Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: go086U2Sc3D023BRch/cVKJtEBGe6lqV4WR8l+wtCZs=
Subject key identifier: 11:CD:47:F6:61:E4:C1:F8:5D:4E:14:54:5F:CC:E2:81:98:C7:44:1E
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 019D284D64B8D71E94D14704BB3FD27CB7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 0FED
Signing time: Thu 26 Mar 2026 04:00:53 +0000
Manifest this update: Thu 26 Mar 2026 04:00:53 +0000
Manifest next update: Fri 27 Mar 2026 04:00:53 +0000
Files and hashes: 1: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: 1a19CtsXRaoguDsfHi9/yMl4ib3tan5u1GYpy9eoN20=)
2: idlOCTZeLer70Tvy8HG_eFHIj_A.roa (hash: OxjINEWNa+j5OovsQN+Iq8z65GnsnPtmn9axTiZoZlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:64:b8:d7:1e:94:d1:47:04:bb:3f:d2:7c:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Mar 26 04:00:53 2026 GMT
Not After : Mar 27 04:00:53 2026 GMT
Subject: CN=11cd47f661e4c1f85d4e14545fcce28198c7441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:8a:2f:e3:db:24:6a:d4:d5:f0:52:e7:3a:
9a:93:8c:e6:cb:50:41:1a:a7:ce:3d:68:6b:17:c9:
92:84:89:f6:83:08:5f:4e:51:26:1e:71:7e:f2:08:
93:7b:cb:4f:7b:df:c2:1f:ce:d9:4f:a0:4c:b4:a4:
81:c0:87:97:52:82:fd:6f:a6:1b:bb:47:bb:81:57:
50:46:1a:98:69:0f:4c:1f:02:1f:61:7e:93:1e:a1:
03:4f:de:23:b2:a0:36:6e:65:3e:23:30:25:01:7f:
93:49:f6:21:6c:82:72:93:89:a8:72:46:a8:0e:b5:
6e:ae:2c:79:1f:b6:e0:97:85:c4:2c:b0:a5:c0:5a:
8b:b2:b5:a9:0c:05:dc:a3:0b:d9:b0:57:09:16:3f:
74:05:35:2d:c8:a7:25:ac:41:6c:c3:29:aa:26:d1:
cd:d8:35:9a:e4:90:05:36:9d:e9:dc:75:fb:82:9f:
70:5f:d1:2f:19:77:94:a7:ec:3a:2b:53:7d:2c:bc:
1d:73:8a:91:54:4f:cc:c9:f1:80:1e:3f:2e:22:b7:
0e:42:07:59:5a:b9:76:f5:54:c6:b1:e2:03:fd:0c:
98:06:19:fb:51:82:6c:a9:9e:28:93:6b:5c:c1:34:
9d:59:65:e2:f9:14:8f:a1:0e:f8:33:00:05:75:c9:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:47:F6:61:E4:C1:F8:5D:4E:14:54:5F:CC:E2:81:98:C7:44:1E
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1e:f7:d0:c8:15:42:17:99:ea:ba:9a:d5:3c:cd:16:66:a9:
48:89:55:ee:98:4a:b3:1f:e4:ad:73:df:60:68:37:21:63:c4:
51:b5:04:5a:c7:42:10:62:b6:fa:c0:8b:df:86:90:05:e2:b8:
98:b8:a1:d6:c8:6a:8b:af:2d:ec:1b:d6:1e:8e:20:05:c4:30:
ab:07:7a:5e:ca:08:0b:ac:7c:a5:27:93:ea:09:8b:ca:9a:36:
05:b3:85:d5:a6:1e:5e:fe:08:2c:d2:ed:3d:ad:c4:1c:8f:c3:
0f:c0:8b:16:13:39:b5:29:0c:6e:69:d2:8c:cc:5b:9e:20:4a:
58:b2:c7:02:dd:93:ab:7f:07:c2:b5:fd:64:0f:18:ce:76:88:
ba:ec:0f:ab:f0:b1:1e:88:9c:ec:c3:0b:81:e6:28:e3:56:6c:
8c:5a:78:ad:65:92:65:86:0f:47:1b:c8:46:69:70:f8:cc:db:
84:06:55:21:a4:9f:f3:70:35:ad:4c:69:13:5e:a9:30:b0:23:
4f:0f:23:da:b8:a3:e7:83:5c:46:f1:57:c7:5f:cf:03:17:b6:
8f:14:37:92:fd:86:27:0c:e7:82:06:34:4d:44:01:08:11:81:
01:f1:2c:8a:bd:64:57:49:eb:72:c0:46:1d:bc:ed:b2:e8:00:
8f:d3:6a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTWS41x6U0UcEuz/SfLfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzI2ZmFiYjEyNTZmYTAyMjc3ZTVlZTAzNGI3OTkxZmYz
MTg1YTUwHhcNMjYwMzI2MDQwMDUzWhcNMjYwMzI3MDQwMDUzWjAzMTEwLwYDVQQD
EygxMWNkNDdmNjYxZTRjMWY4NWQ0ZTE0NTQ1ZmNjZTI4MTk4Yzc0NDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAKKL+PbJGrU1fBS5zqak4zmy1BB
GqfOPWhrF8mShIn2gwhfTlEmHnF+8giTe8tPe9/CH87ZT6BMtKSBwIeXUoL9b6Yb
u0e7gVdQRhqYaQ9MHwIfYX6THqEDT94jsqA2bmU+IzAlAX+TSfYhbIJyk4mockao
DrVurix5H7bgl4XELLClwFqLsrWpDAXcowvZsFcJFj90BTUtyKclrEFswymqJtHN
2DWa5JAFNp3p3HX7gp9wX9EvGXeUp+w6K1N9LLwdc4qRVE/MyfGAHj8uIrcOQgdZ
Wrl29VTGseID/QyYBhn7UYJsqZ4ok2tcwTSdWWXi+RSPoQ74MwAFdcmFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHNR/Zh5MH4XU4UVF/M4oGYx0QeMB8GA1UdIwQY
MBaAFFEyb6uxJW+gInfl7gNLeZH/MYWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUt
ODdhM2YzYjMxMTUwLzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUtODdhM2YzYjMxMTUw
LzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdh730MgV
QheZ6rqa1TzNFmapSIlV7phKsx/krXPfYGg3IWPEUbUEWsdCEGK2+sCL34aQBeK4
mLih1shqi68t7BvWHo4gBcQwqwd6XsoIC6x8pSeT6gmLypo2BbOF1aYeXv4ILNLt
Pa3EHI/DD8CLFhM5tSkMbmnSjMxbniBKWLLHAt2Tq38HwrX9ZA8YznaIuuwPq/Cx
Hoic7MMLgeYo41ZsjFp4rWWSZYYPRxvIRmlw+MzbhAZVIaSf83A1rUxpE16pMLAj
Tw8j2rij54NcRvFXx1/PAxe2jxQ3kv2GJwznggY0TUQBCBGBAfEsir1kV0nrcsBG
HbztsugAj9Nqvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:51 2026 by rpki-client