Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: aZfBgvPBIU1/HOINhMa4IJX49QIhGpMkr2Zo3m7JVuI=
Subject key identifier: 33:BB:D6:3F:FA:6B:81:68:65:5F:F8:B6:EC:9F:FC:80:36:F6:3A:DF
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019D39AEF29C01C4DDBEDC5908E0A7A774C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0F0B
Signing time: Sun 29 Mar 2026 13:00:59 +0000
Manifest this update: Sun 29 Mar 2026 13:00:59 +0000
Manifest next update: Mon 30 Mar 2026 13:00:59 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: n/tEs5vheUrHeGXs8fwSsCUQDIADpgUyAivk9emODe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f2:9c:01:c4:dd:be:dc:59:08:e0:a7:a7:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Mar 29 13:00:59 2026 GMT
Not After : Mar 30 13:00:59 2026 GMT
Subject: CN=33bbd63ffa6b8168655ff8b6ec9ffc8036f63adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:7c:94:2e:7f:95:73:0f:3a:9b:83:8c:75:
e5:ef:b2:c2:24:fc:f3:c8:7c:29:2d:38:c9:e4:87:
85:38:0e:4d:5a:23:1d:7f:e4:c1:00:40:65:8f:be:
43:06:0a:5b:35:a0:2f:aa:b2:d8:1b:a5:a1:41:c8:
10:ae:42:25:d6:2f:24:5d:23:87:58:70:b8:74:d4:
c0:04:c9:48:40:61:58:1a:0f:ad:a9:6f:59:fe:0b:
b2:b6:69:65:cd:c5:56:0c:6d:66:d6:da:2e:fa:3e:
93:77:68:8f:26:01:b9:d2:ce:b6:aa:19:9f:77:77:
c3:30:73:32:95:46:cc:ac:21:9b:3f:0b:1d:10:8b:
9f:8e:db:5d:78:db:f1:7d:67:fd:96:9c:94:1a:64:
2f:97:8b:70:47:c2:b2:e0:67:01:a6:1c:d7:dc:b9:
ca:cf:ad:76:fa:24:4b:3d:2a:14:18:e9:ac:5b:1c:
89:7c:e2:1b:00:40:bd:19:21:3c:9c:1a:ab:b8:59:
d6:5f:1a:7a:35:8c:6e:9c:34:3f:8c:88:5c:18:f3:
41:4e:2c:3b:1a:05:e1:b2:93:ba:9f:27:b2:3b:c9:
ff:b0:b5:3c:b8:33:b4:c0:74:0f:a4:48:da:ce:fb:
71:0c:52:36:a8:6d:7c:0b:a5:fd:cb:41:01:23:a3:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:D6:3F:FA:6B:81:68:65:5F:F8:B6:EC:9F:FC:80:36:F6:3A:DF
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:59:3c:51:0c:82:f7:89:9d:12:73:4d:38:d5:48:cd:52:
27:4e:3d:ea:6c:d5:85:ba:9a:93:bd:0b:91:4c:d3:f3:63:19:
6d:ef:3e:de:c3:91:d8:0a:14:5b:10:5c:d0:b8:7a:0b:2e:1a:
11:85:5c:16:86:e4:91:82:96:68:e7:54:40:be:e7:29:99:e7:
a7:11:50:c4:a1:68:2f:d5:cd:10:20:e8:5d:02:f4:f3:48:aa:
59:82:93:00:8d:9b:23:26:33:c2:21:2a:4c:f4:4a:3e:2f:3f:
1c:0c:ed:aa:06:e0:68:83:45:41:e5:fe:12:09:e5:b1:44:37:
3f:f2:f2:39:c3:83:cc:39:b4:1f:40:40:3c:76:12:6b:23:32:
59:66:e4:3a:fb:a5:ea:72:29:7e:37:f0:94:65:17:c0:09:e1:
77:72:c0:f3:f2:61:3d:7c:6c:39:69:97:83:33:a2:e8:2a:48:
77:16:77:92:28:fe:bf:49:90:c4:c5:1d:05:ea:f7:3d:34:c3:
3c:d9:11:e1:e1:76:ac:b2:44:b3:bd:f6:ff:7c:2c:03:f4:a6:
0f:6f:0b:4d:da:7b:6b:74:80:6d:c7:75:9b:26:f0:74:e7:44:
5d:09:ed:6f:b4:ec:1d:90:d9:d2:68:22:71:49:40:3d:ea:94:
ee:76:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:20 2026 by rpki-client