Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: 2T/RdmbvEO9eodYs9y6lCfb+qufTimAlC/bRZgJr7jU=
Subject key identifier: A7:E6:8F:C9:21:92:2A:D3:65:EB:80:03:01:48:D2:F3:EC:99:7E:1B
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019D27DFC066818780047DA6056F222C2F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0C50
Signing time: Thu 26 Mar 2026 02:01:08 +0000
Manifest this update: Thu 26 Mar 2026 02:01:08 +0000
Manifest next update: Fri 27 Mar 2026 02:01:08 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: dZMUK5gllMsSZ82fUqN+pe1MPdZxDtjtlrG77dU66SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c0:66:81:87:80:04:7d:a6:05:6f:22:2c:2f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Mar 26 02:01:08 2026 GMT
Not After : Mar 27 02:01:08 2026 GMT
Subject: CN=a7e68fc921922ad365eb80030148d2f3ec997e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:1b:6c:a4:0a:95:c6:ee:f1:11:62:90:d6:
37:95:ba:93:0e:7a:bf:ba:19:76:d5:73:8e:d3:03:
03:dc:c7:64:6e:05:8b:78:d5:48:78:95:d1:dc:d6:
95:2b:c3:6b:92:5d:98:ed:88:a3:ee:f6:71:2d:89:
6c:40:ae:7b:26:17:af:a9:2b:5e:17:51:d1:fd:ca:
79:e0:ef:60:6e:d2:f3:79:bc:04:ac:0c:4a:73:13:
61:c1:aa:30:21:7c:05:00:7b:cf:3a:b2:1e:96:b7:
a9:2d:cd:36:c8:f0:b3:6f:3a:69:64:58:7d:55:ce:
3e:e2:23:15:29:90:7f:ff:54:ac:4a:5b:c1:36:2b:
1a:f3:ca:50:51:71:34:a6:e2:d0:9c:27:4d:db:ee:
9b:b4:68:ad:36:05:2e:8d:a2:97:9b:e7:cf:cd:c8:
f6:12:a2:86:4b:27:63:44:45:8f:70:25:30:cb:b7:
a3:d2:6b:5e:8f:6c:bb:dd:83:e9:80:f2:3c:fc:72:
ec:78:79:a9:e0:b5:91:15:00:5e:82:f3:8b:7e:e4:
27:ac:a7:a6:f3:b8:d7:ba:35:2c:16:a5:4b:84:b7:
06:2e:33:62:3e:69:90:bd:99:dc:2f:ad:4c:2e:35:
e4:f0:17:b4:56:b6:1b:05:75:4c:df:e0:37:75:c6:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:8F:C9:21:92:2A:D3:65:EB:80:03:01:48:D2:F3:EC:99:7E:1B
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9d:20:54:06:3d:91:79:e0:68:bb:ea:05:52:ab:b2:4c:c9:
be:6f:91:6d:32:36:5b:96:80:9e:bc:02:60:37:29:ef:9f:cc:
53:a9:f4:b0:43:60:3a:26:13:b3:91:8b:b7:15:ef:57:3f:67:
c3:f1:83:13:80:c0:ea:1e:33:37:5c:82:2d:99:85:e6:9b:34:
01:71:12:b7:d3:67:9b:97:77:8a:3c:c0:cb:82:22:1c:26:57:
af:ce:dd:79:cf:1d:09:e1:03:15:0b:81:56:27:87:38:18:5f:
95:bd:a8:da:0b:9b:cd:2b:02:67:e8:6b:a5:c6:4a:c3:bd:22:
fa:0d:ad:a4:6e:f8:60:a0:f0:46:a7:00:cc:c2:ba:95:b7:af:
28:ab:25:0a:53:d1:a1:19:2e:71:0f:2a:3b:6b:f3:10:a4:72:
1e:6b:7d:0f:d0:52:87:82:ff:2f:d0:c8:76:d3:63:39:83:10:
41:9f:4f:15:57:71:94:a3:7b:97:c4:c0:e7:f0:8a:83:7d:60:
f5:ea:be:c0:21:cd:e6:35:25:e3:5c:bb:4f:94:7b:a0:db:64:
25:9a:4e:3f:65:3e:e6:78:81:d6:dc:ea:ec:17:04:09:18:a4:
c3:9a:60:ea:f1:f8:cc:7f:65:5d:a3:5c:a0:ac:70:72:57:be:
c0:72:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:30 2026 by rpki-client