Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: N/YGEnFUSPVhV3oYzwyDKEY78Q0oEUvrzVkUErrKu/U=
Subject key identifier: 26:CE:BA:E4:19:EC:31:59:8B:C8:CA:84:8D:C6:44:82:5F:E2:52:BB
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 019D389BFF23EA45078DC412BF692D6E9BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: 021B
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: AW9Onfg4Pbr7Em/EmhId8J63l99IatuJSlSaml4Lbl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ff:23:ea:45:07:8d:c4:12:bf:69:2d:6e:9b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=26cebae419ec31598bc8ca848dc644825fe252bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:3c:34:75:70:63:2e:6b:a1:b7:91:88:45:
68:76:34:fa:19:62:45:a0:b8:96:b8:21:40:82:38:
d5:0b:65:4b:05:61:71:6c:06:71:02:59:35:60:9c:
1c:80:8e:bb:46:57:e5:59:fd:d3:74:b2:fa:6f:3f:
2f:60:bd:2b:94:24:29:c1:92:71:ca:c5:58:00:41:
fd:99:16:ff:e7:9b:c4:9d:2c:c5:85:a2:28:65:fd:
a6:56:04:1c:5e:19:77:d1:75:08:2e:c8:12:32:1b:
58:9f:86:32:54:a8:ce:28:80:49:33:70:98:fc:20:
b5:95:7d:4d:c5:38:3e:7f:39:e2:15:13:07:8d:75:
86:91:0e:0a:1f:c1:29:eb:67:5b:9f:03:57:93:aa:
70:28:64:35:19:e3:44:1b:4c:20:5e:c5:4d:22:bb:
15:98:0e:f6:d1:cd:86:37:df:a4:69:45:d3:ac:cd:
18:89:10:c0:f7:c5:cb:62:95:52:92:1a:cc:3a:5e:
a7:f3:c3:ec:03:23:44:46:2d:e7:25:0a:ae:19:57:
e9:5b:3c:59:b7:87:23:0e:7b:f1:bf:4f:73:29:73:
03:d4:54:0b:48:67:9b:6e:61:e4:99:a6:62:b8:a6:
11:b4:5e:00:47:74:6b:60:71:17:5a:4d:20:2a:10:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CE:BA:E4:19:EC:31:59:8B:C8:CA:84:8D:C6:44:82:5F:E2:52:BB
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:73:29:1c:7e:6a:be:88:03:b6:ed:e7:15:ff:79:aa:d5:fb:
78:00:b8:2c:13:81:60:28:4e:6c:54:da:31:10:0c:69:14:bd:
b4:1c:04:21:bc:17:7b:27:3a:aa:2c:66:bc:c0:36:9e:fa:c5:
19:ce:b8:b1:29:4f:ed:fb:87:78:cf:7c:97:9d:42:65:5e:8c:
dc:e6:30:93:18:78:a5:36:97:3f:85:83:a1:24:ff:e2:98:ad:
36:07:2e:d2:1b:c2:a2:63:bf:d7:b9:c7:6d:44:bd:c2:57:2c:
ad:4f:02:02:05:ed:28:a6:2a:de:d3:d6:f4:ae:41:75:22:a6:
bd:f4:dc:9f:a5:fb:20:ad:71:51:e4:ba:4a:ad:e2:6d:40:c9:
b9:cf:7a:dc:79:32:a9:32:e0:82:04:a5:34:73:76:9c:e4:90:
cd:98:b9:03:78:b9:f9:80:12:6b:41:a1:bc:f2:a4:05:68:52:
fe:05:f7:03:ad:d2:8b:6e:99:71:0b:a1:39:da:dd:ed:0f:7b:
16:99:42:e1:82:d3:18:35:89:cf:c7:91:22:c3:5e:16:5a:18:
21:22:a2:42:2c:6a:59:a5:da:1f:48:d4:c4:30:8f:e9:cb:35:
4a:07:1d:4a:b3:4a:5a:7d:c2:27:45:e5:6f:bf:f9:9f:1f:d1:
70:ab:22:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/8j6kUHjcQSv2ktbpuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzA2ZjVmNDZkYmRiNDEzNjA0MmEyYmUzOGQwNWQyMjJh
N2M3NjEwHhcNMjYwMzI5MDgwMDQwWhcNMjYwMzMwMDgwMDQwWjAzMTEwLwYDVQQD
EygyNmNlYmFlNDE5ZWMzMTU5OGJjOGNhODQ4ZGM2NDQ4MjVmZTI1MmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAM8NHVwYy5robeRiEVodjT6GWJF
oLiWuCFAgjjVC2VLBWFxbAZxAlk1YJwcgI67RlflWf3TdLL6bz8vYL0rlCQpwZJx
ysVYAEH9mRb/55vEnSzFhaIoZf2mVgQcXhl30XUILsgSMhtYn4YyVKjOKIBJM3CY
/CC1lX1NxTg+fzniFRMHjXWGkQ4KH8Ep62dbnwNXk6pwKGQ1GeNEG0wgXsVNIrsV
mA720c2GN9+kaUXTrM0YiRDA98XLYpVSkhrMOl6n88PsAyNERi3nJQquGVfpWzxZ
t4cjDnvxv09zKXMD1FQLSGebbmHkmaZiuKYRtF4AR3RrYHEXWk0gKhDESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbOuuQZ7DFZi8jKhI3GRIJf4lK7MB8GA1UdIwQY
MBaAFFEwb19G29tBNgQqK+ONBdIip8dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRCdlgwYmIyMEUyQkNvcjQ0MEYwaUtueDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNzQzZWItYzk2ZS00OTI0LTg1ZmMt
NjBiM2E1OWM2MDc3LzEvVVRCdlgwYmIyMEUyQkNvcjQ0MEYwaUtueDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNzQzZWItYzk2ZS00OTI0LTg1ZmMtNjBiM2E1OWM2MDc3
LzEvVVRCdlgwYmIyMEUyQkNvcjQ0MEYwaUtueDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHMpHH5q
vogDtu3nFf95qtX7eAC4LBOBYChObFTaMRAMaRS9tBwEIbwXeyc6qixmvMA2nvrF
Gc64sSlP7fuHeM98l51CZV6M3OYwkxh4pTaXP4WDoST/4pitNgcu0hvComO/17nH
bUS9wlcsrU8CAgXtKKYq3tPW9K5BdSKmvfTcn6X7IK1xUeS6Sq3ibUDJuc963Hky
qTLgggSlNHN2nOSQzZi5A3i5+YASa0GhvPKkBWhS/gX3A63Si26ZcQuhOdrd7Q97
FplC4YLTGDWJz8eRIsNeFloYISKiQixqWaXaH0jUxDCP6cs1SgcdSrNKWn3CJ0Xl
b7/5nx/RcKsiXw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:59 2026 by rpki-client