Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: udB91xWEDnRtsvBu+klzcwW3xoFMlyZfX4rTTF+AGjk=
Subject key identifier: 18:EC:19:79:72:DC:09:C0:F1:94:9B:F4:B3:4D:DB:2D:D4:AD:73:37
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 019CE591C799FCEE22A134C864708C5E5961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 04AD
Signing time: Fri 13 Mar 2026 05:01:01 +0000
Manifest this update: Fri 13 Mar 2026 05:01:01 +0000
Manifest next update: Sat 14 Mar 2026 05:01:01 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: E/9MaHEVoaCtEsGoWbRtAPNb6UGAPNh84xX9OCAEGns=)
2: xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa (hash: 87G44kYU+NhJk4PPN1w3dfZMV/JFeh7+LhgClnnb7tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:c7:99:fc:ee:22:a1:34:c8:64:70:8c:5e:59:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Mar 13 05:01:01 2026 GMT
Not After : Mar 14 05:01:01 2026 GMT
Subject: CN=18ec197972dc09c0f1949bf4b34ddb2dd4ad7337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:de:b5:dc:7b:18:ea:b6:53:f0:b8:ce:ec:
4d:29:d3:a3:48:be:f8:7f:b2:93:f9:9e:9a:2a:2a:
65:2b:d8:99:1a:06:29:61:96:f4:1a:fa:2e:1f:e6:
b8:45:d3:f4:1d:7f:ef:02:54:06:ee:98:af:ff:d6:
90:ca:01:cf:9e:4a:06:fd:c7:bf:76:db:14:f1:5c:
fc:10:29:48:2a:f9:f9:e4:16:3c:97:72:fb:48:51:
57:bc:3b:09:88:09:b9:fe:f0:cc:47:4b:a0:f7:f5:
ca:b6:93:7e:35:55:ba:92:18:71:fa:ec:ce:14:11:
41:2a:34:a3:ad:3e:ae:13:d4:59:66:4b:13:96:4a:
13:97:1b:76:ed:57:bf:cb:6e:3f:5d:9c:ae:f1:9c:
67:58:1a:55:d5:06:e6:ce:10:00:98:9a:3c:65:06:
40:81:a9:d6:4b:45:2b:9b:89:da:16:9a:d2:e5:8e:
41:db:47:51:78:e6:6b:73:33:0d:0c:a1:2a:9c:ed:
bb:2c:10:f7:21:bc:e4:2c:fc:7b:a2:99:ab:70:04:
ea:d5:02:c0:b5:04:5a:90:a8:fb:80:be:29:51:5b:
49:ea:da:c1:76:82:6c:96:e9:e5:28:1e:47:9d:ae:
36:b3:b5:87:9f:99:83:d4:27:2b:57:84:19:45:c2:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:19:79:72:DC:09:C0:F1:94:9B:F4:B3:4D:DB:2D:D4:AD:73:37
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:31:2c:48:ba:59:8e:5c:10:fc:fb:e1:68:82:67:7d:a4:
d4:84:98:4e:2c:5e:8f:72:56:3c:4c:6e:6f:3c:3c:43:f3:5b:
c5:47:ed:3f:2e:46:75:4d:6e:16:3d:6d:42:b7:e2:f1:a1:7c:
c1:ec:7b:b6:66:7d:0b:be:82:8a:92:46:0f:9d:67:dc:6f:70:
68:b9:9d:61:dd:5b:b3:80:04:15:65:00:3f:b5:2d:5c:bc:21:
20:74:fc:42:12:45:0e:36:2a:ce:51:2b:53:20:f0:f1:58:83:
71:0f:5b:b9:4f:6d:dc:0f:ec:70:f8:bc:9b:32:88:41:eb:ff:
66:ed:a4:71:dd:d2:3e:17:db:f3:50:b3:bc:cf:6b:f9:f4:38:
63:0a:68:d5:4e:f1:f2:99:92:34:d9:77:4a:92:17:00:34:e5:
1c:94:fb:06:ee:04:42:05:f0:7a:b1:cb:38:1a:de:7d:af:49:
e7:15:69:a8:c3:66:50:0d:53:9d:b1:85:51:4a:99:38:0f:f6:
5e:6a:29:96:02:81:b3:7c:a1:d9:59:d4:d1:a6:d9:0a:1b:f5:
ab:68:b4:6d:61:e5:41:ea:ee:65:4e:c1:a2:89:09:e6:7c:9b:
be:52:02:3f:d0:f5:12:f1:a5:54:dc:40:74:f0:37:08:1a:68:
63:56:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:20:31 2026 by rpki-client