Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier: ASGcVXlzn9G6Ak4ZjMwHi/PFIXeUd/iOIHxhTWW1PK0=
Subject key identifier: AC:29:B8:C8:25:FE:4A:82:EB:5A:88:BC:FD:1D:C6:4D:F5:D7:C9:04
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial: 019D284D73260647934BC96BA19F277B6D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number: 1362
Signing time: Thu 26 Mar 2026 04:00:57 +0000
Manifest this update: Thu 26 Mar 2026 04:00:57 +0000
Manifest next update: Fri 27 Mar 2026 04:00:57 +0000
Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: vOFI/QLEtPjdi9Pz+cfAaMGckAO6aiq92WBuEJkYmoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:73:26:06:47:93:4b:c9:6b:a1:9f:27:7b:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
Validity
Not Before: Mar 26 04:00:57 2026 GMT
Not After : Mar 27 04:00:57 2026 GMT
Subject: CN=ac29b8c825fe4a82eb5a88bcfd1dc64df5d7c904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:45:14:89:fd:ba:e3:9c:02:d8:b3:02:15:
59:70:71:c2:31:3a:53:03:25:e0:81:b9:f9:ec:d8:
7b:29:28:96:23:61:d9:e1:20:46:3a:63:c2:62:c0:
6d:77:7b:88:8f:14:9f:b6:d0:f7:3b:4d:99:49:76:
ce:38:0c:f4:4b:fb:ac:63:fa:c2:19:f7:08:c5:cc:
b0:90:17:62:ce:ba:76:c8:79:01:4a:3a:cf:87:7f:
37:86:d2:f1:f6:25:a1:b1:77:c9:e4:2a:07:3e:5a:
0e:c8:ee:31:0c:97:cd:f7:90:df:27:a5:3c:ee:12:
1c:6e:c1:27:a3:84:72:a0:bf:99:ac:dc:ec:d9:f9:
1f:47:58:06:f4:48:41:65:93:d0:bd:07:e4:79:6e:
af:b2:3a:58:6a:fe:cc:fd:c4:99:78:07:d8:b9:07:
ce:e9:0c:1d:ec:8c:bd:ed:0b:18:2d:96:9b:fa:c7:
e1:28:18:62:d2:50:d1:97:8f:12:fd:f3:1a:35:36:
f9:e3:a0:6a:e8:27:95:50:58:26:ff:69:32:b7:30:
41:f8:52:ba:f8:80:0e:b1:a9:38:5e:c2:44:13:ca:
a9:ec:53:e6:fa:74:6b:e2:c7:6d:3f:f4:ce:94:07:
9f:54:5b:35:f9:9d:48:50:d5:67:c0:39:63:6f:11:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:B8:C8:25:FE:4A:82:EB:5A:88:BC:FD:1D:C6:4D:F5:D7:C9:04
X509v3 Authority Key Identifier:
keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:c2:07:0a:63:30:ec:34:97:2c:70:e8:69:6b:38:f7:95:
cb:17:c6:cb:82:e9:74:14:40:38:09:27:84:d7:61:d9:d1:b0:
07:2e:a8:f4:8b:84:42:0c:2a:4e:3e:96:ad:bc:3a:87:27:42:
8b:20:37:e3:70:57:a2:23:bf:82:fe:a1:dd:52:b1:ae:b7:c8:
bf:00:e4:22:c7:4e:55:63:7c:1b:6a:e6:43:29:4e:be:f7:59:
ff:63:48:19:f3:56:ca:39:97:d2:13:63:a7:b4:28:38:be:42:
29:79:31:96:61:53:e4:9d:1a:5f:9c:36:d2:21:6a:06:c9:e0:
76:36:d8:aa:30:7e:b1:f3:02:39:fb:e5:d3:95:13:1c:c5:dd:
c7:71:03:b2:6e:5c:56:77:4d:1a:10:d9:4e:ba:cb:c7:7e:68:
8f:5d:27:89:fc:f9:3b:59:13:d5:2a:5c:5e:32:6b:de:14:fe:
9f:7f:97:3b:a0:6e:af:fe:35:7a:96:23:72:ca:a1:cc:7d:85:
84:44:b7:7e:9b:89:06:ab:62:69:42:3a:f4:85:47:50:76:8a:
c3:50:4f:7d:3f:f7:9d:6f:76:22:3a:4c:5e:22:d7:b1:d5:70:
ef:61:02:2f:84:1a:c0:64:7d:08:7c:f8:5a:ea:34:fc:f5:76:
a0:1d:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:27 2026 by rpki-client