Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier: Wo5l0wyxmnataRY1YKoSTUmdzXViVNaP9AWFK+p2PZY=
Subject key identifier: 97:71:21:46:36:08:61:18:22:E6:07:20:87:E1:C8:CD:44:E5:0D:E4
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial: 019CAC0FEF4A5DD884889A7F4BD0A68D7691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number: 0421
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: Zjmote/j/0c4IdFxu5tRMYEAaBxMPI7MnmQ9gq0y8Zg=)
2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ef:4a:5d:d8:84:88:9a:7f:4b:d0:a6:8d:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=977121463608611822e6072087e1c8cd44e50de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:d2:48:42:f6:d3:9c:d8:ca:fb:77:61:02:
8f:e6:b3:2d:c8:db:e6:c3:28:40:75:6b:aa:45:e0:
a2:8e:e7:e6:5e:c8:3e:e8:c2:f9:97:18:c2:f3:7b:
89:2a:8f:36:39:a2:89:cd:bc:5b:9b:24:ac:44:ed:
33:3b:28:f7:d8:34:0d:34:1d:16:30:21:7f:e7:ff:
06:8d:36:7a:cf:3a:c8:db:46:43:3c:32:8a:3f:5a:
1b:92:c0:83:6e:0b:3a:26:6c:d0:de:1e:4a:6d:7b:
83:60:f2:66:61:7c:6a:40:bb:9e:49:70:55:75:53:
41:ad:bd:25:77:17:b5:9c:08:0a:0a:a4:b4:99:1b:
86:36:d8:72:91:58:41:3a:af:1c:89:77:c4:b3:40:
82:41:50:ac:0c:a9:43:21:c4:f2:e9:46:56:c9:48:
c1:f3:6f:6f:a6:7c:0e:98:d6:35:6d:59:59:9f:55:
65:d5:26:d6:b5:3a:6a:ee:46:7f:da:1c:ab:39:cb:
42:62:9d:a6:28:66:41:23:1f:b3:97:f6:a1:b2:6b:
6a:93:c5:23:2c:06:60:b1:b9:13:65:a5:3f:a6:4d:
2a:31:43:07:64:13:cf:1e:f7:8f:62:5a:96:7e:dd:
7c:51:c1:18:70:77:f9:c7:f7:fa:e5:0c:a0:50:ca:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:21:46:36:08:61:18:22:E6:07:20:87:E1:C8:CD:44:E5:0D:E4
X509v3 Authority Key Identifier:
keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:73:e7:a6:50:de:7c:e0:14:7b:18:f6:76:24:08:c7:db:24:
ab:fb:8c:3f:e9:11:b8:76:ba:35:97:16:af:b2:38:85:e2:6a:
63:dc:99:60:bf:20:ea:20:0b:55:c5:9a:93:5d:b4:9f:92:a8:
58:7f:17:45:d2:01:8d:cb:40:d7:62:ee:5b:62:27:46:3c:15:
9d:29:df:ab:8b:e6:3d:e2:8e:e0:2d:99:1d:ce:38:96:92:78:
11:a2:15:77:1b:c9:50:85:0e:9e:d5:f5:ef:84:11:b0:ce:05:
5d:fe:1b:4a:eb:74:1b:ae:d8:b2:77:9f:c4:84:3f:d6:6e:0c:
4a:c4:f6:f1:57:7a:c3:2d:a8:97:43:33:12:91:56:97:39:a5:
04:a3:64:22:7c:13:fb:0e:cb:ef:01:52:4b:86:41:2b:0e:d5:
ce:93:2d:dc:af:1f:6e:98:fe:56:8e:d9:3e:98:49:c7:01:14:
f7:e4:e3:b9:55:04:ca:d3:75:69:1d:b8:13:53:eb:9f:c4:9a:
61:4d:31:b0:4b:c7:54:fc:16:90:06:1f:7d:ac:3d:90:0c:3c:
e7:4e:2a:5e:6e:76:4e:2f:bc:fb:26:1d:c7:da:c0:4d:ca:37:
25:87:3b:22:54:e0:ca:13:77:10:2f:a9:bb:87:bf:48:51:e5:
39:ff:c8:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+9KXdiEiJp/S9CmjXaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTRjZmU3ZjQ3ZjUyNDY0NTQ1YWRiYjBiYmM0ZDMzNDc4
YWFlYjIwHhcNMjYwMzAyMDEwMDUxWhcNMjYwMzAzMDEwMDUxWjAzMTEwLwYDVQQD
Eyg5NzcxMjE0NjM2MDg2MTE4MjJlNjA3MjA4N2UxYzhjZDQ0ZTUwZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ/SSEL205zYyvt3YQKP5rMtyNvm
wyhAdWuqReCijufmXsg+6ML5lxjC83uJKo82OaKJzbxbmySsRO0zOyj32DQNNB0W
MCF/5/8GjTZ6zzrI20ZDPDKKP1obksCDbgs6JmzQ3h5KbXuDYPJmYXxqQLueSXBV
dVNBrb0ldxe1nAgKCqS0mRuGNthykVhBOq8ciXfEs0CCQVCsDKlDIcTy6UZWyUjB
829vpnwOmNY1bVlZn1Vl1SbWtTpq7kZ/2hyrOctCYp2mKGZBIx+zl/ahsmtqk8Uj
LAZgsbkTZaU/pk0qMUMHZBPPHvePYlqWft18UcEYcHf5x/f65QygUMo6GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdxIUY2CGEYIuYHIIfhyM1E5Q3kMB8GA1UdIwQY
MBaAFNLkz+f0f1JGRUWtuwu8TTNHiq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMt
OGYyMzFmNzMxN2I5LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMtOGYyMzFmNzMxN2I5
LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHPnplDe
fOAUexj2diQIx9skq/uMP+kRuHa6NZcWr7I4heJqY9yZYL8g6iALVcWak120n5Ko
WH8XRdIBjctA12LuW2InRjwVnSnfq4vmPeKO4C2ZHc44lpJ4EaIVdxvJUIUOntX1
74QRsM4FXf4bSut0G67YsnefxIQ/1m4MSsT28Vd6wy2ol0MzEpFWlzmlBKNkInwT
+w7L7wFSS4ZBKw7VzpMt3K8fbpj+Vo7ZPphJxwEU9+TjuVUEytN1aR24E1Prn8Sa
YU0xsEvHVPwWkAYffaw9kAw8504qXm52Ti+8+yYdx9rATco3JYc7IlTgyhN3EC+p
u4e/SFHlOf/I/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:02 2026 by rpki-client