Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: k3IPIpJS5NYReuo7hODrSjaER3DAwp4Koen2Nc5dJcA=
Subject key identifier: 78:70:05:6C:89:C9:6C:A3:61:97:81:2D:D0:08:1E:2C:0F:6C:8F:87
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 019D27E038940C33F6B5B73EC8D0A5BF54F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 141A
Signing time: Thu 26 Mar 2026 02:01:39 +0000
Manifest this update: Thu 26 Mar 2026 02:01:39 +0000
Manifest next update: Fri 27 Mar 2026 02:01:39 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: uReuzknOt7xTT6BO8iLI1zHGQa7+MndX7U2Okt8O34Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:38:94:0c:33:f6:b5:b7:3e:c8:d0:a5:bf:54:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Mar 26 02:01:39 2026 GMT
Not After : Mar 27 02:01:39 2026 GMT
Subject: CN=7870056c89c96ca36197812dd0081e2c0f6c8f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:f5:80:b8:07:90:6b:d0:a8:1b:31:3a:76:
32:7c:88:93:7c:94:47:48:6a:c6:23:64:68:f1:89:
83:7a:49:c4:e2:9a:6f:9c:8d:42:b6:bc:a8:a5:51:
37:cf:59:3d:b7:38:c0:63:56:5b:01:80:c4:a4:fd:
0b:f9:da:fa:3f:34:bf:b2:4e:60:80:04:67:95:77:
64:41:47:fe:cc:4d:10:8d:a0:b9:c7:1e:37:86:77:
d6:21:4e:72:6d:cd:24:f1:7c:df:dd:ba:0a:a5:7c:
cc:e4:df:0b:ea:2b:ee:cb:52:a0:f4:d5:b7:ca:33:
48:7b:86:d9:f4:d6:79:76:15:ee:8c:4d:df:f1:ee:
c6:f1:13:c8:05:ac:d6:c9:fd:20:fe:14:3b:9d:ff:
6f:4a:4d:19:1f:94:30:c8:e7:85:a6:30:5f:5e:e7:
5d:55:0c:03:40:60:25:80:92:20:da:fa:27:02:3b:
25:56:43:3a:56:c2:ca:c4:f0:36:52:8e:43:43:ef:
df:e5:1f:fb:cc:1a:44:f2:95:40:5a:09:23:75:c8:
a0:26:cc:80:91:83:6c:7b:0d:37:3d:c4:2d:d1:2b:
91:b4:65:14:a2:61:99:42:f6:85:c7:ba:d7:64:d7:
77:1f:a8:e4:90:a4:af:2b:e6:7c:7e:fd:d8:d3:33:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:05:6C:89:C9:6C:A3:61:97:81:2D:D0:08:1E:2C:0F:6C:8F:87
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:22:6f:45:cd:34:b3:6f:14:ac:fc:ba:61:e5:bc:ae:b9:1f:
6f:4c:51:4c:00:d4:a7:77:38:af:09:6c:88:fa:ae:61:a4:94:
39:1b:8d:29:7d:f0:6f:ba:4b:b5:06:91:db:ae:67:30:8e:1e:
3e:a5:b2:69:8f:78:da:b1:df:bd:a7:7d:0f:aa:9c:f2:e2:ff:
aa:48:e5:13:70:3e:e9:06:2c:66:15:d9:f4:e9:f9:27:36:d5:
65:14:9a:5e:c7:10:4a:f9:2c:17:d0:c5:1a:17:23:08:06:65:
25:80:f4:18:c3:2d:3d:1c:35:13:80:14:19:5c:3d:b9:96:05:
62:8d:b0:1c:8e:b1:bf:91:f9:43:5d:77:ee:02:c3:2a:c9:b7:
9e:28:62:0b:b6:cb:6f:76:03:2a:61:c9:e7:aa:90:b2:4a:c9:
0f:d0:e9:68:13:6c:06:ff:61:a2:a7:f6:c2:46:0b:be:f0:33:
c2:19:a1:ad:06:a4:50:d7:a3:b4:03:f4:8b:84:70:08:8f:7e:
79:67:20:4f:02:25:b7:3e:26:a7:02:84:26:3f:4e:09:26:ee:
54:74:47:87:5c:fb:b0:16:b8:cd:3a:2e:52:b9:a8:76:e1:fb:
72:4c:23:0c:77:ad:2b:a9:99:df:df:03:ca:3c:0c:97:44:0f:
69:23:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:47 2026 by rpki-client