Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: caPIIMwSczZGs9alODIhTZ/NgHriQQOVpLBQoKpxki0=
Subject key identifier: 43:0E:7B:FA:87:79:C7:A6:31:AF:A7:BD:EB:04:49:AE:24:A8:42:1D
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 01A0D7CCCCC8B22EBD0F28DBD6320CEA778D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 11D6
Signing time: Fri 25 Sep 2026 09:01:58 +0000
Manifest this update: Fri 25 Sep 2026 09:01:58 +0000
Manifest next update: Sat 26 Sep 2026 09:01:58 +0000
Files and hashes: 1: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: EkK6FsLqEsGHztt2tsnh7pNbs3X1o1jxXddKD+0Lpa0=)
2: WrNQoDwnfoyel6qkeQLmIfknMe4.roa (hash: Zl9GWfOo6FfCVlawFyOWUS5iFXY5ABm6XsSvvOB7V1M=)
3: idlOCTZeLer70Tvy8HG_eFHIj_A.roa (hash: OxjINEWNa+j5OovsQN+Iq8z65GnsnPtmn9axTiZoZlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:cc:c8:b2:2e:bd:0f:28:db:d6:32:0c:ea:77:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Sep 25 09:01:58 2026 GMT
Not After : Sep 26 09:01:58 2026 GMT
Subject: CN=430e7bfa8779c7a631afa7bdeb0449ae24a8421d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:a9:e6:04:cc:22:25:45:38:76:77:74:ed:
d0:1f:8d:35:af:d6:96:4b:f9:40:0f:9d:4d:cd:7d:
f3:35:9d:84:52:e4:52:0d:c5:8e:e2:62:20:ce:36:
f2:c4:32:63:6d:16:6b:de:11:b2:1a:ed:cf:c2:e8:
28:40:35:5e:23:f5:d6:5b:c9:7e:4a:80:fa:0c:cd:
56:ed:cc:71:bb:c4:8f:0b:b4:80:f9:e7:d7:11:81:
44:d4:18:66:a3:16:1b:22:d5:e0:52:51:ca:d7:43:
61:11:29:91:49:89:af:52:90:8e:9a:db:86:24:d0:
0d:91:d2:24:d9:fb:20:5e:fb:52:da:ae:89:b8:d0:
f7:bd:0c:1a:68:2c:35:36:ab:2f:6d:d8:14:cd:00:
98:40:8f:02:da:6f:96:62:d9:88:52:2b:df:75:6b:
55:1b:1b:ae:96:77:e9:a1:db:88:96:d1:55:cb:2c:
e0:ef:65:4b:a5:5b:16:40:66:d8:d3:79:21:d0:8d:
48:30:cc:ef:dd:eb:b7:20:89:03:ff:da:af:09:aa:
fe:0f:92:1c:ad:b4:4a:22:17:9d:f0:57:54:58:00:
de:55:61:51:0a:e4:6e:c5:1b:50:65:ba:8b:8e:7c:
c2:10:93:a9:b5:e8:7b:0f:83:7c:9a:f0:8e:61:f1:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:7B:FA:87:79:C7:A6:31:AF:A7:BD:EB:04:49:AE:24:A8:42:1D
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:14:79:88:a3:e6:74:6c:e2:43:86:88:82:2b:df:c1:9c:b7:
d5:b7:c8:ca:d1:22:03:26:b2:34:95:4b:a7:5b:4a:f6:43:a0:
a0:d1:2a:6c:03:72:bd:92:29:fa:4e:86:eb:8e:e6:5e:21:68:
05:46:0b:ae:5f:e4:6c:eb:99:8a:d4:2a:8c:6d:3a:80:00:a1:
a2:f6:bb:43:bd:fc:c8:ff:1c:ba:ca:7d:b5:75:4f:cc:36:9d:
6a:a5:3d:28:ee:8f:a6:7c:fe:aa:a9:85:31:1e:ea:2c:c8:0b:
53:7c:a6:95:4a:1e:08:8a:61:50:8f:f7:61:16:90:a3:a8:d8:
21:ee:af:72:43:b4:4d:f9:c4:d2:21:8f:70:9d:38:22:95:b4:
fa:80:d7:14:36:20:83:99:c4:97:cf:4b:be:5f:d6:e6:9c:c9:
93:67:fc:32:65:24:94:54:d4:c7:06:2c:21:0a:74:31:e6:ba:
06:b5:29:bb:ca:b2:b2:be:3d:5a:45:cb:4a:49:93:38:65:4f:
e0:a9:a2:5f:f5:d1:be:6b:b8:74:6d:87:5d:a1:87:17:9f:90:
16:32:cf:c1:7e:bb:a1:e3:27:72:15:7b:e5:2d:c3:a5:20:28:
fa:1b:a5:29:91:e5:a3:45:c8:33:05:d6:4e:e4:2e:c3:06:b2:
f2:e9:cd:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzMzIsi69Dyjb1jIM6neNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzI2ZmFiYjEyNTZmYTAyMjc3ZTVlZTAzNGI3OTkxZmYz
MTg1YTUwHhcNMjYwOTI1MDkwMTU4WhcNMjYwOTI2MDkwMTU4WjAzMTEwLwYDVQQD
Eyg0MzBlN2JmYTg3NzljN2E2MzFhZmE3YmRlYjA0NDlhZTI0YTg0MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAGp5gTMIiVFOHZ3dO3QH401r9aW
S/lAD51NzX3zNZ2EUuRSDcWO4mIgzjbyxDJjbRZr3hGyGu3PwugoQDVeI/XWW8l+
SoD6DM1W7cxxu8SPC7SA+efXEYFE1BhmoxYbItXgUlHK10NhESmRSYmvUpCOmtuG
JNANkdIk2fsgXvtS2q6JuND3vQwaaCw1NqsvbdgUzQCYQI8C2m+WYtmIUivfdWtV
GxuulnfpoduIltFVyyzg72VLpVsWQGbY03kh0I1IMMzv3eu3IIkD/9qvCar+D5Ic
rbRKIhed8FdUWADeVWFRCuRuxRtQZbqLjnzCEJOpteh7D4N8mvCOYfE9/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMOe/qHecemMa+nvesESa4kqEIdMB8GA1UdIwQY
MBaAFFEyb6uxJW+gInfl7gNLeZH/MYWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUt
ODdhM2YzYjMxMTUwLzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUtODdhM2YzYjMxMTUw
LzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBR5iKPm
dGziQ4aIgivfwZy31bfIytEiAyayNJVLp1tK9kOgoNEqbANyvZIp+k6G647mXiFo
BUYLrl/kbOuZitQqjG06gAChova7Q738yP8cusp9tXVPzDadaqU9KO6Ppnz+qqmF
MR7qLMgLU3ymlUoeCIphUI/3YRaQo6jYIe6vckO0TfnE0iGPcJ04IpW0+oDXFDYg
g5nEl89Lvl/W5pzJk2f8MmUklFTUxwYsIQp0Mea6BrUpu8qysr49WkXLSkmTOGVP
4KmiX/XRvmu4dG2HXaGHF5+QFjLPwX67oeMnchV75S3DpSAo+hulKZHlo0XIMwXW
TuQuwway8unNDw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:18:38 2026 by rpki-client