Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: 6LNB60bUfwvW9oTHYxi5uOtTNWkDkHopnc0UowoZdCs=
Subject key identifier: 66:74:EA:B6:53:EF:27:07:49:B7:CC:91:F6:71:24:06:9F:81:DE:B7
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 019CADFE456350304758D0E66B60D3CE124B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 1624
Signing time: Mon 02 Mar 2026 10:00:48 +0000
Manifest this update: Mon 02 Mar 2026 10:00:48 +0000
Manifest next update: Tue 03 Mar 2026 10:00:48 +0000
Files and hashes: 1: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: LM8lVjkC7UELii1pt3CynAEqD1R5wuPXg1MFR5IQkUM=)
2: eFoLkSuYHSfJyZWDzIUZu8IRO1o.roa (hash: dD85celI+xdv/VzLzNSyQVejNzZ7b5z/nWIX6tyr6xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:45:63:50:30:47:58:d0:e6:6b:60:d3:ce:12:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Mar 2 10:00:48 2026 GMT
Not After : Mar 3 10:00:48 2026 GMT
Subject: CN=6674eab653ef270749b7cc91f67124069f81deb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:63:38:3d:56:50:9f:0d:28:86:9e:39:c2:
de:05:5f:68:7d:f5:1e:50:ca:79:c6:e4:30:ce:5f:
fe:ae:c4:16:27:73:3c:01:3e:9a:01:84:a2:ae:60:
d4:f4:9e:ae:14:3c:c5:ca:52:04:6a:fd:72:0d:72:
03:8e:6d:1d:2c:55:19:fe:35:1b:eb:94:a9:d7:28:
01:a7:70:b9:81:26:93:90:bb:6c:85:04:fe:3a:8a:
c5:44:81:c8:c9:a6:00:11:7c:c0:ef:0b:83:19:1e:
b6:d2:89:82:92:23:64:45:b1:e0:29:e6:8e:7b:40:
ad:f1:ee:27:49:f5:9d:34:85:69:44:57:c1:80:3e:
9f:be:53:40:3a:d0:e0:66:4d:8a:61:f2:9a:5f:e3:
86:84:8d:36:5e:fa:2b:c5:e9:33:b1:f7:ad:c7:25:
fc:74:82:26:3f:66:56:c7:c9:01:1a:e2:ca:75:48:
9e:0d:5a:cc:a0:07:05:79:56:72:11:72:d8:2c:eb:
70:82:37:e3:e7:c8:d3:ab:34:53:9e:ce:95:15:29:
33:62:43:9c:db:04:10:5e:44:a0:88:2f:51:bc:d7:
75:06:49:6a:df:45:e7:57:f7:36:b5:bb:0e:91:9a:
ba:be:2e:08:70:c6:e5:03:4f:3e:7f:69:99:c3:cc:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:74:EA:B6:53:EF:27:07:49:B7:CC:91:F6:71:24:06:9F:81:DE:B7
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:30:77:cd:e7:8e:ec:10:d7:5f:4c:0f:c8:82:9c:4e:a2:
f5:8b:b5:06:8d:f9:2d:42:de:9a:d1:28:b6:0a:8e:0e:91:f5:
62:93:e7:d0:57:56:65:a9:8f:3a:04:1f:17:63:88:56:ad:37:
ce:b3:91:b8:75:cb:7b:05:2c:62:a0:0b:f0:0e:34:35:ac:a9:
a6:4b:1a:ab:2f:68:04:f5:9a:75:97:82:48:e5:92:68:6b:7c:
c1:b9:8b:42:11:f7:a1:91:c9:f9:c3:92:af:28:d9:a3:ce:eb:
9a:b8:93:1b:cf:fd:ee:ef:f2:39:6a:c9:67:4c:96:5e:63:c1:
d2:6e:92:8c:0b:54:4b:b9:3b:75:2d:b3:23:bf:a6:54:eb:d0:
b8:ae:86:a9:68:dc:96:2c:c7:3d:8c:f8:98:80:ac:79:55:a8:
cd:14:de:00:66:e1:09:35:a8:3f:c7:c2:d5:65:da:65:04:7b:
00:bf:47:3c:96:65:9f:a3:95:b7:06:20:cc:b6:4d:7f:9e:0a:
54:0a:6e:89:c3:3d:16:b7:29:f5:87:e8:5b:ba:4f:38:dc:0e:
67:30:d2:57:68:d0:14:21:74:46:ba:0f:6a:ba:82:0f:aa:7c:
78:1f:30:63:41:be:cf:29:ac:9e:50:49:8b:8e:fe:9b:4f:1e:
ef:9e:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:01 2026 by rpki-client