Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: GvC5JNS70OHk2uSPRWFAokMdkzPMtraVjD2xOjQFxuA=
Subject key identifier: 7D:FC:D8:6A:A0:21:E6:1E:3D:5E:AF:AA:7F:A3:EE:C8:CF:53:8F:92
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 019D273AA91F62946D8706A78169AF989B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: 0212
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: 7YCNn5AqEiJIVGFTMEV87R0RsDtvBZt2joD8WJc++20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a9:1f:62:94:6d:87:06:a7:81:69:af:98:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=7dfcd86aa021e61e3d5eafaa7fa3eec8cf538f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:40:71:e9:df:06:bf:e7:dd:dd:b8:b0:6a:
f9:0f:9b:8b:62:eb:c5:57:6f:d6:a1:12:ee:ca:a0:
21:f3:1d:ef:6e:49:d7:e2:93:a8:08:df:b4:a5:11:
25:89:2b:4e:01:2d:75:8d:c6:92:ef:2c:d0:4b:6f:
2e:87:f7:89:e4:5f:78:bf:fd:5d:60:cd:4b:5e:12:
e4:bb:4f:77:8d:54:89:a1:33:e6:dc:76:f6:eb:aa:
92:b1:89:85:78:ce:a9:40:e0:78:8a:81:7e:25:28:
c9:d6:c3:2f:41:52:bc:e8:6a:2d:78:35:62:a3:c2:
fa:20:6c:46:ec:df:ec:8d:54:6d:bf:0f:3b:a1:67:
17:e5:8e:d9:d5:c8:e5:6b:52:24:9f:f7:15:7b:e3:
2f:29:ad:59:1b:6f:2e:17:92:9b:41:ea:59:72:88:
31:74:d4:54:83:d6:e6:0d:5c:9a:7a:ad:2b:5e:e7:
cc:8d:55:de:40:d3:4b:a9:43:3c:76:77:cb:cf:d2:
c6:a4:1b:70:0b:a9:0b:b0:1d:7b:7a:41:c4:2e:8e:
bc:91:36:ee:60:5e:84:fc:f1:15:de:79:87:1a:bb:
8d:db:c5:f1:9d:f6:13:93:ed:e3:a3:78:98:5d:b8:
79:53:3f:72:42:7c:ee:ac:05:60:51:bd:25:57:82:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FC:D8:6A:A0:21:E6:1E:3D:5E:AF:AA:7F:A3:EE:C8:CF:53:8F:92
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ea:ba:d4:46:77:66:fb:7c:8d:ed:bd:22:73:48:42:de:66:
bc:15:74:b4:88:5d:7b:22:a8:46:fd:7e:9b:0f:35:a2:9c:88:
d6:31:eb:18:22:82:c7:ec:78:63:12:74:49:00:01:d2:32:75:
11:f0:7e:71:0a:ef:73:17:fd:ae:06:99:34:3e:64:cc:c5:b9:
b9:50:32:7a:0e:9b:44:a1:8c:3c:88:2b:07:09:23:8f:b0:d1:
bd:27:41:83:42:49:37:32:3d:db:dc:1e:ff:f7:31:92:b7:48:
90:ba:6d:c5:2d:df:5c:49:8b:90:93:14:02:ca:94:f8:fe:fa:
fe:12:9c:ad:5a:1c:c4:2a:6b:35:53:94:88:2e:5d:d4:01:29:
d8:9a:bc:c0:f6:58:d2:64:5f:97:de:a7:8b:10:95:d0:5c:06:
20:74:77:63:da:0b:2c:53:71:d4:f8:9a:3c:8d:e0:e5:fc:17:
f4:60:8c:e3:e6:09:61:45:cd:1d:3a:b0:61:76:e0:df:14:ca:
ca:7a:c0:c7:4a:4a:9a:e1:b6:7a:55:37:a2:49:67:35:e7:08:
cb:73:46:60:b5:93:63:b1:07:d6:72:1f:b9:53:89:d2:7e:75:
3f:71:31:f0:ed:85:72:fb:89:cb:c9:19:95:ef:89:f4:bd:b6:
eb:37:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:12 2026 by rpki-client