Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
File: uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json)
Hash identifier: Ku8P5CVDoxDzSxsk7GnB3VDnMmkM1S+32YPstvkDIas=
Subject key identifier: FA:F7:BD:F7:C3:9B:F2:29:12:A5:0D:AB:1A:95:D6:43:01:DD:05:83
Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43
Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
Certificate serial: 019D37897F1E037B0EF9319CEE2DAE8B00AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
Manifest number: 0B40
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: OLJzyjdEnpFoCqzcRr-2whD4cZw.roa (hash: nQWtfqNzr6fa7Z+xPVeAmqrV/E7CMaeD5oxb6Sg1qY8=)
2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: lTVkZR4GFSYxaxGtAJ4eGL9WY3zU3YdgzsDeLJvAhe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7f:1e:03:7b:0e:f9:31:9c:ee:2d:ae:8b:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=faf7bdf7c39bf22912a50dab1a95d64301dd0583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:78:ef:12:af:f6:ba:4b:c1:a1:50:f3:cb:
56:8a:a9:ca:62:97:c0:cc:3c:45:00:da:fb:27:ac:
89:7b:61:1d:9a:4f:8e:80:80:0d:75:48:23:38:ea:
13:24:a7:b8:43:0f:d4:a0:8c:e1:86:d4:da:32:45:
20:ef:2e:49:ed:67:ca:db:16:db:3f:e3:1e:84:fc:
b1:a2:de:85:3d:75:bc:59:7a:09:3f:01:cf:56:b8:
7c:a5:82:36:f0:9c:7c:a3:40:53:0e:85:13:4c:76:
24:76:5f:67:e7:ef:3f:6b:e4:65:21:d7:39:9b:3a:
9b:a3:3a:d2:66:64:f3:86:18:4e:75:e9:6f:d1:e8:
7b:e5:b4:d4:75:3a:ab:58:a0:da:e7:df:77:03:91:
ad:77:ed:93:d7:b2:81:78:53:73:ce:70:28:9b:be:
78:c4:71:36:a9:ef:53:fb:b7:95:f7:1e:40:d7:e0:
82:0d:b9:70:5a:76:94:1a:aa:db:1d:ec:1a:33:53:
47:5f:12:2c:d0:45:2d:0c:90:c6:eb:d2:a4:4c:ef:
35:58:4e:46:0b:74:c3:10:89:99:6f:a9:04:7e:33:
7e:bc:88:2b:82:9a:e8:81:55:00:4c:aa:03:e9:7b:
08:ad:d0:40:2c:19:68:cb:13:cd:ba:6d:11:f7:57:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:BD:F7:C3:9B:F2:29:12:A5:0D:AB:1A:95:D6:43:01:DD:05:83
X509v3 Authority Key Identifier:
keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5d:a1:59:2a:af:12:6f:e9:6f:77:8e:c7:9b:fb:8f:4b:1b:
c9:06:a1:f8:46:60:f4:e5:a7:2f:d5:75:3e:0e:f6:15:f5:bd:
44:ed:6b:15:3e:2e:8e:f1:4e:4c:63:d2:e4:b6:a4:20:59:ca:
70:a9:4d:4e:39:61:2e:77:e3:36:bd:6a:05:ed:1d:d9:bc:91:
3b:d2:95:de:7b:51:01:1e:ed:24:7a:ab:3a:11:3f:86:a6:d0:
60:2c:1d:3f:ab:d8:6c:3c:23:24:76:67:c7:a3:47:9f:11:05:
ed:13:c2:1d:14:8d:1b:ac:bb:68:f9:a0:29:45:48:e2:d6:7e:
36:0c:96:4b:73:d1:40:74:b4:a3:46:e8:74:67:a7:93:38:53:
55:9b:64:d2:01:bf:30:0e:10:3d:4d:0c:ff:f8:45:91:36:45:
94:47:66:d3:ee:b9:46:89:97:92:4d:36:a0:e1:dd:10:6b:d9:
35:f7:57:8b:17:22:51:2c:4c:c8:33:16:90:65:8e:30:dc:ef:
9d:8c:59:39:f8:8e:bd:93:70:aa:9f:81:f4:ca:4b:78:2f:84:
37:db:25:d9:3c:59:73:70:49:eb:e9:d8:1e:d2:35:62:32:90:
5c:91:a5:86:67:56:92:1e:a7:cb:c2:5d:df:96:64:19:45:2c:
08:12:e9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iX8eA3sO+TGc7i2uiwCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2NhNmZkMDAzMjdhZWRmMWQ0ZTMyNzU1NjJjYWU3MzNi
NGU3NDMwHhcNMjYwMzI5MDMwMDUwWhcNMjYwMzMwMDMwMDUwWjAzMTEwLwYDVQQD
EyhmYWY3YmRmN2MzOWJmMjI5MTJhNTBkYWIxYTk1ZDY0MzAxZGQwNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJR47xKv9rpLwaFQ88tWiqnKYpfA
zDxFANr7J6yJe2Edmk+OgIANdUgjOOoTJKe4Qw/UoIzhhtTaMkUg7y5J7WfK2xbb
P+MehPyxot6FPXW8WXoJPwHPVrh8pYI28Jx8o0BTDoUTTHYkdl9n5+8/a+RlIdc5
mzqbozrSZmTzhhhOdelv0eh75bTUdTqrWKDa5993A5Gtd+2T17KBeFNzznAom754
xHE2qe9T+7eV9x5A1+CCDblwWnaUGqrbHewaM1NHXxIs0EUtDJDG69KkTO81WE5G
C3TDEImZb6kEfjN+vIgrgprogVUATKoD6XsIrdBALBloyxPNum0R91e0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr3vffDm/IpEqUNqxqV1kMB3QWDMB8GA1UdIwQY
MBaAFLk8pv0AMnrt8dTjJ1ViyucztOdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYt
N2U4NTlmZjQ2NTFjLzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYtN2U4NTlmZjQ2NTFj
LzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI12hWSqv
Em/pb3eOx5v7j0sbyQah+EZg9OWnL9V1Pg72FfW9RO1rFT4ujvFOTGPS5LakIFnK
cKlNTjlhLnfjNr1qBe0d2byRO9KV3ntRAR7tJHqrOhE/hqbQYCwdP6vYbDwjJHZn
x6NHnxEF7RPCHRSNG6y7aPmgKUVI4tZ+NgyWS3PRQHS0o0bodGenkzhTVZtk0gG/
MA4QPU0M//hFkTZFlEdm0+65RomXkk02oOHdEGvZNfdXixciUSxMyDMWkGWOMNzv
nYxZOfiOvZNwqp+B9MpLeC+EN9sl2TxZc3BJ6+nYHtI1YjKQXJGlhmdWkh6ny8Jd
35ZkGUUsCBLpNg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:07 2026 by rpki-client