Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: Hzcd2K+MjWlpUd8cNOEnKhpV/X1ztZXrF91NDi2bsT8=
Subject key identifier: E6:D0:B0:D7:4A:EE:65:8E:67:80:D8:09:70:F1:0F:9A:3C:31:9E:6F
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 019D32D0D1ACEB584EC20721EE1CD96AA6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 04D5
Signing time: Sat 28 Mar 2026 05:00:38 +0000
Manifest this update: Sat 28 Mar 2026 05:00:38 +0000
Manifest next update: Sun 29 Mar 2026 05:00:38 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: TaECplmKj1hO9EEP07NCnFzDFxBS60gqeYQIh5by8YQ=)
2: xTwRZ6Mz0DZziLxUVhlhyoH_Gr4.roa (hash: 87G44kYU+NhJk4PPN1w3dfZMV/JFeh7+LhgClnnb7tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:d1:ac:eb:58:4e:c2:07:21:ee:1c:d9:6a:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Mar 28 05:00:38 2026 GMT
Not After : Mar 29 05:00:38 2026 GMT
Subject: CN=e6d0b0d74aee658e6780d80970f10f9a3c319e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:3e:de:ba:9f:bf:9c:8d:9b:11:99:54:64:
7d:bf:ff:2a:05:32:19:59:a1:70:1a:39:4c:c2:49:
b3:7a:ea:1a:ba:56:d8:54:b6:c3:57:60:de:23:c2:
e0:47:61:60:c9:0c:04:e5:56:f5:d9:70:7b:24:74:
c6:93:ef:99:64:89:71:62:f7:f7:f6:42:70:8d:36:
21:5b:58:53:68:1b:83:67:41:54:a2:be:35:36:42:
e6:24:4a:9e:89:f0:0c:d0:ad:1a:26:75:d0:12:df:
24:aa:de:1f:bd:78:78:cf:e7:8e:6a:5f:a0:06:de:
83:a0:9a:68:b3:08:f9:10:68:48:26:b7:bb:42:7d:
f4:f3:94:84:50:88:f0:99:aa:46:5f:67:c8:b7:96:
b8:55:4d:21:0b:5a:d0:1c:43:0a:14:61:33:56:95:
0a:24:58:f5:96:44:45:07:d8:93:1f:00:4a:a3:90:
2e:d1:a7:10:c8:0c:33:9b:9e:bc:73:f5:00:e7:fc:
b8:44:71:f8:ae:26:7c:f3:63:e4:dd:c0:fb:b6:c8:
c7:58:d6:c7:0b:a2:c8:1f:9c:e4:ce:44:79:3f:67:
77:05:27:9e:61:b3:1d:f6:63:85:03:b8:fb:81:2e:
01:e0:b7:67:a4:42:56:4d:ea:53:a7:95:d7:f7:d0:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D0:B0:D7:4A:EE:65:8E:67:80:D8:09:70:F1:0F:9A:3C:31:9E:6F
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f7:e8:9a:1c:59:c5:92:cd:74:a4:af:fb:ab:6c:f5:1b:7c:
c6:c4:d5:b3:a1:33:e2:67:9e:e4:44:38:c3:73:7b:4e:d3:14:
ec:06:38:5c:76:ff:2e:66:8f:f9:93:ac:33:43:e5:cd:86:fe:
20:99:a4:51:f1:de:cf:cc:4e:82:6f:a5:38:98:b5:7c:be:48:
a0:e2:e0:6f:6d:e8:ae:6b:9c:a6:cb:d3:63:32:2c:61:f3:7c:
2e:9c:0a:dc:eb:fe:9d:b0:ea:55:9c:d1:c9:0e:0e:7e:5a:ed:
4d:cf:4e:e9:2e:8b:c5:47:b9:0f:f7:18:b3:cb:b6:3e:5d:57:
4c:9d:b8:27:28:3f:b7:5f:04:37:c9:fd:f3:00:70:aa:fa:49:
07:8a:c6:56:60:d3:6d:f9:c1:e0:78:b0:48:09:98:4f:d3:41:
bd:be:7f:80:39:b0:a6:ca:5b:a6:67:cf:37:85:59:f6:94:fa:
ad:d4:d2:47:27:57:ad:53:c3:82:80:aa:ca:94:8e:ac:9c:e4:
64:82:d1:5f:e2:8b:8e:93:23:4b:f1:e6:6f:2b:49:90:46:46:
1b:88:78:49:57:90:b3:c0:9d:90:ff:a7:fe:84:ed:57:77:b7:
ea:8d:46:ca:fa:2f:95:62:43:92:d5:ba:56:e0:19:ca:50:81:
64:cc:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:38 2026 by rpki-client