Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: nNW13zAPtDXAyknDon9nnjC52CxhZ8jzLKE0gqUNEfo=
Subject key identifier: F0:A3:BB:6C:12:67:AF:11:B8:1F:5D:71:24:C8:F4:42:99:B2:30:52
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019EB5B35248DE2A1E7F455D2823A6CF6C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0D1E
Signing time: Thu 11 Jun 2026 08:01:28 +0000
Manifest this update: Thu 11 Jun 2026 08:01:28 +0000
Manifest next update: Fri 12 Jun 2026 08:01:28 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: M6xd1+tgK/jwpZqIjwmFcLpdJUyUo08s2d0gUZqhbBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b3:52:48:de:2a:1e:7f:45:5d:28:23:a6:cf:6c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jun 11 08:01:28 2026 GMT
Not After : Jun 12 08:01:28 2026 GMT
Subject: CN=f0a3bb6c1267af11b81f5d7124c8f44299b23052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:ec:60:f2:f2:44:ec:68:f4:0e:f8:28:92:
02:ae:9e:e6:48:81:f5:bd:7c:13:82:5d:9c:88:a7:
36:75:28:a7:fa:e9:d9:12:3f:33:c4:62:7f:2c:c1:
f3:59:fd:97:b3:ec:3b:89:87:20:ee:05:f5:9b:4f:
9d:9f:5c:ed:78:1f:20:e2:c9:16:ed:10:76:8d:08:
9a:2f:fd:be:c5:69:b5:0a:94:a7:0f:65:7e:40:39:
0e:96:16:5d:f4:33:8e:b1:08:08:19:29:7b:06:e0:
7a:2f:7c:ed:16:27:ef:d3:78:1e:ff:34:07:f0:d4:
ef:cf:ce:f1:f6:48:c4:00:d7:69:50:32:28:77:e5:
32:56:7a:ce:e1:10:1c:d4:7a:f6:7e:a9:1a:39:ac:
9b:2d:90:0e:6b:91:a5:16:65:f1:08:fd:f6:13:d4:
cc:e4:f0:c9:86:39:e0:c7:7f:14:50:70:8e:16:60:
5c:c2:de:b3:d5:67:f4:26:5b:04:ce:71:0d:98:8e:
44:1b:8a:75:92:e7:df:b4:1b:ed:79:a5:a8:1d:c0:
e2:3a:2f:89:e6:b7:28:6b:90:e5:db:bd:df:c2:cc:
fe:8e:81:62:40:59:90:6a:33:5b:7f:ad:98:b6:9f:
f2:ac:e8:46:71:8b:5b:77:b0:db:28:42:30:82:46:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:BB:6C:12:67:AF:11:B8:1F:5D:71:24:C8:F4:42:99:B2:30:52
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4d:7f:32:e8:a5:cb:66:97:d4:91:0e:22:75:ef:91:19:0d:
b1:4f:33:cc:7a:06:22:ae:6c:48:25:b5:31:e7:b3:e4:9d:bc:
c8:49:a6:94:58:18:9c:69:68:de:22:28:fd:fb:03:7b:12:ac:
10:c3:72:4e:96:5c:9f:0c:bf:07:71:eb:b6:6a:7b:b1:52:16:
bd:d0:e7:cc:c7:15:95:3e:c1:6a:25:c8:34:f9:c0:0a:a1:cb:
04:22:88:95:21:40:89:fa:b6:47:46:0b:fa:6f:44:d5:e5:12:
2f:a5:0a:be:c4:63:f7:92:08:e1:a4:5a:33:15:e8:bc:9e:e5:
df:e2:56:4d:82:fe:4e:38:b7:3f:80:25:be:d1:9e:1a:4a:85:
a4:cd:ab:dc:f9:76:76:15:e8:8a:42:de:5b:d2:4a:25:08:b9:
af:63:d3:fc:2d:c6:6e:b5:ed:3e:20:c1:77:80:c5:f4:5f:1c:
52:0a:bb:11:7f:c6:da:0f:53:35:61:eb:36:16:b1:48:9e:8a:
f3:41:ae:a0:9a:74:3b:9e:e0:23:0e:fc:54:a0:3b:b6:c2:8e:
4b:5c:af:d8:f7:d4:02:9e:e5:10:3f:78:23:06:48:b1:19:c7:
7d:93:2b:40:70:aa:3b:31:22:8a:f2:e2:9a:35:58:2c:00:c1:
16:76:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:12 2026 by rpki-client