Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: Jz4xTWHk2H+w1i1Fgvzr+yi7ZimFZgRKLn/UzjsT+SM=
Subject key identifier: 39:FA:D0:2D:30:F5:C0:D4:33:C0:C1:0C:FB:AB:25:7F:2C:B3:34:8F
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 019D284E4884379D478FD55E50B4233BE224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 1722
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: HW-WD3YmA183Eg5SjeKZRN7F6vo.roa (hash: qS+dps2UAxlaxbw7uwyr1mlazMmXktC7iMhFMsxdPKo=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: QIOaHsQs0SZR/wc7KsM3UKQ+tQb2yZKUW0deBZipPZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:48:84:37:9d:47:8f:d5:5e:50:b4:23:3b:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=39fad02d30f5c0d433c0c10cfbab257f2cb3348f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:0c:44:64:37:63:e8:cb:98:02:64:50:7a:
0a:56:11:ad:a6:d7:d4:d5:8d:b3:a8:15:66:0e:62:
ee:88:95:b4:a7:32:eb:53:f2:c6:f2:18:0a:4c:d9:
30:23:c6:fc:42:d8:02:20:6a:b4:97:b4:e0:2c:2c:
df:5c:a3:0c:d1:f8:bc:e0:af:02:81:ae:ac:01:e6:
5d:cb:b1:d0:6f:7f:b3:c4:a2:41:22:3c:80:3f:c3:
98:5a:60:e0:44:e1:aa:fd:d3:41:66:d5:2e:cc:40:
a7:87:ae:a2:85:34:7a:55:a6:ab:fe:e2:ee:6d:67:
dc:40:4d:b3:8f:0b:87:29:de:6b:07:da:e1:0d:c7:
7c:ce:1c:c0:29:17:fe:67:ce:2f:b1:d6:78:98:a1:
2b:58:73:d3:eb:4a:c4:cb:ba:75:8d:16:db:0f:40:
a2:8d:da:d8:c0:57:2e:3a:a2:4c:ac:2d:7b:58:2c:
76:d3:f9:61:ba:05:cd:e9:f8:a1:b9:e2:38:0f:6e:
58:ef:1d:32:b1:5d:e3:50:6d:83:76:cf:ee:03:7e:
21:b0:fb:4e:f2:1c:f5:3a:61:8b:c4:8b:86:b3:1f:
4d:29:ce:7a:62:85:fc:b0:0a:e3:37:2e:8a:1e:c5:
c2:da:d8:8b:3a:cb:34:39:a7:74:49:66:02:90:9c:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:D0:2D:30:F5:C0:D4:33:C0:C1:0C:FB:AB:25:7F:2C:B3:34:8F
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:92:a5:7f:cf:22:71:2d:d2:07:a1:3b:c6:ef:8d:8b:88:ff:
23:cc:95:a4:11:67:84:56:9f:62:e5:e1:0e:3a:43:18:e4:71:
09:67:d8:36:1c:a4:33:0d:c4:e3:0f:e7:6c:b4:46:cb:2e:19:
47:c7:cb:ac:54:bc:61:b8:23:bf:cb:0b:ce:cc:aa:10:b5:d0:
d7:70:cb:85:c6:3a:e6:ed:a5:8c:9b:ac:77:bc:c8:a9:5f:97:
bc:46:ab:f7:43:2c:af:52:fe:01:fb:a1:aa:10:45:5f:31:64:
ce:8f:0a:94:a9:2a:b4:02:16:9f:2a:c6:bc:f3:48:4e:da:9f:
3b:86:7c:bd:18:51:24:23:cf:ac:c6:03:15:45:8f:8d:2e:d4:
10:03:84:38:ee:63:5b:a5:2a:24:f9:0c:85:f2:ef:02:26:b2:
cc:d7:be:31:0c:2f:f5:01:48:1e:2c:f9:b1:6e:59:0a:43:e8:
c3:25:3b:2e:ba:2d:a0:fc:5e:b4:97:f2:be:b5:27:ad:cd:4f:
c7:6b:90:7e:97:2e:b3:63:31:38:d2:01:01:2c:0f:7b:be:b4:
fd:74:8d:a6:38:4f:74:f6:90:a6:e4:c2:eb:8d:9d:1c:de:4e:
58:fd:03:5e:2c:3c:2e:b1:51:ec:b5:d9:e1:9a:48:f9:87:c6:
bf:33:52:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTkiEN51Hj9VeULQjO+IkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGI3ZDFlNmU3MmQ1NWM4ZDFjNGEzZTgyNDFkNzFkY2Y4
ZTNiZjEwHhcNMjYwMzI2MDQwMTUyWhcNMjYwMzI3MDQwMTUyWjAzMTEwLwYDVQQD
EygzOWZhZDAyZDMwZjVjMGQ0MzNjMGMxMGNmYmFiMjU3ZjJjYjMzNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsEMRGQ3Y+jLmAJkUHoKVhGtptfU
1Y2zqBVmDmLuiJW0pzLrU/LG8hgKTNkwI8b8QtgCIGq0l7TgLCzfXKMM0fi84K8C
ga6sAeZdy7HQb3+zxKJBIjyAP8OYWmDgROGq/dNBZtUuzECnh66ihTR6Vaar/uLu
bWfcQE2zjwuHKd5rB9rhDcd8zhzAKRf+Z84vsdZ4mKErWHPT60rEy7p1jRbbD0Ci
jdrYwFcuOqJMrC17WCx20/lhugXN6fihueI4D25Y7x0ysV3jUG2Dds/uA34hsPtO
8hz1OmGLxIuGsx9NKc56YoX8sArjNy6KHsXC2tiLOss0Oad0SWYCkJyLvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn60C0w9cDUM8DBDPurJX8sszSPMB8GA1UdIwQY
MBaAFJFLfR5uctVcjRxKPoJB1x3PjjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQt
YWJlZDc0NDE1YjhmLzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQtYWJlZDc0NDE1Yjhm
LzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4pKlf88i
cS3SB6E7xu+Ni4j/I8yVpBFnhFafYuXhDjpDGORxCWfYNhykMw3E4w/nbLRGyy4Z
R8fLrFS8Ybgjv8sLzsyqELXQ13DLhcY65u2ljJusd7zIqV+XvEar90Msr1L+Afuh
qhBFXzFkzo8KlKkqtAIWnyrGvPNITtqfO4Z8vRhRJCPPrMYDFUWPjS7UEAOEOO5j
W6UqJPkMhfLvAiayzNe+MQwv9QFIHiz5sW5ZCkPowyU7LrotoPxetJfyvrUnrc1P
x2uQfpcus2MxONIBASwPe760/XSNpjhPdPaQpuTC642dHN5OWP0DXiw8LrFR7LXZ
4ZpI+YfGvzNSEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:04 2026 by rpki-client