Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
File: uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json)
Hash identifier: VE0pma1Fnv3Z3NI50XUo8lWwvKAAUaESRsk7vtfNDDY=
Subject key identifier: DD:33:8A:48:2F:4E:C2:21:4A:9B:1A:11:E6:DD:98:FF:83:99:B2:B0
Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43
Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
Certificate serial: 019CAE6BF684A085224C05951D2516DA818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
Manifest number: 0AF9
Signing time: Mon 02 Mar 2026 12:00:36 +0000
Manifest this update: Mon 02 Mar 2026 12:00:36 +0000
Manifest next update: Tue 03 Mar 2026 12:00:36 +0000
Files and hashes: 1: OLJzyjdEnpFoCqzcRr-2whD4cZw.roa (hash: nQWtfqNzr6fa7Z+xPVeAmqrV/E7CMaeD5oxb6Sg1qY8=)
2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: UF8kf9zh42j/ioiq1DRnUVHkES22EspQ6iue0Fb6sjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f6:84:a0:85:22:4c:05:95:1d:25:16:da:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
Validity
Not Before: Mar 2 12:00:36 2026 GMT
Not After : Mar 3 12:00:36 2026 GMT
Subject: CN=dd338a482f4ec2214a9b1a11e6dd98ff8399b2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:62:a5:67:06:cf:f5:1e:3a:d9:da:74:86:
e1:18:26:d9:ec:16:e7:2b:2c:81:55:83:c0:76:36:
b1:02:1b:93:b8:2f:88:b4:3d:c3:84:9a:d1:39:39:
5e:e5:20:d7:d9:6b:2a:c3:2d:5f:e4:76:06:f8:71:
2c:0d:70:7e:5d:62:fc:46:b1:10:96:75:93:6e:c8:
e1:d3:53:e0:03:d9:e0:56:36:2f:1e:12:32:cc:c6:
ae:19:6d:79:98:35:1e:f3:c6:1e:ef:a3:aa:2a:ce:
65:54:ae:06:5b:c5:e4:49:96:b4:cb:50:59:d0:4d:
96:2a:df:be:c6:d0:df:e1:1f:6e:2b:aa:64:48:82:
6b:c9:b4:b5:66:a0:c2:4b:3f:8f:08:c2:bb:2d:ca:
73:f8:1a:44:09:93:65:d3:9e:08:91:6a:ff:24:dc:
00:01:9d:23:22:a9:ff:b3:9a:97:24:1d:99:cf:59:
52:3a:1a:ca:f1:e9:2e:9c:8d:f3:8e:96:89:7f:2a:
2d:d1:58:1c:77:28:b1:3b:cf:b0:f5:6b:8c:58:6e:
23:e2:1c:f1:53:c5:90:ce:99:9e:f4:68:4b:b7:da:
07:75:6a:a7:78:3c:c3:94:fa:36:43:57:1e:6f:aa:
7a:b8:ae:37:2c:20:8b:7a:58:5f:62:0c:59:00:ad:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:8A:48:2F:4E:C2:21:4A:9B:1A:11:E6:DD:98:FF:83:99:B2:B0
X509v3 Authority Key Identifier:
keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1e:ee:7c:26:41:82:18:05:35:4f:cc:12:81:ce:80:55:93:
bc:cd:6e:73:c4:e9:ca:e1:b5:c7:e9:86:4b:4e:4f:5a:a5:f8:
10:2f:a3:0d:a2:a2:71:f7:69:15:3e:b4:a0:2f:47:ab:59:30:
c7:fb:92:d5:71:82:f4:7a:06:7a:e7:09:39:28:f7:c8:1c:80:
df:55:96:5d:ee:0e:58:db:94:32:8b:69:67:a9:57:d5:87:19:
41:fc:9f:f3:81:7f:9a:0e:a2:a8:3c:63:e3:c0:6e:4f:4f:9c:
74:93:40:a7:47:f8:29:8c:7e:87:46:3b:23:58:37:47:42:99:
c9:62:58:50:89:d4:f2:1a:bb:2f:71:08:a0:96:7d:fc:b7:4e:
e6:1f:6d:f0:00:3e:66:70:16:5d:e4:cc:e1:6a:d5:4e:b4:21:
7b:5a:fc:04:ee:43:19:74:7e:8c:56:8d:43:bd:9b:f2:72:80:
06:cd:41:f8:80:23:af:07:c4:99:5a:16:33:4b:f7:27:49:e6:
69:92:c4:dc:33:8e:34:1a:c6:e4:59:7d:59:10:a2:89:15:fd:
7b:cf:7c:f6:12:f3:22:e6:31:23:b8:74:0a:6c:bd:97:35:ac:
8b:37:da:3a:44:44:44:10:be:af:ca:df:f2:e4:1d:f2:96:46:
cf:8a:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:59 2026 by rpki-client