Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: BP0CHbO5LbgAnD2tozAuB74XNhP0VP/rHeRnGw2DOQk=
Subject key identifier: 41:DB:00:6C:89:56:B8:15:50:2D:1E:8C:46:90:88:47:89:77:6C:76
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 01A0D45E0061C6A9EF0F9297126DBE8A104C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: 03FD
Signing time: Thu 24 Sep 2026 17:02:05 +0000
Manifest this update: Thu 24 Sep 2026 17:02:05 +0000
Manifest next update: Fri 25 Sep 2026 17:02:05 +0000
Files and hashes: 1: RXH1E0juuTjk09gdd34VSaLqezE.roa (hash: DZRkuPFfVpgIXoaL3urk2cfBtZs5W6fdoPmvj+H+iwE=)
2: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: erFEAyFT8osFejxrvuI6gVezhUSbJ9e7IdszbnS+oSI=)
3: Yo8vYPryUnuVJotyGpiBSmoKzeY.asa (hash: ZYZGB8hDEmnzNSAscPvCGLkXXklvXiM5op3rNA3iy7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:00:61:c6:a9:ef:0f:92:97:12:6d:be:8a:10:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Sep 24 17:02:05 2026 GMT
Not After : Sep 25 17:02:05 2026 GMT
Subject: CN=41db006c8956b815502d1e8c4690884789776c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:ab:50:85:f2:18:61:f2:ef:0e:4b:58:32:
01:3c:97:36:95:3a:e4:3e:03:d4:81:4a:28:55:94:
58:ad:3e:32:4e:40:32:f4:0e:95:03:13:d9:cd:22:
88:de:ca:40:4a:76:8e:1c:18:9a:87:ca:01:ad:41:
03:3d:5e:bd:de:27:43:58:23:e3:8f:a6:da:81:81:
ff:ff:9e:bb:8f:75:1e:2c:39:29:6b:57:30:ec:eb:
07:60:da:4e:c6:71:7a:24:cd:88:e1:fc:75:20:c9:
96:eb:e4:7b:7e:f7:ed:ea:81:6e:97:db:4c:05:8e:
5d:97:82:19:15:6f:73:f5:2f:eb:56:ef:eb:0f:48:
40:b5:2f:fc:60:7e:52:01:85:f8:a5:78:8c:8b:1a:
d7:45:21:98:47:c9:58:29:f0:16:e5:5b:90:13:c4:
a4:fc:b7:41:dd:de:5f:de:f4:2a:8f:d4:9a:7f:1c:
7d:ad:c1:b5:49:ba:f4:6b:7d:24:d1:1c:86:cd:6a:
86:17:19:d0:ba:5b:c0:c4:de:96:92:b6:ff:dc:f1:
d3:87:c3:67:29:ea:b1:63:6e:66:f9:c5:de:8f:7e:
cf:df:6d:df:d1:b1:be:f1:38:a5:2a:3b:f2:fb:39:
7a:73:de:f3:0c:fa:5a:3a:e7:db:da:87:17:6f:8d:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:00:6C:89:56:B8:15:50:2D:1E:8C:46:90:88:47:89:77:6C:76
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:76:58:e1:96:f1:f0:a7:61:f3:83:32:6c:10:d7:3d:ee:a9:
a5:c2:85:cd:37:26:4d:d4:ae:12:a1:96:77:ac:a5:9d:74:83:
4a:a7:d6:3f:d1:ed:a3:c9:45:66:99:69:da:5b:54:35:8b:b3:
81:ae:3e:b7:d9:12:60:0a:f3:31:50:73:23:41:9e:cc:11:11:
46:89:0c:17:e9:44:47:39:ed:81:6e:de:de:67:73:ea:f9:db:
78:19:35:2c:61:85:f9:69:7b:0c:b8:05:aa:11:ce:cf:a0:35:
64:50:9f:53:43:c1:ab:25:8b:11:a4:a9:24:e4:6f:92:29:dd:
dc:b3:ad:d3:ad:35:64:d2:90:52:7b:80:5d:dc:34:a3:6c:d8:
00:29:37:12:cb:8f:42:32:85:bf:e6:56:cd:9c:78:48:bf:a7:
c6:ec:0a:90:6a:f6:17:f7:c6:ae:11:d2:c3:39:92:c0:6e:5f:
7b:79:54:4f:9a:67:a3:0f:ff:b2:10:36:29:6f:26:02:95:6f:
81:bc:38:0f:61:e8:c4:c4:c4:c9:81:58:9f:f9:5c:1f:dd:ec:
4c:98:de:d5:3b:74:7d:8e:ad:cd:62:44:3b:2e:fa:cf:7b:6c:
a3:24:3b:bb:ef:41:5f:1e:a4:0c:e6:cf:6e:4d:aa:ef:be:90:
2a:85:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:51:53 2026 by rpki-client