:a8:b2:aa:ab:
0e:8c:c2:9e:1f:b0:ac:53:10:e3:b5:df:da:ec:c4:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:DD:11:A8:20:7E:7D:CC:29:AC:1B:59:6A:D2:94:52:C3:79:99
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:ff:99:35:2a:c0:1e:69:0f:16:f9:36:0e:2c:5e:48:d4:
45:54:a6:08:d3:62:d0:6e:c5:5d:ad:b4:34:8d:1c:4b:47:53:
66:69:e4:65:4b:81:37:68:f9:4f:1a:51:8f:71:d6:26:45:0f:
4b:28:2c:37:24:7f:a0:c6:53:35:eb:37:e1:20:09:cf:09:e5:
1d:23:89:fa:e1:4e:b8:5c:24:bf:e3:67:da:43:b6:0f:64:8b:
41:13:9b:66:9d:5f:2a:d4:54:70:d8:fe:d9:e2:c5:2a:1a:30:
dc:ab:4b:f3:e2:4e:28:1a:80:ee:a9:40:2b:b8:c9:ad:8c:34:
95:23:e1:64:8c:2f:03:41:16:f4:84:52:43:78:1e:b1:e0:e6:
81:d6:ec:e5:9d:bc:85:4a:e3:cf:c6:e2:b8:a1:d3:09:4a:d2:
a8:32:4a:0e:e2:b8:39:12:a7:85:03:b2:54:37:b7:0f:14:c3:
63:08:b9:b9:fd:8b:4d:6e:85:33:82:f9:37:77:39:d9:f9:4c:
a3:0a:cb:bb:70:8d:6c:88:ad:c0:80:0e:19:a9:61:3c:46:68:
ba:65:49:83:19:28:c3:ce:06:ad:8b:37:e6:8e:f5:c1:b6:83:
51:c5:dc:07:81:10:c8:75:22:d6:a4:24:04:23:5d:ff:a2:33:
07:21:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:13 2026 by rpki-client