Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: gshPz6G/7kRJi2rU+k3f6IrU2yYcZHSxDZcDCBDe2gM=
Subject key identifier: 9A:1B:50:DA:55:68:0C:1F:03:99:92:1F:24:E3:90:97:E6:E2:50:FE
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 019D27DF9A1E2B8E5FFFADF699EF90FFFD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 02:00:58 +0000
Manifest this update: Thu 26 Mar 2026 02:00:58 +0000
Manifest next update: Fri 27 Mar 2026 02:00:58 +0000
Files and hashes: 1: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: XDkBC0FO35VMv7sBz7BvuaaEM/GZC8/jq3ZsJoDdbQ8=)
2: RINTWQU8O-dtVLISeiowSUIg1i4.roa (hash: mr0pYPWJuxdErynFbzmieVFUznI70KYCtpeAb0gQwOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9a:1e:2b:8e:5f:ff:ad:f6:99:ef:90:ff:fd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Mar 26 02:00:58 2026 GMT
Not After : Mar 27 02:00:58 2026 GMT
Subject: CN=9a1b50da55680c1f0399921f24e39097e6e250fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:a6:b4:15:ae:45:8b:2a:7c:cf:fd:5f:a5:
c6:36:3f:87:0d:94:7e:3d:50:44:8c:db:ac:f0:4c:
a1:c7:f3:48:22:83:39:cc:cf:29:47:33:92:c0:10:
da:a1:de:ab:94:4a:4c:fd:0e:d6:9f:d0:05:ed:53:
d6:97:aa:65:22:45:00:7e:50:46:c9:3f:d2:c2:9d:
45:af:30:93:63:07:c1:ff:b7:52:9b:04:c6:0e:b7:
e8:6c:5a:83:52:16:94:1a:ac:3a:9c:96:03:dc:f0:
66:e3:5c:3d:ea:01:f5:c4:0f:1c:3f:a0:d3:0c:46:
4a:a6:ab:96:67:8e:9b:9c:dc:88:27:27:98:d6:1e:
f5:d7:d7:c5:2f:b5:f3:6d:27:d9:de:34:c7:b2:0d:
e2:73:3f:8b:7f:65:35:99:0e:13:2d:fe:c3:95:f2:
91:ed:ca:f8:38:6c:4f:10:eb:c2:7e:da:48:18:a2:
b6:c0:ae:34:8c:58:81:29:69:0a:eb:a4:7f:14:37:
16:da:ac:34:e2:2b:00:dc:de:be:fd:65:bc:b6:d5:
f8:37:81:78:c8:3f:12:47:e4:78:4f:8c:db:41:de:
4a:1f:7c:b0:50:74:b0:25:cf:a4:9a:67:39:b4:a1:
9b:9d:f2:00:25:c3:60:87:e3:db:8a:ba:94:ec:b1:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:50:DA:55:68:0C:1F:03:99:92:1F:24:E3:90:97:E6:E2:50:FE
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:22:38:a7:ad:60:21:fd:c0:68:77:ed:53:24:29:78:c8:a3:
18:49:90:e9:9f:8c:9f:de:68:d1:b1:31:5f:22:e7:8f:1d:30:
e8:19:31:f7:5d:a7:ea:3a:30:b8:85:ec:53:ba:8e:e3:28:bf:
ae:7f:5b:60:1a:7a:e1:9e:24:4f:ac:c2:49:a7:84:1f:0d:2d:
af:f7:55:92:0f:2e:bc:0f:89:12:11:85:94:a8:7f:14:f7:ad:
0e:67:52:4c:ea:82:33:ca:03:15:13:e9:6e:32:d9:a6:d7:59:
0b:ae:ef:f9:cd:71:b3:fd:2e:6b:e1:ed:4d:f7:c2:59:32:3d:
ea:07:4d:a7:30:57:0c:89:74:d3:85:12:b2:ce:f3:67:fd:ea:
ac:1a:c5:1e:d4:22:5a:e4:a1:c7:9b:74:bc:ea:0a:0b:62:06:
19:19:08:b0:c7:32:fb:48:f8:91:29:07:72:07:c2:9c:98:9d:
7e:ba:aa:81:b4:0e:36:e7:ff:b7:83:08:02:44:ea:f1:f8:46:
7d:56:32:f1:7b:35:a1:fc:63:5d:ed:09:60:c5:8a:b1:d1:4e:
9c:16:b3:b7:89:fa:51:12:14:12:ac:54:15:db:66:36:34:f6:
9b:5f:53:71:ea:5a:a7:db:b2:e5:50:c0:bf:1c:25:f9:a2:08:
46:5e:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:52 2026 by rpki-client