Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
File: UtIFkjNg-Ly7PG8regneiX4hEuk.mft (raw, json)
Hash identifier: hMg3YIt4mB8A0L243tFdnmZ8ia/yu352vQmGRS3kQqE=
Subject key identifier: 1B:8E:E5:56:0E:F5:B6:73:72:1D:83:F2:48:14:72:EF:1F:CE:DF:96
Authority key identifier: 52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
Certificate issuer: /CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Certificate serial: 01A1901E40E692988B1160D71E30B61C129A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
Manifest number: AC
Signing time: Sat 31 Oct 2026 04:01:03 +0000
Manifest this update: Sat 31 Oct 2026 04:01:03 +0000
Manifest next update: Sun 01 Nov 2026 04:01:03 +0000
Files and hashes: 1: UtIFkjNg-Ly7PG8regneiX4hEuk.crl (hash: pji6bhAqjxTvpO41qy/fWctqaZErqu1zi05Pmmb2QLE=)
2: g6yrvOBeW6EKsF6uPz4qtt_DajI.roa (hash: /eXlPUvaL86WUGYjsxXCQYyeVUT9/VSJoeS28C++a+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:1e:40:e6:92:98:8b:11:60:d7:1e:30:b6:1c:12:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Validity
Not Before: Oct 31 04:01:03 2026 GMT
Not After : Nov 1 04:01:03 2026 GMT
Subject: CN=1b8ee5560ef5b673721d83f2481472ef1fcedf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:35:60:4f:ff:f5:ce:4b:af:c1:46:a9:1b:
18:38:b1:11:6f:2a:79:46:56:d0:df:be:19:34:0e:
59:fd:5e:a0:6a:d1:45:8a:e6:07:65:7c:f6:b4:0a:
a5:79:d7:f4:35:51:81:83:0d:47:6e:d9:4b:73:35:
e2:44:25:2d:3f:37:d8:4a:10:33:da:4d:e9:4f:e6:
fc:c7:bd:0a:ad:64:77:95:97:66:d4:a6:14:fa:01:
5f:0b:af:17:af:c7:d8:12:72:89:bf:fc:90:10:17:
50:b5:1f:d6:73:0b:87:09:00:22:a3:6c:ad:63:e8:
24:74:4e:a1:50:76:5d:71:6f:40:c3:d4:87:a2:74:
af:43:eb:53:ba:e8:92:95:bb:f9:6c:f8:c9:66:64:
d5:75:3b:18:ba:e8:de:f6:bb:a7:d2:1d:5c:46:be:
ea:e5:a2:63:ec:f2:44:a1:51:cf:32:95:c5:7c:14:
25:46:db:8c:d4:6a:ad:22:0c:9e:55:02:6d:37:ff:
99:b6:1f:9b:91:8b:22:90:87:7a:01:bd:72:45:a7:
07:9e:0b:f5:7d:76:7d:5e:5b:00:cd:e7:be:2c:6e:
e3:bd:3e:03:2f:02:99:e7:18:a4:0c:ad:0a:23:34:
22:c9:c4:c2:90:66:6f:37:76:17:99:4b:d1:ed:02:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8E:E5:56:0E:F5:B6:73:72:1D:83:F2:48:14:72:EF:1F:CE:DF:96
X509v3 Authority Key Identifier:
keyid:52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:e2:c0:36:5c:16:c8:6d:2e:b6:b7:57:fe:0b:5b:d4:1d:
12:96:3e:7f:db:79:f9:16:bb:f8:7d:6b:96:c7:ac:60:f8:2e:
2b:b9:3a:e0:5d:1c:7f:71:ec:82:a9:a0:91:81:60:0b:37:87:
ab:40:44:e5:2e:7f:8f:e9:a5:9e:ae:91:a8:ed:8a:13:56:94:
e9:cf:a3:e7:61:5e:0e:97:7c:a0:b0:3e:27:ad:97:97:22:ce:
4a:77:0f:66:97:9d:9f:3b:9a:a3:18:20:68:66:be:ee:1c:92:
2a:a0:ed:13:38:6c:40:36:33:7e:3d:22:86:3c:c9:f3:9d:67:
75:a7:9d:9e:05:fb:a1:a2:ec:23:ca:b8:8c:a0:17:0d:c3:9c:
e7:c3:94:8d:fa:59:68:15:28:0a:72:1c:46:41:21:f2:e3:19:
f3:73:68:a7:d6:a5:9f:84:69:63:2b:e6:17:29:ac:67:49:6e:
25:cb:81:88:b7:16:9b:ff:d2:7c:fe:a5:62:0d:18:0e:78:55:
db:02:f3:ad:7a:f2:7f:cc:93:12:3b:6a:5e:cd:e8:30:05:92:
20:03:fd:58:3b:d3:cd:b9:1f:7a:12:d9:1c:11:f5:45:1c:a2:
50:ff:fd:65:9a:0b:57:93:c5:96:3d:95:54:21:1f:da:c5:f5:
bd:af:26:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:56 2026 by rpki-client