Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier: Xsg4BXvNnFxKHa98vAhTwyEqk9bZEmVLIsPPIZm1+Sc=
Subject key identifier: 15:26:6D:F2:24:94:76:E4:DA:0A:C3:66:9B:12:99:32:76:17:31:24
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial: 019D9A3ED7B12E90835853C03DFD9F994224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number: 139D
Signing time: Fri 17 Apr 2026 07:01:42 +0000
Manifest this update: Fri 17 Apr 2026 07:01:42 +0000
Manifest next update: Sat 18 Apr 2026 07:01:42 +0000
Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: a0UjSiWTsu87fBOEMnbCFjbkQT1hHvQQWli4CzmNEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d7:b1:2e:90:83:58:53:c0:3d:fd:9f:99:42:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
Validity
Not Before: Apr 17 07:01:42 2026 GMT
Not After : Apr 18 07:01:42 2026 GMT
Subject: CN=15266df2249476e4da0ac3669b12993276173124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:71:c9:93:d5:97:fc:00:13:72:d7:e3:29:
8a:71:0d:85:e4:cb:86:24:e9:8c:e9:01:1b:85:dc:
96:ae:cd:4e:c8:0a:ed:01:39:7f:b0:e2:54:f6:b1:
1e:5b:55:a1:54:78:a6:bc:e7:6e:a5:a7:2a:c5:05:
e0:d0:87:c1:75:30:2c:08:db:ea:9f:7a:25:a2:ac:
8f:53:47:9a:7c:4b:40:1c:d9:5d:20:0e:42:8e:e4:
e9:79:ea:da:2c:56:e8:e1:8f:de:28:ef:7a:52:f7:
49:6a:cd:f1:3a:f6:87:18:92:2a:77:d2:f4:03:23:
85:68:36:59:65:1c:e1:13:28:27:aa:46:0b:2e:56:
10:83:b0:47:57:02:ea:b7:e2:5f:51:4f:72:f9:ae:
95:5b:95:3c:de:02:75:b1:0d:a3:65:1a:72:b7:32:
ce:98:67:fe:0c:ab:b7:03:40:0b:be:d7:44:9e:c1:
af:0c:85:1a:60:d8:98:20:85:13:7b:9a:90:e9:b0:
9e:b1:3f:b4:d1:03:f7:67:6d:64:02:13:28:ed:3c:
49:54:b4:ff:c4:aa:e3:07:43:d3:07:9a:68:74:c3:
e8:a2:9f:4a:60:66:8b:27:af:a7:f3:46:e9:96:03:
2e:cc:a1:db:33:cc:46:f9:6a:70:d0:a0:08:fe:85:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:6D:F2:24:94:76:E4:DA:0A:C3:66:9B:12:99:32:76:17:31:24
X509v3 Authority Key Identifier:
keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f8:2a:d5:58:2d:c3:76:31:3b:d8:c6:97:aa:21:2b:37:d3:
81:58:e7:0a:9c:5b:70:9a:9e:ff:ca:0b:66:b0:02:bc:f5:60:
a3:ea:4e:00:36:f8:87:a7:25:c7:72:a9:1c:3b:c5:3b:68:57:
57:16:1c:87:21:ce:fb:19:19:a1:55:f1:63:43:46:14:47:5b:
a5:5d:92:64:2a:5f:56:e0:93:46:fc:67:47:f6:f2:1e:dd:08:
32:e8:c2:8f:d0:0b:46:d3:9f:c9:c1:54:4f:04:89:16:2b:eb:
dd:eb:19:6f:07:e4:82:22:0f:24:56:6b:a1:8b:50:54:2e:9b:
f4:36:f4:9c:c6:80:6f:d5:df:bf:04:c2:da:4e:0f:16:7b:48:
bc:c4:0e:a9:8e:8c:22:35:46:c0:05:bb:42:a6:c7:3f:ee:ec:
21:a4:40:78:6d:8b:63:0b:13:40:78:41:0b:19:b1:7f:a0:7d:
f7:bc:eb:ef:88:09:7c:7e:8a:40:1a:e0:fc:14:a1:02:e4:3f:
76:2b:ae:da:d4:e0:0c:c8:19:7a:40:ee:f5:d5:a5:cc:81:d0:
f2:40:ff:ef:72:2b:df:a0:eb:ff:f2:e2:82:c7:73:de:c5:4e:
da:3d:d9:c4:a0:f5:51:3d:2b:8a:24:5f:50:af:a3:8b:de:52:
16:2f:00:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:13 2026 by rpki-client