Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: PVHp8puQdKErW4UnXCJ5++rWmKA6AqovZLQgucilae8=
Subject key identifier: D4:71:87:9F:C8:CA:AD:DD:A8:7F:FD:C8:C4:B1:6F:9E:6C:2A:D4:1C
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 019EB8EAB870DC45B7B1A20552BF21BB788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 059F
Signing time: Thu 11 Jun 2026 23:00:50 +0000
Manifest this update: Thu 11 Jun 2026 23:00:50 +0000
Manifest next update: Fri 12 Jun 2026 23:00:50 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: OJQISzOtady9R1vEVxwH3UwngLtxJlroaEdOp9cJGAM=)
2: xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa (hash: 87G44kYU+NhJk4PPN1w3dfZMV/JFeh7+LhgClnnb7tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:b8:70:dc:45:b7:b1:a2:05:52:bf:21:bb:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Jun 11 23:00:50 2026 GMT
Not After : Jun 12 23:00:50 2026 GMT
Subject: CN=d471879fc8caaddda87ffdc8c4b16f9e6c2ad41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:d2:45:9b:eb:19:db:e5:b2:ad:ec:c0:e6:
8b:41:35:24:0e:7c:e4:4b:21:6b:8b:31:d0:49:4d:
59:1f:38:04:5d:55:bc:87:b7:f9:83:1b:ff:06:60:
fb:b7:8e:49:d1:8c:07:49:98:a1:3b:83:e4:42:fe:
fc:0b:57:33:50:fe:97:c6:06:cf:58:1f:7b:63:8e:
83:3b:12:5f:5b:26:28:56:65:e5:6c:35:80:a5:18:
2e:66:c8:ae:bd:29:29:dc:b7:75:fd:90:f5:93:c6:
24:48:45:4d:1c:f6:db:75:cd:a4:23:70:20:10:b4:
48:e7:4d:c0:d5:c1:65:b5:d7:15:0c:7a:12:bc:7b:
6d:a1:f2:67:40:c3:4f:b2:ec:32:59:0e:29:f0:3a:
07:51:a9:e5:85:3c:28:8d:84:6c:e5:7d:f5:fa:f3:
45:ff:eb:bd:7c:64:f4:e6:ea:79:d6:9c:75:c8:9f:
c2:dc:6f:ca:a7:26:5a:89:de:14:86:1e:40:c5:54:
6a:df:6f:7e:dc:e2:12:09:02:17:b4:82:13:12:a4:
d6:72:a3:c7:74:f7:b3:b4:8f:79:bb:44:44:fe:33:
5a:a9:40:7a:6e:e9:1b:70:06:eb:7b:48:8e:11:20:
9e:28:fb:38:69:3c:93:9e:ae:cf:e4:8b:0d:dc:c8:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:71:87:9F:C8:CA:AD:DD:A8:7F:FD:C8:C4:B1:6F:9E:6C:2A:D4:1C
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:69:62:e1:6a:02:9e:c8:17:f6:28:11:67:b4:7f:97:1c:66:
af:91:71:69:0e:d3:de:db:e6:86:44:f6:c3:33:2a:20:05:9b:
24:0a:4b:f4:29:c5:95:d0:17:55:99:98:22:f7:c5:ff:5e:18:
fc:24:4c:78:7a:61:c8:20:66:e5:db:b4:4b:71:cf:e8:ba:0c:
a4:50:aa:3e:be:16:6e:58:b8:90:b9:80:d6:43:36:9f:74:c4:
cc:a4:23:f8:3d:3e:cf:30:ef:85:98:e8:52:c0:38:05:a3:db:
3d:a8:8f:d3:47:5c:ba:15:45:f2:c9:59:b4:b6:c8:fe:ba:a0:
47:ab:6b:fb:bf:0d:ce:0e:f8:0b:9e:ee:3d:f2:7b:a4:df:b7:
1c:c1:cd:13:26:ca:ea:ac:51:37:ca:ac:85:37:d4:52:9d:1f:
48:6a:e3:c6:d5:f2:cf:e3:be:2b:aa:08:d9:4a:7e:d9:54:9f:
30:ab:61:13:a3:88:a2:e1:f2:47:f5:b1:ad:10:2e:11:9a:1a:
00:20:a3:ed:52:eb:4b:2c:d9:5f:20:28:8a:fc:d3:cc:3a:2f:
48:2e:5f:fb:1e:3e:af:7f:bf:56:be:56:ec:25:df:27:76:01:
85:85:72:27:d3:14:77:a6:5f:51:ca:10:c3:73:e2:ae:c5:d0:
c7:e9:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:07 2026 by rpki-client