Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: PoPTcO7EXLXVVhTMPjKAsl1iAR2AjvIe8uG+0qlmmC4=
Subject key identifier: D7:7F:E3:EC:E3:E8:C4:F6:9D:1F:31:DB:31:2D:5F:48:69:4D:6A:A5
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 01A15EFA4A0C5C41D83480C873A9F0C896C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 121C
Signing time: Wed 21 Oct 2026 15:00:23 +0000
Manifest this update: Wed 21 Oct 2026 15:00:23 +0000
Manifest next update: Thu 22 Oct 2026 15:00:23 +0000
Files and hashes: 1: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: 1WRy/J6LjlRLtmu+odo6xZ1yTd6DkyZDrj4dClDfsmI=)
2: WrNQoDwnfoyel6qkeQLmIfknMe4.roa (hash: Zl9GWfOo6FfCVlawFyOWUS5iFXY5ABm6XsSvvOB7V1M=)
3: idlOCTZeLer70Tvy8HG_eFHIj_A.roa (hash: OxjINEWNa+j5OovsQN+Iq8z65GnsnPtmn9axTiZoZlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fa:4a:0c:5c:41:d8:34:80:c8:73:a9:f0:c8:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Oct 21 15:00:23 2026 GMT
Not After : Oct 22 15:00:23 2026 GMT
Subject: CN=d77fe3ece3e8c4f69d1f31db312d5f48694d6aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:c9:ca:6d:d9:c2:42:f5:86:40:8c:0d:68:
8c:f6:13:96:e6:a5:a7:b7:8e:98:33:93:8e:50:9d:
f5:c8:25:18:0d:53:38:b5:42:51:bb:83:8a:01:58:
6d:57:52:7f:5b:7a:c4:4c:bc:6b:a8:77:f3:0c:cc:
4b:4d:04:b3:8b:93:07:5a:d8:09:91:05:8b:4a:3a:
37:92:e9:7c:b7:78:69:18:2e:41:a0:06:9f:a0:ce:
a1:c1:6b:ef:04:bd:60:1b:b2:3c:49:57:01:3e:6c:
79:38:5b:b0:6d:ac:a1:b8:fa:76:9f:c7:68:41:a0:
16:05:ea:95:35:d1:9a:77:83:7b:61:63:b8:7d:42:
89:aa:86:c5:39:e9:cd:79:4b:e0:5f:3c:fd:43:1a:
e0:08:01:77:5d:34:a5:91:53:06:90:9f:c3:44:30:
4b:e2:c8:b8:e8:49:fe:21:ac:c3:94:05:85:e9:95:
02:87:b2:2f:e5:b1:a0:53:91:e2:be:3f:ed:fd:21:
5c:01:7e:e8:ea:1e:1b:02:e7:89:52:d4:ba:86:dd:
4c:b3:dd:a1:cd:d8:26:ff:e4:80:5c:57:75:bd:81:
aa:3b:c0:6d:33:8c:d5:bd:f8:73:4d:34:94:36:3c:
d9:46:ca:d6:3e:01:91:76:c3:3c:52:c5:99:57:a8:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:E3:EC:E3:E8:C4:F6:9D:1F:31:DB:31:2D:5F:48:69:4D:6A:A5
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b0:b8:d0:27:a8:de:4c:94:11:75:d4:00:5b:83:09:b7:08:
f2:f0:64:83:03:3c:74:4a:09:2a:28:c3:aa:ff:da:91:2a:0d:
fd:0b:39:21:2a:6e:2b:f2:ca:48:54:f1:6f:cf:e0:7e:33:8b:
78:80:c9:35:3e:92:59:bf:25:33:89:60:5d:20:95:ad:76:16:
94:fe:45:69:3e:16:5e:db:65:d6:eb:e9:25:ee:7a:e7:47:9c:
76:3f:75:86:e5:3f:c0:b3:46:10:78:75:9d:e1:5c:43:7b:d2:
e1:57:de:76:0e:54:ba:ab:dc:de:1c:f8:4a:f1:f5:c9:7e:30:
da:62:46:4a:4d:9f:da:c2:7b:3b:b4:93:72:1d:78:69:93:4b:
19:f0:02:0d:62:48:f0:81:e5:2e:b3:c2:f9:7d:4e:e9:4a:18:
29:53:df:83:d1:12:8b:66:3d:c7:3d:0c:05:81:f8:c1:7f:39:
5d:bf:76:2a:99:f5:58:bd:51:85:35:59:b4:15:de:5f:e5:bd:
0a:2c:79:26:df:a1:5e:87:65:1c:af:08:77:db:17:6d:67:59:
b6:52:a2:7a:d9:76:6c:74:23:f4:98:28:10:2d:04:97:7e:22:
81:8d:e3:46:2a:8e:af:ef:ee:da:66:2b:d7:b5:19:36:2e:8e:
5d:f9:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 23:49:49 2026 by rpki-client