Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: KgCM6Zfpgq7hy54YuTV1IXI3nafX2C/kOrJ0kbW8zZI=
Subject key identifier: 4A:71:D1:3F:0B:8F:1B:37:0A:8F:4B:14:CD:7C:69:03:4A:04:8D:3B
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 019D2583AB0673E498900272EE8DE99C0CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0BFA
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: 1-WJ7X3VtFf2F_SKJ8JN5dL6LQPQ.roa (hash: 8KtKxWLd7ILPUk5kKO1qDBFHYT3DcmruhjUNtg5TxvY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: 5MwhieNuthsCwXLND9xULP9AEx3UzuEYH5C7OskbZPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ab:06:73:e4:98:90:02:72:ee:8d:e9:9c:0c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=4a71d13f0b8f1b370a8f4b14cd7c69034a048d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:99:9e:43:30:ec:60:3b:2c:c4:d5:31:7c:
8c:04:ab:e0:ce:f7:bd:02:0c:b5:47:0c:48:18:9d:
59:71:51:ae:93:9f:ea:1d:b3:eb:df:d0:e8:f7:0b:
b8:58:f3:41:11:38:a3:af:d8:2c:06:a5:04:a2:82:
39:b5:53:8e:1f:f4:2e:b6:92:f7:e2:99:4d:43:70:
b6:84:7b:ad:a0:1e:47:1b:fb:94:a6:3c:57:58:06:
f8:ca:51:08:d1:7c:34:64:a8:b8:f9:44:11:f2:8a:
a1:77:19:b5:64:34:3a:eb:cb:2f:37:40:61:7d:90:
ab:4f:51:2e:8d:9f:c1:7a:e1:bb:13:b5:73:2c:b5:
03:92:07:05:ff:3b:f9:fd:3d:89:ae:db:e5:0a:6f:
05:42:3a:37:25:04:43:a9:9d:56:91:04:2f:33:98:
33:6d:ae:24:0a:3b:81:79:40:5e:b4:1f:56:cd:2b:
af:f6:5c:c7:46:d7:8f:6b:31:e2:81:aa:66:70:7d:
e8:2d:4d:e2:fb:53:78:a2:1f:5f:b0:6b:fc:ef:9a:
89:07:90:d7:bb:70:99:a7:93:40:d8:33:07:42:f8:
61:6c:c2:2c:62:93:5a:a7:fd:94:f2:fd:18:a8:84:
3d:0e:56:71:3e:aa:e6:f5:34:1f:3b:dc:5f:5f:f4:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:D1:3F:0B:8F:1B:37:0A:8F:4B:14:CD:7C:69:03:4A:04:8D:3B
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9c:0d:a3:96:b9:49:b1:d8:b1:e5:dc:70:36:40:02:7c:23:
60:52:6b:37:8f:58:d0:64:b8:29:59:91:28:20:ba:cf:f4:eb:
b3:d5:c6:cd:1a:c8:b2:99:c3:65:b4:a4:91:59:04:ae:e7:c6:
ae:9c:95:da:6f:4a:95:d3:20:4d:69:9b:28:aa:c2:97:50:a1:
8b:21:94:55:eb:85:d6:d0:10:f6:e8:9d:b8:29:a6:7a:55:12:
af:97:59:82:7d:cf:31:d5:81:14:68:b7:f7:e0:02:4c:eb:2d:
7a:55:56:5c:eb:9c:d5:d3:c3:d7:31:e1:c9:23:bd:12:f8:78:
a5:8e:af:cb:1c:4d:14:e2:2b:3b:15:3a:cb:1b:16:b7:79:58:
ae:10:d9:a2:f8:16:fc:1f:a7:e2:c1:55:03:9a:93:2d:d0:c1:
2f:03:de:48:01:3a:6c:5d:7f:05:dc:d2:6d:77:a7:c0:c2:77:
21:2b:3d:f3:58:5f:f5:13:99:1e:71:64:f0:d6:99:d5:77:d9:
fe:ff:9e:fa:3b:d0:e0:b4:ea:22:9e:d4:1e:88:9d:61:85:13:
24:d3:95:39:69:11:8d:31:32:94:59:55:95:dc:9c:69:6a:a9:
db:7c:09:c5:c8:2e:ab:e5:d1:b1:8e:24:76:f2:40:b3:c2:b8:
2f:f8:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:31 2026 by rpki-client