Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: o+DD0t5yLC0SKindNKOwAIEQakfWaWUAHtSLXd6qpC4=
Subject key identifier: AD:41:D5:9F:6C:CC:93:D7:53:32:86:3B:E0:51:8E:DA:34:DA:28:AF
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 019D37F794AF8F26925A58B1C46AFF66D745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: 02E5
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: GjtiA0E9S4pBxZydLJni4jMG7vw.roa (hash: XqhpEYwDihcxsf+WmDyde0ztzBoHTuaJNOIOGqBKgxU=)
2: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: 60RNUUVLmrztlhuMYzDthJlgQF8LFrgueYbxokpwULs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:94:af:8f:26:92:5a:58:b1:c4:6a:ff:66:d7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=ad41d59f6ccc93d75332863be0518eda34da28af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:04:48:f0:30:ec:57:d8:45:cc:77:a0:8c:
50:82:ac:ee:7d:05:ba:01:2b:4f:67:3f:0d:65:dc:
a1:f7:eb:63:56:86:94:57:ee:ef:5b:9d:36:82:46:
a4:ca:12:34:91:51:ac:6c:0c:3e:8b:e9:47:4a:ca:
32:3a:fc:97:dd:45:5a:80:15:a0:d1:8a:22:96:f9:
d9:ce:08:05:de:94:77:fe:11:ce:9a:6b:59:a4:f2:
52:34:28:1d:e4:f8:f7:28:06:8d:e2:88:6e:3b:1e:
6a:3f:de:c5:e8:b2:7b:4e:68:70:30:c5:03:6d:a3:
92:44:61:23:e6:04:7a:1d:cf:38:4c:a9:47:b3:00:
da:4a:bc:ae:7a:f4:29:bd:19:88:bd:56:90:36:8b:
c7:29:36:2a:5a:cc:44:fb:96:4a:f9:95:3a:74:e6:
7c:f7:9d:72:bc:7f:56:39:0a:17:1c:2b:ef:af:f6:
00:02:13:df:8f:77:be:6f:1b:12:38:78:52:b6:84:
d7:3b:a7:a3:69:cb:fa:44:6d:39:e8:2d:45:fd:94:
7b:ca:b5:b6:4a:d1:7f:5f:2d:72:d9:a2:9a:b0:8f:
11:15:fa:0c:c9:16:e9:fc:df:c7:7b:db:65:da:63:
6a:76:df:63:22:a7:ff:f3:bd:6d:0b:ac:da:49:79:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:D5:9F:6C:CC:93:D7:53:32:86:3B:E0:51:8E:DA:34:DA:28:AF
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cd:e9:a2:3e:d1:2f:a1:2d:e5:81:0d:d6:95:d4:98:4c:e9:
96:88:f3:7b:04:7f:67:44:32:4b:dc:f7:23:c1:0c:ed:5e:2d:
11:12:dc:91:39:0d:5b:1e:70:04:f1:e0:c9:2c:93:8a:36:3b:
ca:a4:d6:c4:3b:d0:d5:25:61:88:df:7a:9e:b4:e4:f1:68:7b:
3a:5d:21:31:10:f1:24:6b:09:79:73:15:84:d0:ce:72:c3:02:
fc:f1:8b:70:52:a1:5a:f5:84:1d:58:db:a3:af:ad:11:1e:aa:
f8:5a:93:39:5b:13:c4:d1:c5:30:40:a8:76:75:d9:0b:30:c7:
8f:34:cd:1a:ca:b6:af:52:94:be:f6:53:cb:bc:c5:87:50:4c:
12:60:4b:23:1f:0e:17:f1:05:72:fe:1a:af:e0:76:d6:e8:4d:
ea:24:86:ab:64:10:f1:98:38:61:50:5f:a6:b4:06:23:c7:d6:
d6:36:90:79:20:5b:e9:22:e8:5d:58:34:9b:2b:ba:39:af:be:
b1:41:59:6d:ca:77:a2:0a:fa:72:7a:b2:00:0e:73:ba:34:ba:
56:55:0d:0e:96:11:a4:fb:15:5d:5b:d5:a0:07:75:52:28:97:
45:9d:13:65:9b:0e:14:21:0b:a4:21:35:59:67:01:48:0b:ea:
a5:64:60:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0395SvjyaSWlixxGr/ZtdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDAwNDYzMjBiZDJiMzEzNzQyOGI5OWNjYzM0YjE4NGEw
NmFjYWEwHhcNMjYwMzI5MDUwMTA1WhcNMjYwMzMwMDUwMTA1WjAzMTEwLwYDVQQD
EyhhZDQxZDU5ZjZjY2M5M2Q3NTMzMjg2M2JlMDUxOGVkYTM0ZGEyOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsAESPAw7FfYRcx3oIxQgqzufQW6
AStPZz8NZdyh9+tjVoaUV+7vW502gkakyhI0kVGsbAw+i+lHSsoyOvyX3UVagBWg
0YoilvnZzggF3pR3/hHOmmtZpPJSNCgd5Pj3KAaN4ohuOx5qP97F6LJ7TmhwMMUD
baOSRGEj5gR6Hc84TKlHswDaSryuevQpvRmIvVaQNovHKTYqWsxE+5ZK+ZU6dOZ8
951yvH9WOQoXHCvvr/YAAhPfj3e+bxsSOHhStoTXO6ejacv6RG056C1F/ZR7yrW2
StF/Xy1y2aKasI8RFfoMyRbp/N/He9tl2mNqdt9jIqf/871tC6zaSXkTpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1B1Z9szJPXUzKGO+BRjto02iivMB8GA1UdIwQY
MBaAFFLQBGMgvSsxN0KLmczDSxhKBqyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgt
MzBkNGM1NzI5MTQ2LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgtMzBkNGM1NzI5MTQ2
LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT83poj7R
L6Et5YEN1pXUmEzplojzewR/Z0QyS9z3I8EM7V4tERLckTkNWx5wBPHgySyTijY7
yqTWxDvQ1SVhiN96nrTk8Wh7Ol0hMRDxJGsJeXMVhNDOcsMC/PGLcFKhWvWEHVjb
o6+tER6q+FqTOVsTxNHFMECodnXZCzDHjzTNGsq2r1KUvvZTy7zFh1BMEmBLIx8O
F/EFcv4ar+B21uhN6iSGq2QQ8Zg4YVBfprQGI8fW1jaQeSBb6SLoXVg0myu6Oa++
sUFZbcp3ogr6cnqyAA5zujS6VlUNDpYRpPsVXVvVoAd1UiiXRZ0TZZsOFCELpCE1
WWcBSAvqpWRgCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:38 2026 by rpki-client