Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: BFCN3PYVRYt4CCXasZe+32smUY3u5eDb7O90jMhPObE=
Subject key identifier: 0B:D3:8A:D0:DD:28:5E:82:3F:55:7D:FA:EF:66:FD:FD:0A:32:50:45
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 019D28844A220C99D17C0EBB1F4F151B25BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: 02DD
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: GjtiA0E9S4pBxZydLJni4jMG7vw.roa (hash: XqhpEYwDihcxsf+WmDyde0ztzBoHTuaJNOIOGqBKgxU=)
2: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: K8B9ZbuS7ebhocG1TFohEnpVM9x9b5K0LatpDS7S6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4a:22:0c:99:d1:7c:0e:bb:1f:4f:15:1b:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=0bd38ad0dd285e823f557dfaef66fdfd0a325045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:84:fb:6b:5d:b7:d0:66:19:e2:43:3d:19:
c2:3e:e5:6c:b0:af:e8:70:12:a0:82:c2:bd:20:4c:
32:18:04:a5:1f:81:2f:ae:e9:07:72:47:87:f9:d5:
29:02:9b:08:df:a1:f1:68:db:16:e5:f2:12:08:12:
94:79:53:c9:ac:03:f7:be:74:a2:e3:1b:7f:ca:54:
f6:56:6e:4c:25:55:ab:69:3e:e1:36:4c:7b:c7:d3:
b9:b2:81:03:2d:88:73:5a:cf:25:37:fb:0a:84:3d:
e8:d4:ea:5e:30:c2:e9:b8:ef:b3:b0:37:37:ec:72:
8b:00:13:56:6a:31:3a:2b:93:cc:ad:b2:0d:cf:f9:
4a:a6:7b:a0:d8:c4:16:2f:22:6c:6c:bc:2c:e9:08:
b3:bb:c0:ca:56:5c:86:04:66:c4:fe:60:f6:ed:f3:
b6:3f:f5:b4:b4:cf:28:e8:c9:ec:73:ca:74:82:97:
dd:f1:af:3a:1c:9f:cb:e4:19:b3:9a:f3:6d:41:28:
17:28:a2:f0:ad:76:73:a4:91:16:eb:65:1e:65:74:
dc:eb:a6:74:08:63:68:61:45:7c:65:e7:e7:99:c8:
da:6d:60:ca:46:02:c8:79:25:45:a0:65:a6:1e:50:
00:b5:44:c0:f6:04:f8:70:ae:f2:b0:3d:8d:8e:1d:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D3:8A:D0:DD:28:5E:82:3F:55:7D:FA:EF:66:FD:FD:0A:32:50:45
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3a:10:fe:9d:73:4e:90:1a:c4:a8:cb:81:43:60:95:48:23:
6d:e6:36:f2:d3:16:38:ca:1e:0f:09:01:7b:72:a5:65:87:0c:
39:eb:72:21:e3:50:c4:89:f6:12:b8:85:e8:68:e3:51:8f:a9:
b5:6a:bd:1b:59:bd:e6:09:3e:05:1a:66:68:90:f7:81:cf:7f:
01:42:a4:21:51:51:2b:9d:63:6a:5a:f3:a1:fc:03:53:c3:ce:
bb:b7:54:37:fb:8e:86:35:44:d2:c1:47:6c:8a:f1:fb:8e:fb:
0f:21:d4:36:df:33:e3:b6:f3:38:84:0f:82:78:a1:44:84:c6:
ae:04:7d:07:a7:9a:98:fc:55:65:a4:e0:bf:58:28:5d:cc:b3:
aa:ea:9c:d0:70:b2:95:2b:3a:e9:b8:04:1b:d4:eb:1c:fd:59:
60:a7:79:46:24:d6:c0:e0:53:51:d4:03:92:ca:5c:3c:80:33:
5f:ce:0b:9b:43:05:8e:89:b3:81:c3:f4:cb:41:77:f7:94:61:
66:e0:bb:1a:e7:35:59:97:17:1c:6e:66:82:b4:f1:71:cd:a7:
51:6a:08:9b:57:83:c2:df:2d:ea:b7:ea:6b:53:9c:82:e0:9c:
e3:c0:5b:a2:32:9a:98:43:9c:32:66:3d:0f:8b:d0:85:67:9a:
5e:f1:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:02 2026 by rpki-client