Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: 9hdUKZKQCqgJN/hHgyKdKsuEXORWnVnMjxaGwVOItS0=
Subject key identifier: 8D:3B:2F:C0:F9:F7:66:54:AD:35:52:A7:3C:7B:2A:8A:FA:F4:11:E6
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 01A0D2373759C681BB00F97BA2167F59746B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 1849
Signing time: Thu 24 Sep 2026 07:00:29 +0000
Manifest this update: Thu 24 Sep 2026 07:00:29 +0000
Manifest next update: Fri 25 Sep 2026 07:00:29 +0000
Files and hashes: 1: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: sv//6cuTM1lb8q5QMGiCZ6AnRE3ZClrzoS3WLZjBhfo=)
2: eFoLkSuYHSfJyZWDzIUZu8IRO1o.roa (hash: dD85celI+xdv/VzLzNSyQVejNzZ7b5z/nWIX6tyr6xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:37:59:c6:81:bb:00:f9:7b:a2:16:7f:59:74:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Sep 24 07:00:29 2026 GMT
Not After : Sep 25 07:00:29 2026 GMT
Subject: CN=8d3b2fc0f9f76654ad3552a73c7b2a8afaf411e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:3b:0f:db:aa:7f:07:83:1d:43:a7:33:ae:
20:d6:a3:c2:ac:19:35:ee:2d:ca:b2:b8:ab:6e:c9:
0e:90:24:4c:b7:76:42:0c:4c:06:50:35:b5:71:c5:
ee:13:6c:02:f9:21:b2:d2:9a:3d:4b:cb:fc:2e:34:
8b:6c:94:b7:23:f8:94:56:3e:ff:61:98:79:0f:74:
d8:22:fc:53:38:72:0a:41:20:a7:5d:d7:2c:0f:dd:
2f:fa:75:28:9c:94:9b:98:f1:74:62:09:f3:0a:6b:
a9:fa:73:60:6b:f3:a5:5f:f2:0c:d3:cb:3e:77:f8:
b8:5f:19:92:9f:24:90:9f:a7:a7:05:35:e1:c0:59:
49:e8:e9:24:6b:14:09:c3:5d:47:36:5a:b0:ef:8e:
a1:b3:d1:da:67:4a:a5:f6:11:b1:b8:22:5f:8b:58:
18:f5:f9:64:bd:1e:e3:9e:c4:7c:3e:06:25:b5:ef:
57:51:e5:2c:9a:14:c2:68:9b:b3:8d:f6:5f:c3:cb:
28:cd:0d:09:a2:d0:77:dd:18:58:a4:3d:fe:95:be:
77:93:ff:fc:37:59:10:fc:7d:ad:ff:0b:75:3b:78:
18:fa:68:f9:55:eb:78:95:5f:c9:d1:7f:e9:1e:13:
12:1d:c7:43:42:1a:12:6d:ac:86:eb:a4:8b:e8:1e:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3B:2F:C0:F9:F7:66:54:AD:35:52:A7:3C:7B:2A:8A:FA:F4:11:E6
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0c:4c:2f:57:b0:73:83:05:a4:e2:a5:30:2c:77:38:db:08:
21:cb:23:1c:b3:c4:59:64:e4:34:ff:88:45:11:1d:0c:f8:c1:
7e:01:ed:ae:34:3c:33:a9:b2:3b:7d:75:1b:e9:0e:e0:87:7a:
19:d2:f4:1b:d2:02:c2:8b:cc:b6:10:d2:ed:0b:d4:76:ab:5e:
76:c4:41:86:c3:c1:a9:56:30:c6:f4:cd:0f:19:51:13:6b:b6:
78:c9:71:1c:00:40:48:cd:88:f7:c2:47:ac:c7:fc:42:71:c3:
ac:b6:0a:da:61:7f:82:e4:19:33:32:c0:f6:a1:6a:d1:5e:41:
8a:58:0c:b2:f8:b1:6b:03:5e:10:62:7e:17:88:2f:1e:36:d0:
1b:90:20:15:e8:35:f7:3a:35:ff:ea:14:bd:2b:8d:a3:ac:6d:
93:a2:99:30:dc:0f:d1:92:f9:9b:28:92:b0:d6:8d:83:97:ba:
b3:ac:3e:86:74:fc:f3:b4:83:ff:af:2d:4b:08:b2:19:23:ce:
01:41:a3:7e:d1:d6:dd:87:41:96:5b:53:06:e4:c9:4e:24:02:
8e:ec:ec:34:83:d1:c5:68:e9:af:dc:5a:bf:30:3e:7d:72:ca:
bb:3a:8c:24:c2:19:ae:8e:34:78:8d:87:5e:0c:95:ed:7b:52:
fa:eb:50:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSNzdZxoG7APl7ohZ/WXRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDY2MWE5NDhmMmJmMzQ5MGU4OWQ4MjUyZjJjY2M4NzQ3
Y2U1YzcwHhcNMjYwOTI0MDcwMDI5WhcNMjYwOTI1MDcwMDI5WjAzMTEwLwYDVQQD
Eyg4ZDNiMmZjMGY5Zjc2NjU0YWQzNTUyYTczYzdiMmE4YWZhZjQxMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmY7D9uqfweDHUOnM64g1qPCrBk1
7i3KsrirbskOkCRMt3ZCDEwGUDW1ccXuE2wC+SGy0po9S8v8LjSLbJS3I/iUVj7/
YZh5D3TYIvxTOHIKQSCnXdcsD90v+nUonJSbmPF0YgnzCmup+nNga/OlX/IM08s+
d/i4XxmSnySQn6enBTXhwFlJ6OkkaxQJw11HNlqw746hs9HaZ0ql9hGxuCJfi1gY
9flkvR7jnsR8PgYlte9XUeUsmhTCaJuzjfZfw8sozQ0JotB33RhYpD3+lb53k//8
N1kQ/H2t/wt1O3gY+mj5Vet4lV/J0X/pHhMSHcdDQhoSbayG66SL6B75XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI07L8D592ZUrTVSpzx7Kor69BHmMB8GA1UdIwQY
MBaAFFLWYalI8r80kOidglLyzMh0fOXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODct
ZGQ2M2YyMTVjNDM0LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODctZGQ2M2YyMTVjNDM0
LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAxML1ew
c4MFpOKlMCx3ONsIIcsjHLPEWWTkNP+IRREdDPjBfgHtrjQ8M6myO311G+kO4Id6
GdL0G9ICwovMthDS7QvUdqtedsRBhsPBqVYwxvTNDxlRE2u2eMlxHABASM2I98JH
rMf8QnHDrLYK2mF/guQZMzLA9qFq0V5BilgMsvixawNeEGJ+F4gvHjbQG5AgFeg1
9zo1/+oUvSuNo6xtk6KZMNwP0ZL5myiSsNaNg5e6s6w+hnT887SD/68tSwiyGSPO
AUGjftHW3YdBlltTBuTJTiQCjuzsNIPRxWjpr9xavzA+fXLKuzqMJMIZro40eI2H
XgyV7XtS+utQ4A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:15:49 2026 by rpki-client