Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: 3AmLXReE1s8kzoamcLx21sTvPu7U9FfoeZYtheHXVos=
Subject key identifier: EC:F5:89:E1:AE:D3:82:A7:F9:F6:A2:ED:72:82:8C:48:3F:80:A7:AB
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 01A1DEDEACD7F30EF27827FB91007295EC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: 0488
Signing time: Sun 15 Nov 2026 11:01:37 +0000
Manifest this update: Sun 15 Nov 2026 11:01:37 +0000
Manifest next update: Mon 16 Nov 2026 11:01:37 +0000
Files and hashes: 1: BZ756Uj63iEuGpwzpkmdJpyNFFU.asa (hash: g6TjnWDVTvY9Yi5LRNS5hlp+M2VYol8TpST6AfkQOpg=)
2: RXH1E0juuTjk09gdd34VSaLqezE.roa (hash: DZRkuPFfVpgIXoaL3urk2cfBtZs5W6fdoPmvj+H+iwE=)
3: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: yrpMdQ4+r1oiSgo3esVkWFYKOQt2lAkXg9VJYqFBWRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:ac:d7:f3:0e:f2:78:27:fb:91:00:72:95:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Nov 15 11:01:37 2026 GMT
Not After : Nov 16 11:01:37 2026 GMT
Subject: CN=ecf589e1aed382a7f9f6a2ed72828c483f80a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:87:e2:8d:36:33:59:20:c8:c9:69:e8:78:
4d:d8:e2:a2:c2:9e:d0:5e:cb:63:72:3e:c9:58:45:
47:66:52:b6:18:de:7b:2f:33:b3:d2:60:36:2f:0f:
08:ef:d1:5e:60:55:13:35:64:47:60:19:bc:d8:88:
2b:f5:54:ed:da:3f:1e:0c:54:5d:9b:c8:6e:59:ad:
00:2f:27:d2:89:3a:4e:61:7b:95:59:84:48:4b:49:
76:5b:1f:d2:e6:90:fb:a8:e5:15:9a:2d:8b:a2:0d:
96:5c:8e:d1:e9:51:bd:a5:a2:75:58:d3:19:48:cb:
5e:e4:2a:9a:55:27:05:98:60:cb:83:9e:90:34:c6:
ad:79:33:b4:93:ca:c4:bc:2f:4a:66:cf:90:ba:96:
b6:65:45:69:5e:1a:3e:81:95:1a:c5:8d:6b:12:51:
62:46:ed:9e:f0:f8:b1:7c:37:75:29:15:78:b5:b0:
a9:af:7e:33:00:ad:4a:14:2d:18:f1:17:97:da:3e:
44:43:ab:d7:a7:75:59:92:c4:c0:27:cc:ba:73:81:
cc:43:6c:f9:82:f7:6d:5c:11:9d:96:60:5d:9f:2a:
4e:17:05:84:f9:fd:96:bd:75:9a:8c:9d:ac:7f:7a:
1f:22:a2:17:15:18:6a:90:d8:01:2f:63:a5:77:0b:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:89:E1:AE:D3:82:A7:F9:F6:A2:ED:72:82:8C:48:3F:80:A7:AB
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:bf:bf:77:eb:ec:eb:d2:c5:ee:0f:f1:62:04:b0:28:17:
bf:0a:43:79:ed:45:01:bc:5f:cc:0a:05:79:62:a8:11:f8:38:
6b:1c:68:bf:0c:89:84:8c:a7:94:be:aa:21:17:5a:31:b3:fe:
da:d4:26:86:2c:b8:f4:94:8f:22:48:30:b7:8d:d0:69:27:81:
b9:ce:d1:cf:86:92:2a:d3:d4:34:da:5d:83:78:63:3e:29:39:
9a:bf:86:83:e3:9b:d7:94:6f:59:26:b8:35:ed:03:ee:af:51:
e3:ef:5c:c3:9a:5a:fc:15:47:3b:3e:d9:f3:ec:4d:06:d2:e1:
46:9f:00:dc:4e:5a:af:9c:95:c8:86:11:09:04:ea:ad:70:d8:
93:43:95:54:9a:8f:4f:fb:a0:5d:3e:b0:ed:97:8a:05:1f:33:
0d:2b:af:ae:17:2b:b8:b1:9f:ea:1b:17:bb:93:f9:b3:b7:b7:
67:47:b1:6d:f1:77:86:0f:d6:1a:8d:ac:77:44:44:6d:ec:97:
3e:1c:89:66:64:8d:08:1c:09:64:cf:90:8a:e7:16:79:51:7b:
fc:35:4d:74:ba:bf:a6:ed:1f:2b:e1:29:f9:6d:e8:ee:ab:27:
dd:dd:d7:f7:86:44:d4:41:a0:4d:73:e7:cd:42:28:2e:09:7d:
54:4a:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:30:48 2026 by rpki-client