Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: FkTZbggrvjw8WpM4bw1uybmAcM19/QVI3a5PDgbSrJE=
Subject key identifier: EE:BD:8C:43:88:58:FF:F7:2C:53:3F:CD:F2:36:14:47:8A:03:BA:14
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019D265ECF66939148B63E8DA553ED328613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0F01
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: oRwhTZzjxW5ZYR2BJKePaFR7NCKptCPrUALfZlT88Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cf:66:93:91:48:b6:3e:8d:a5:53:ed:32:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=eebd8c438858fff72c533fcdf23614478a03ba14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:c0:f5:ba:11:67:82:a8:a6:62:9e:78:ca:
ce:a8:71:de:f0:c9:2a:5f:94:7c:77:8c:2d:43:0b:
94:a1:20:d9:84:79:08:83:24:fc:5f:55:0b:10:e9:
1b:15:0a:d7:8d:4b:b0:9a:16:e4:4f:31:19:a8:f5:
f3:62:69:96:b1:da:71:97:03:0a:67:a3:77:ed:7f:
04:c9:72:51:27:15:21:d4:66:be:05:1b:bc:de:db:
20:18:ce:2d:06:54:78:71:21:5c:5d:6a:65:99:85:
d0:81:52:38:f9:fc:22:55:b1:41:b6:f6:22:fc:53:
d6:ff:70:6e:f6:3e:17:78:34:22:4b:12:a0:37:ae:
14:f6:9e:76:e4:6b:ed:e9:d6:a4:6e:40:4c:4b:41:
06:bd:69:a0:3a:7a:fa:b9:ed:88:01:f0:2c:8e:e5:
f2:6a:70:2b:99:b4:41:ea:36:45:5f:09:59:67:81:
e8:53:07:ef:80:f9:da:9e:a0:ae:5d:68:d1:89:5c:
d4:ee:87:46:46:d0:0d:af:00:0e:0d:e7:bf:68:b1:
b3:f3:04:28:0e:ed:e1:06:64:1d:71:57:0b:98:70:
a6:4e:20:d5:18:82:ca:c8:b5:27:b2:d7:cd:96:46:
9c:15:4a:fc:b5:e2:49:94:57:2c:3f:7e:39:2d:a1:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:8C:43:88:58:FF:F7:2C:53:3F:CD:F2:36:14:47:8A:03:BA:14
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:29:24:f7:0a:c1:c7:a1:60:ea:9f:ad:09:71:c5:3c:e0:a7:
71:25:f5:92:5b:34:dd:6d:e8:3b:13:ef:57:cb:21:16:16:72:
92:d6:e3:e0:21:8b:47:c3:82:7c:c4:db:83:b5:d7:e3:cc:13:
08:eb:4f:1a:5d:d5:39:e5:70:74:8e:1d:73:fb:28:1a:98:6a:
0d:77:35:70:96:ec:eb:6c:9b:7b:cb:20:b8:77:c6:40:29:24:
b4:f3:a6:69:51:f3:26:6a:ad:92:5a:47:36:e5:46:fa:4d:26:
b5:2d:e5:00:f6:89:e3:c2:d5:d5:31:fd:54:cf:35:3a:38:8d:
b2:91:74:33:43:c9:83:e1:45:46:f6:4f:f9:78:7b:80:88:fa:
48:15:80:a5:08:8c:23:ea:ad:c3:e2:d0:25:34:ab:da:21:ee:
75:06:c6:b5:c1:40:92:39:2f:7a:ea:ba:14:69:c9:7f:98:17:
58:45:6b:72:62:52:99:a3:c8:ee:ef:61:f6:22:04:ae:b9:45:
43:a4:fa:c7:75:e2:25:3b:7d:a3:90:e6:11:b1:52:2b:5d:37:
49:03:54:5a:31:51:39:26:65:e6:54:42:f6:60:ff:ea:b0:2b:
42:0d:4d:c6:9c:67:8f:15:6c:21:6a:87:b3:57:a2:22:17:93:
7f:99:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:49 2026 by rpki-client