Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: fYwYF+Ldl+7okrSglSx+4+vvDmdhM40DDiAQgHCzarE=
Subject key identifier: 8E:F6:BD:9E:58:82:DD:71:23:CF:21:7F:3E:0D:18:5F:52:5C:2F:D4
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 019D3940819C9726CF35277DF4A39C77DC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 11:00:21 +0000
Manifest this update: Sun 29 Mar 2026 11:00:21 +0000
Manifest next update: Mon 30 Mar 2026 11:00:21 +0000
Files and hashes: 1: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: nNZEUjoyKL9kx7LENNoUrDtlRywNfG7k9hSIQCr5Dyc=)
2: RINTWQU8O-dtVLISeiowSUIg1i4.roa (hash: mr0pYPWJuxdErynFbzmieVFUznI70KYCtpeAb0gQwOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:81:9c:97:26:cf:35:27:7d:f4:a3:9c:77:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Mar 29 11:00:21 2026 GMT
Not After : Mar 30 11:00:21 2026 GMT
Subject: CN=8ef6bd9e5882dd7123cf217f3e0d185f525c2fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:30:bb:38:e7:fa:3b:65:b6:39:37:99:16:
f4:fa:11:15:79:9a:31:85:40:fa:4c:16:d0:05:4a:
e0:67:fa:a5:2b:09:34:9c:31:31:02:99:0b:94:34:
1d:78:c9:bd:56:6f:0c:0b:fd:2c:74:f0:af:1d:8a:
91:6b:1b:80:1f:d3:0e:6d:6c:8b:73:4d:22:e7:fa:
83:66:8d:0d:d2:46:cf:e6:23:81:a3:1c:07:7d:93:
c5:2a:98:91:66:7f:bd:7d:7f:c2:b8:16:91:ec:4b:
4a:6a:24:78:83:0b:8b:3c:b4:aa:e0:6a:ce:d9:92:
df:8a:d8:49:54:5c:13:25:f7:73:e0:03:3f:60:20:
65:7c:bc:1c:cf:e9:9d:52:cb:44:7f:af:9e:85:45:
f7:88:c1:78:28:43:4b:ae:9d:80:9a:a9:b2:f9:58:
7e:af:45:49:26:92:67:6d:9b:cb:04:85:6f:3b:dc:
40:85:6d:05:c6:cb:a8:30:c0:ad:52:bc:dd:a3:52:
90:92:05:6d:f1:f6:a3:99:d8:95:1f:05:c7:ec:ea:
86:1d:c5:f6:ab:83:0d:b2:22:04:15:33:88:0b:39:
42:2b:60:c1:5d:82:31:6c:9b:2e:a9:e5:c6:7e:5a:
f6:88:22:bd:dc:3c:1f:37:be:3e:4a:ca:e0:3d:0f:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:BD:9E:58:82:DD:71:23:CF:21:7F:3E:0D:18:5F:52:5C:2F:D4
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a8:f0:67:b5:be:4c:44:b1:e7:f2:a8:3b:b8:04:dc:1b:2a:
94:4f:c6:f9:6b:28:34:1b:ff:94:ab:b1:1f:f0:ef:49:2c:08:
1a:50:44:d9:23:03:57:b1:57:1a:2a:d2:e4:19:47:5a:56:bc:
6c:8b:4b:50:4d:3b:54:56:1f:25:2a:6f:0d:08:ee:24:66:43:
86:5d:41:ff:a3:71:db:8f:54:c8:6a:78:29:06:10:54:ad:52:
3d:5d:5c:aa:44:68:0a:75:6e:18:30:fc:03:87:08:a2:c4:fa:
cc:7c:ff:dc:e8:b7:fb:ed:b3:df:cc:16:dc:6d:90:1d:e7:39:
be:86:bf:74:45:e5:ba:1d:f6:c3:18:5b:10:4e:da:94:73:eb:
ce:dd:c0:f3:a7:84:9a:33:b8:a7:5b:c0:4f:c5:e4:9c:d0:9f:
31:cb:eb:d4:69:82:33:ce:ad:d1:6e:b5:5c:a5:50:e9:42:61:
17:8c:57:dd:01:d7:4b:3d:15:09:67:53:05:3b:92:1f:6c:52:
8e:bd:f2:d6:a7:33:13:4f:cd:d8:bf:89:68:c7:8d:a0:a2:03:
c0:9d:e2:4a:f9:4e:ef:b9:68:cf:b7:e4:dc:5a:22:35:82:d7:
9a:38:ed:64:38:39:0a:a2:3e:90:5e:77:e5:39:65:f5:32:18:
88:15:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:53 2026 by rpki-client