Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: OKEeqn8jIejKAntdG/AUcStcihxvYiS3ji06KyGfBls=
Subject key identifier: 51:73:59:9A:88:71:72:F6:60:97:1C:32:2A:FD:00:45:9D:72:ED:B3
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019D3752DDCFCAD1640E55BDD79CFDD8CA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0C58
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: +a1IqVew+7BYCDlO071IrEG4CaZkSunrtMSA/1DD7A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:dd:cf:ca:d1:64:0e:55:bd:d7:9c:fd:d8:ca:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=5173599a887172f660971c322afd00459d72edb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:95:16:14:1e:20:b0:d4:45:a6:98:ee:18:
e6:77:d2:d8:23:e4:00:cc:2f:63:52:b5:49:6e:f6:
f9:c4:46:44:e6:e0:11:43:55:ff:45:b9:8d:b4:a4:
04:52:20:77:f1:27:b5:d8:5c:4d:59:c8:b0:92:63:
c0:72:0f:c8:35:ab:61:0d:14:d5:b2:d1:d8:64:18:
61:3a:98:7a:b8:e3:1f:08:d8:b0:4d:41:05:71:15:
60:6d:b8:ac:58:69:83:de:a8:25:1c:22:79:9b:c7:
5c:fa:75:f5:ab:a6:24:ba:ea:eb:0f:fd:e1:7f:df:
13:75:a7:22:b4:cb:8d:17:50:c1:f1:72:31:8d:d3:
a3:1d:b1:df:7e:e8:a0:96:86:62:30:4d:99:6f:31:
a6:e2:c7:5e:32:5d:c6:1e:01:83:24:ac:a3:4e:70:
19:dc:67:59:37:d8:f9:fd:73:0f:c9:47:cd:cb:7e:
9f:30:9d:60:54:3b:34:45:3a:c6:71:f3:53:e6:93:
c5:81:b2:a2:7d:64:b5:6b:c0:e1:ae:4e:3a:1b:d7:
88:32:ce:f9:e4:5b:08:a7:5f:7b:4e:b7:56:03:8b:
43:fb:ec:6c:75:28:ef:32:b3:e8:e1:21:5d:89:c6:
65:a3:99:d6:c6:68:e3:1a:b1:8b:fa:6d:8b:f5:16:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:59:9A:88:71:72:F6:60:97:1C:32:2A:FD:00:45:9D:72:ED:B3
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:75:88:c0:f6:56:d2:4d:96:8b:e8:f5:f1:8f:e3:12:1e:59:
fb:27:7d:f0:fb:41:fd:58:13:ec:f4:83:c9:8d:69:43:b1:c0:
a2:8e:56:04:1a:f7:31:db:73:e3:c0:1e:9e:9f:cc:49:a8:7e:
2f:2f:d3:b6:ea:14:5c:af:ee:b3:25:4c:3d:ab:f1:ca:29:4f:
4f:c8:17:62:82:2a:dd:4b:c5:a4:78:0f:35:96:78:23:00:5d:
16:7a:d8:15:5e:13:85:2c:af:b9:f0:5e:6e:c1:89:b0:0f:53:
22:08:68:a1:ae:15:23:1b:c2:cc:64:0f:70:4e:2d:a0:e3:35:
27:70:bc:85:08:a4:5b:7d:ee:d6:cb:15:95:c1:aa:ed:f4:16:
2e:f9:52:d0:e2:69:d2:66:91:de:63:fc:c5:f0:bb:db:e7:e2:
17:b2:ce:23:1d:65:b7:e6:19:5a:92:04:65:74:f7:a1:78:32:
3c:2f:59:02:9d:9b:2b:45:8a:a1:f6:6b:3f:8c:7d:c0:09:23:
53:d2:ee:71:40:d2:56:15:66:d4:27:f5:94:12:29:ee:4f:dc:
b1:8d:05:f2:53:39:92:9d:d6:f3:a1:0e:1b:9f:a9:c9:ad:b8:
b4:07:65:ba:32:39:c5:5c:02:fb:52:d2:eb:2c:d8:6e:e1:34:
14:53:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:34 2026 by rpki-client