Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
File: UtIFkjNg-Ly7PG8regneiX4hEuk.mft (raw, json)
Hash identifier: 4p1MiCGF4ZOd7ez9EI3UOXT3uGin4noMrdY5xu5MIHk=
Subject key identifier: 62:4D:93:6F:56:85:DF:73:96:EE:31:A9:93:2D:C5:E0:03:CA:97:77
Authority key identifier: 52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
Certificate issuer: /CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Certificate serial: 01A0897A845CA1EC5FDDAEE29E3E958B27AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
Manifest number: 24
Signing time: Thu 10 Sep 2026 04:01:42 +0000
Manifest this update: Thu 10 Sep 2026 04:01:42 +0000
Manifest next update: Fri 11 Sep 2026 04:01:42 +0000
Files and hashes: 1: UtIFkjNg-Ly7PG8regneiX4hEuk.crl (hash: FjUhPRxEBQvGJjyOlEr84t0I17UqycuM094+lTKg+5o=)
2: g6yrvOBeW6EKsF6uPz4qtt_DajI.roa (hash: /eXlPUvaL86WUGYjsxXCQYyeVUT9/VSJoeS28C++a+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:84:5c:a1:ec:5f:dd:ae:e2:9e:3e:95:8b:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Validity
Not Before: Sep 10 04:01:42 2026 GMT
Not After : Sep 11 04:01:42 2026 GMT
Subject: CN=624d936f5685df7396ee31a9932dc5e003ca9777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:6d:bb:98:5f:a2:f6:c0:ce:a0:8a:88:fb:
eb:97:7c:20:df:81:6d:21:48:6a:a1:06:a1:dc:de:
f9:10:02:59:10:2a:e4:70:6d:0a:19:5f:48:53:0e:
af:8b:4b:fd:af:f1:d6:6a:66:0b:06:f0:6b:a5:80:
94:8e:b9:f6:dd:e6:10:b0:b7:45:b6:ce:28:96:c0:
c1:63:58:99:86:b1:42:a6:35:ae:18:59:9a:d4:a6:
46:12:a2:c8:93:22:29:d4:6b:4e:52:25:78:42:99:
3e:e3:6b:f3:be:07:89:39:3d:54:f9:53:8f:2d:63:
be:a4:b7:dc:af:08:f8:41:61:3b:88:a3:25:7c:2e:
50:5a:1e:da:7e:2d:0f:53:75:d0:ae:b2:ab:00:6d:
92:02:25:80:1b:0c:92:97:6c:85:bf:f7:e2:be:b2:
a6:87:cc:16:80:46:bd:a8:6b:6f:04:b7:e7:38:45:
84:ca:24:29:99:b4:ee:e9:4a:bc:6c:3a:82:91:09:
c4:29:d1:5d:af:63:f4:54:d9:a3:f1:f3:8e:af:d9:
36:c6:13:23:78:2b:48:57:96:5d:d8:16:e6:eb:fd:
7f:d3:f5:79:43:0a:7c:d7:4f:d6:f3:fa:e0:64:79:
3e:e6:30:3d:72:b1:75:00:bc:8e:de:22:7e:93:11:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4D:93:6F:56:85:DF:73:96:EE:31:A9:93:2D:C5:E0:03:CA:97:77
X509v3 Authority Key Identifier:
keyid:52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6c:9a:ba:47:ce:27:63:7e:2c:ad:15:f9:ca:92:57:8a:d4:
5e:20:4e:b1:67:d9:32:3d:15:70:a5:f1:6c:76:0b:57:3f:d7:
14:e6:50:15:26:c9:ac:a7:83:0d:04:05:9e:8e:93:8b:55:e3:
22:f7:53:0d:c7:2f:b0:ad:ba:31:d8:ac:2c:d8:a1:07:89:98:
27:97:e7:41:33:96:a4:88:9f:fe:96:23:f8:94:37:e1:25:6f:
29:da:d1:4f:a1:69:71:99:82:f4:c0:05:00:37:19:a5:a7:0f:
79:f9:ae:30:1c:65:91:7c:95:3b:f1:22:2c:15:48:7a:c9:26:
6e:6f:c0:d6:c8:c3:f5:14:55:db:2c:54:03:8c:ea:01:d5:61:
f9:fb:92:68:19:48:d1:0f:5c:12:43:f9:f4:a4:a8:9f:0a:8c:
aa:2c:5e:35:9b:ea:26:04:92:f4:b6:79:8f:e4:34:e8:2f:98:
19:b3:df:75:bc:76:a3:4c:cc:c5:15:95:61:34:5e:fb:1c:90:
fe:56:6c:6e:64:7d:a2:2a:51:a8:49:f8:29:22:08:51:72:3c:
16:9c:60:53:5d:41:b0:c1:e6:3e:29:4a:8d:ff:37:89:eb:5b:
5a:64:72:09:36:d8:f5:66:93:68:dc:11:a6:d9:88:66:ef:fe:
35:df:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:22 2026 by rpki-client