Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier: 9gFI/fLd28jYFfx42LiWEVzRCak3kOSEJGafLgDk0SU=
Subject key identifier: AA:FA:EC:AD:15:24:24:0B:DD:24:00:28:89:5B:C0:43:43:1D:49:DB
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial: 01A0D2378C37C776AED0FDE1D5908A6CA186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number: 0647
Signing time: Thu 24 Sep 2026 07:00:50 +0000
Manifest this update: Thu 24 Sep 2026 07:00:50 +0000
Manifest next update: Fri 25 Sep 2026 07:00:50 +0000
Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: dGZXUBB/5U5OdwM0kXV99Kg8dZjenVLm+ycnLouxXt4=)
2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:8c:37:c7:76:ae:d0:fd:e1:d5:90:8a:6c:a1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Validity
Not Before: Sep 24 07:00:50 2026 GMT
Not After : Sep 25 07:00:50 2026 GMT
Subject: CN=aafaecad1524240bdd240028895bc043431d49db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f8:db:ae:22:3c:c0:74:08:75:b4:43:ba:38:
42:4e:12:0a:25:a4:a5:f6:ef:0b:55:6e:1c:70:20:
f0:4e:0b:54:5a:0c:55:5d:37:86:59:ac:36:44:58:
32:9d:18:23:9b:87:9b:f6:74:1f:cd:21:75:0c:24:
23:87:36:55:bc:6c:8e:d0:ab:33:a1:e8:7d:3e:a3:
a1:3c:de:55:97:80:31:df:dd:36:13:c1:c4:83:0b:
73:17:ec:8c:96:cd:51:86:e1:a9:81:f0:d1:48:8e:
f3:48:6f:cc:a7:78:ce:a8:f9:40:f4:ca:e7:f0:80:
d6:ae:95:d4:db:0b:58:9d:71:71:9d:d7:42:77:91:
9f:06:a2:78:46:93:52:09:6b:73:17:5a:c7:ac:06:
27:0e:cb:92:22:74:38:dc:ab:31:03:4e:02:5d:d5:
de:d8:30:8e:39:c9:f4:58:d7:2e:28:3a:fe:e4:4a:
c9:08:fa:ca:4a:98:9c:3a:f4:83:78:42:bb:b0:9e:
87:6b:7b:c5:ae:6f:7a:a0:d0:04:b7:d1:e2:f6:8c:
84:7a:8a:06:17:f1:29:2f:19:18:8e:b2:c1:7d:a8:
f1:8e:3e:07:10:f7:00:c9:13:a6:26:03:37:1c:51:
a3:65:0e:d2:31:f9:b3:82:34:b3:1c:41:bf:0c:60:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:EC:AD:15:24:24:0B:DD:24:00:28:89:5B:C0:43:43:1D:49:DB
X509v3 Authority Key Identifier:
keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:f0:e7:ba:d3:ee:8c:54:10:08:72:f4:10:2a:7f:50:b4:
aa:93:4c:dd:f6:b7:be:10:aa:a1:31:d4:b0:c2:05:f9:3a:85:
f9:a4:c5:89:71:49:01:83:5b:bb:7e:4a:1d:d2:b8:e6:c9:ee:
73:ed:11:6a:f5:26:ce:14:74:48:10:59:c5:a1:71:89:16:79:
22:0e:6c:25:c6:10:bd:ef:d4:a4:5d:c8:2d:49:69:61:65:b2:
2b:5b:5b:62:2d:fb:b8:a9:03:6e:e9:cc:cc:1e:93:00:5a:8c:
3f:a6:c6:34:ac:ed:53:78:50:9a:a0:72:6e:65:2b:20:ea:d9:
11:28:2c:95:c9:ad:e0:74:cc:30:ba:4c:86:8e:72:a0:a5:23:
3e:df:d9:57:b3:fe:7a:ec:2e:5c:b4:25:6d:5f:ec:30:a0:4e:
53:3e:fd:2d:ed:30:6e:71:87:ea:2c:ca:80:c8:5d:27:26:1e:
71:34:71:e7:46:4f:8e:2b:cd:47:d9:3b:d1:eb:25:e3:1c:38:
ff:ed:be:20:43:80:83:2a:73:4f:af:17:4f:7a:de:9e:3a:37:
37:8a:5f:98:f5:6c:c7:ba:94:44:ed:51:82:9c:94:59:5e:0e:
51:af:f5:6b:3c:f2:dc:8d:ab:82:d9:fd:a8:dd:8c:af:56:7d:
20:34:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:27:02 2026 by rpki-client