Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: ZYjpFm0Vp4YV/W/IZdq3Shuib4qGzGJSU9sF9fT7WNU=
Subject key identifier: 88:16:7A:DA:F1:64:F7:36:16:16:BA:00:82:85:58:C9:08:F9:DC:47
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 019D38D39ACD33CF9DAF4E377ACBACE98653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0C04
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: 1-WJ7X3VtFf2F_SKJ8JN5dL6LQPQ.roa (hash: 8KtKxWLd7ILPUk5kKO1qDBFHYT3DcmruhjUNtg5TxvY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: JURksJ4iTo186NU4f/I2D0pynT5ScFHAbMSon9MAeDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9a:cd:33:cf:9d:af:4e:37:7a:cb:ac:e9:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=88167adaf164f7361616ba00828558c908f9dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:f5:34:11:97:fe:80:c0:8d:4d:61:51:f2:
6f:a0:f1:fe:63:08:62:15:17:09:79:1b:0e:cc:df:
2a:0a:9d:98:5f:0b:14:9c:fa:a0:c0:2f:d2:8d:86:
f2:65:14:be:cb:4c:57:2f:7f:66:51:9d:e8:2a:47:
a6:b7:52:32:65:68:85:6d:72:a8:73:55:f4:91:2c:
c6:48:2c:1c:15:5b:3f:58:a0:2f:20:f1:ee:db:c3:
6d:ea:33:93:20:f5:34:f6:7d:c4:de:bf:30:1e:c3:
fc:a5:25:60:5e:5b:b1:b2:1d:f9:6b:55:dc:8b:a1:
de:7a:9c:85:30:27:8c:9a:6f:9a:79:1e:2d:76:42:
11:1e:a4:7b:07:8d:af:70:cd:fa:cc:82:d9:c5:4f:
46:83:f8:96:cc:37:f0:3e:62:f4:61:77:96:d3:64:
a2:73:b6:a5:4a:9c:03:f5:87:e5:8c:e1:2e:08:0b:
18:55:a8:76:bb:7e:d4:f1:cf:c7:31:86:fb:f6:f8:
c4:7c:cf:21:9f:bc:80:20:77:db:a7:ad:b7:c5:77:
d7:f4:47:6b:8e:19:2b:c9:66:16:bd:e1:28:96:9b:
76:38:71:fd:2e:79:97:5a:7b:cf:d1:92:1f:68:2f:
c5:dc:49:66:28:36:67:83:69:77:f2:c2:a5:5d:a9:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:16:7A:DA:F1:64:F7:36:16:16:BA:00:82:85:58:C9:08:F9:DC:47
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cc:c9:43:8b:8d:84:13:3f:e2:e6:ba:0a:79:c5:0e:cd:02:
f2:46:73:d8:fe:a3:b1:4c:60:b1:eb:54:af:47:23:69:03:5e:
2b:2c:79:5c:6b:4f:19:07:9b:f2:5f:f9:02:22:bd:66:85:ff:
5b:45:61:e5:6a:05:1b:81:00:24:34:43:12:b3:a6:6f:30:e8:
e3:2f:5b:bf:74:fa:ba:5b:c1:a0:2e:29:59:48:d8:e8:83:bf:
12:49:a9:11:27:5c:d4:99:23:f1:29:ab:d2:c1:78:a0:93:7d:
43:c3:ac:2b:ff:bc:76:96:fe:a5:f3:8b:77:bc:73:e4:10:0f:
8f:55:b3:22:ac:58:0a:67:7a:7f:3d:3d:d2:88:c3:73:6a:47:
6d:52:89:42:ff:8c:52:28:18:54:fd:8a:63:86:58:48:14:e7:
1b:f2:4d:3e:b8:f9:5e:ac:40:1d:24:59:7b:6b:bf:03:c5:02:
fd:fd:07:15:e2:c2:84:f2:21:08:d4:96:26:0a:c1:87:d5:f7:
cb:b9:a4:56:ef:b9:b9:5e:10:62:f1:24:48:7a:8f:8e:62:12:
1c:f4:b7:bc:4d:d8:b8:e2:dc:22:65:c8:00:09:9e:04:82:a6:
a2:2c:0b:24:6a:8a:1b:e3:e9:a1:2c:93:61:c7:d8:8f:24:84:
a7:d0:8b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:31 2026 by rpki-client