Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: 53drYvFMKeZ6ch9lUCTvDRgj9HIyLFsxsKCCACqED6w=
Subject key identifier: D2:18:FF:E4:AF:38:62:6C:76:2C:54:9B:CC:92:6B:4B:EB:20:F3:0E
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019E1F118F2CD5B8C9DB7E465EEDC991DB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0CD0
Signing time: Wed 13 May 2026 02:01:44 +0000
Manifest this update: Wed 13 May 2026 02:01:44 +0000
Manifest next update: Thu 14 May 2026 02:01:44 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: CwS4b7jCWU6YZ0b8Q5Il1Io/vla3Q/x+JkAaucF14WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:8f:2c:d5:b8:c9:db:7e:46:5e:ed:c9:91:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: May 13 02:01:44 2026 GMT
Not After : May 14 02:01:44 2026 GMT
Subject: CN=d218ffe4af38626c762c549bcc926b4beb20f30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:67:f0:87:84:43:4c:46:fb:59:a8:fb:b0:
c7:91:1d:a7:61:6f:67:e1:38:ac:20:c9:44:3d:59:
25:4a:f3:1f:b1:a2:b9:b6:33:3d:c0:b1:6d:39:74:
22:9b:3f:8c:de:c7:e2:1a:07:fb:75:50:39:00:cc:
44:1a:48:35:cb:c9:0c:5f:05:80:d7:1b:d9:76:79:
a1:25:df:36:c6:2c:34:ef:bf:c3:1a:6d:0a:db:fe:
7d:dd:78:f3:ac:67:cd:88:14:1e:42:23:4e:b0:19:
5f:2b:9c:e8:33:70:fe:52:1b:4e:34:12:8a:52:57:
52:65:92:af:56:90:21:64:63:ec:43:14:be:9f:9d:
46:d3:28:69:32:be:07:df:11:4e:6c:7a:17:2a:0e:
5a:4c:f5:df:d5:98:91:a7:82:e2:ca:e2:67:4a:b8:
8d:0c:91:6f:ea:28:0b:5e:1d:52:a5:e3:2a:72:73:
7d:71:cb:9d:d8:82:b3:71:2e:c8:4d:7a:c8:dc:b0:
3a:ce:84:7f:49:e9:58:67:c9:8e:73:08:30:b6:96:
45:87:fe:a3:b8:64:74:57:11:41:a0:e4:9c:3e:dd:
df:d5:42:e3:56:5e:45:f8:3e:0d:09:00:89:2a:76:
74:58:14:f7:9e:89:22:10:e8:6d:9a:63:1d:87:7b:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:FF:E4:AF:38:62:6C:76:2C:54:9B:CC:92:6B:4B:EB:20:F3:0E
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:86:57:4d:54:20:93:47:98:cc:b9:24:a9:ee:59:dc:af:21:
4d:28:0d:78:21:0e:1f:22:e9:38:4f:ac:26:e7:cc:c6:d8:fb:
95:45:23:1b:a3:37:56:5e:6d:fb:a1:4d:c0:d1:28:4a:ec:e5:
77:5e:fd:21:01:3a:cb:01:36:72:b4:da:ba:a1:a6:27:0b:04:
de:ea:e8:8c:e2:0c:cf:c9:4f:27:93:1e:be:49:c9:2d:80:20:
13:0c:a4:fb:d3:ae:58:fd:8d:27:7e:14:09:b4:fc:dc:43:5e:
fd:55:44:0e:dc:9f:0c:e5:94:68:a0:9b:af:0e:f0:5a:1d:9f:
7a:e4:52:3e:bb:09:93:51:e3:48:82:09:ac:cf:4f:cc:6b:ee:
dd:dc:2e:a9:3b:75:8c:c6:86:0c:87:15:32:f3:20:02:e2:4a:
7a:e7:b4:f5:a2:10:ba:af:b3:53:d3:92:e7:18:12:e6:e5:a6:
01:8d:b5:ba:8e:fe:82:fe:22:2b:90:b6:f2:4d:7c:da:08:96:
60:e5:44:84:43:07:ed:53:1a:98:49:9e:84:cf:03:ae:41:ce:
3a:14:ac:7b:5a:cd:71:70:6f:8b:b5:d3:0e:13:14:25:b9:65:
12:4e:48:cb:b0:4e:e7:36:a1:1c:78:e4:3e:66:e4:1b:40:3e:
ca:b4:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:26 2026 by rpki-client