Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: t4pTM9Y6IObPKrQukjtpvIJhCiV4ChHRr779LP2EAPs=
Subject key identifier: 42:8E:B8:A4:CF:D8:74:DB:FB:0E:2D:EF:6F:09:49:70:04:8B:4B:80
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 01A0890C6DD8D5FC37AA5835A0D785A1F656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: 03D6
Signing time: Thu 10 Sep 2026 02:01:28 +0000
Manifest this update: Thu 10 Sep 2026 02:01:28 +0000
Manifest next update: Fri 11 Sep 2026 02:01:28 +0000
Files and hashes: 1: RXH1E0juuTjk09gdd34VSaLqezE.roa (hash: DZRkuPFfVpgIXoaL3urk2cfBtZs5W6fdoPmvj+H+iwE=)
2: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: UXQCo+V3EIwtl6sS0aSTEIuw8H0PfmqBgizb6OTU8rc=)
3: Yo8vYPryUnuVJotyGpiBSmoKzeY.asa (hash: ZYZGB8hDEmnzNSAscPvCGLkXXklvXiM5op3rNA3iy7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:6d:d8:d5:fc:37:aa:58:35:a0:d7:85:a1:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Sep 10 02:01:28 2026 GMT
Not After : Sep 11 02:01:28 2026 GMT
Subject: CN=428eb8a4cfd874dbfb0e2def6f094970048b4b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:7b:3d:d2:22:9a:11:98:90:33:3a:34:60:
fb:7d:5a:ab:44:e1:41:d3:f4:77:06:46:1c:fa:f7:
65:7d:47:94:1e:d1:e8:ba:35:b9:f9:08:2e:1f:88:
05:21:97:aa:a0:7a:d8:6c:dc:84:74:39:50:89:38:
d5:f5:0b:d9:49:d4:b4:d2:af:9d:19:0e:8e:da:8a:
93:16:9d:87:05:e8:37:e5:f4:54:dc:65:0f:fd:eb:
09:00:f8:31:77:b3:6f:a0:fd:d4:27:b6:6f:e6:13:
76:50:5e:ba:d7:bf:85:8a:6f:69:d6:d8:f7:19:65:
f0:46:e9:26:cd:7b:f3:53:13:f3:77:ae:6c:2a:6f:
f0:7a:1d:7b:ac:bc:7b:25:a9:dd:69:4c:20:f7:32:
e2:81:a3:43:17:8b:1a:84:61:af:ec:e0:9c:26:e9:
9c:95:0e:9e:bd:92:5b:1b:72:46:a1:7c:1e:82:fb:
0b:5d:b4:7a:24:f6:46:99:16:74:ec:c8:51:ea:e7:
ba:d4:96:44:52:4b:43:65:31:ee:28:31:21:74:c6:
39:5b:ba:d0:f1:f1:d8:8e:47:0f:9b:eb:a5:71:13:
d5:3a:a2:5f:78:91:20:96:9e:0c:ae:96:01:e2:51:
d0:b3:a4:7f:c4:28:a3:44:3b:48:b7:28:3b:0e:31:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:B8:A4:CF:D8:74:DB:FB:0E:2D:EF:6F:09:49:70:04:8B:4B:80
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ba:28:ad:23:5d:41:d6:01:4b:03:b6:79:b1:83:e3:23:f0:
1b:63:3a:2a:8f:08:07:d7:75:fd:cd:3d:50:e3:c8:84:97:dc:
c1:c0:4c:d0:fb:c9:12:93:35:49:e8:74:7c:31:a7:6a:25:25:
62:d8:23:2b:c5:63:df:e7:6a:b1:06:1b:6d:f3:4c:37:cf:9b:
a3:26:f6:39:0b:ad:dd:d4:b5:ea:97:db:23:4b:4a:5b:0b:14:
b3:6a:33:43:b4:29:dd:c4:07:6d:43:2f:ec:5c:02:72:4e:d8:
d7:5d:88:25:1c:49:5f:17:96:84:1a:c4:21:7a:e0:17:e5:35:
ed:7a:23:37:62:bf:52:a3:9f:5e:2d:d2:0b:76:86:5d:6b:d0:
91:ee:9f:18:54:02:26:af:55:17:3e:66:35:f3:7e:72:82:25:
f9:8f:ea:67:1d:ed:59:c1:6a:e8:b0:a8:91:4d:3a:36:af:16:
95:e3:cc:74:a6:56:c7:59:73:6d:49:ff:da:d8:e0:dc:60:9a:
c1:73:a7:0b:49:9f:ce:27:15:2e:87:b6:45:86:cf:7a:b6:43:
6a:ff:37:15:e2:3b:2a:3b:35:22:d9:06:7d:19:13:e9:54:51:
19:5a:bd:0c:b7:b5:5b:a2:77:73:f5:93:e1:a0:7f:32:3b:d0:
29:dd:0f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:32:23 2026 by rpki-client