Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: 4A137YnXHa2FlSnRuctUcX0RKvxAZEe4dVuwagoEVPQ=
Subject key identifier: B9:BF:D5:0F:C5:41:A7:B4:E1:0B:7A:BB:3C:CA:BF:10:CA:E5:DC:1E
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 01A0C6D82F8DBD94BA5403F3D980A2FDDDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: 03F6
Signing time: Tue 22 Sep 2026 02:00:51 +0000
Manifest this update: Tue 22 Sep 2026 02:00:51 +0000
Manifest next update: Wed 23 Sep 2026 02:00:51 +0000
Files and hashes: 1: RXH1E0juuTjk09gdd34VSaLqezE.roa (hash: DZRkuPFfVpgIXoaL3urk2cfBtZs5W6fdoPmvj+H+iwE=)
2: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: t4XHYTGOJdNnAQGpmC6uQ2ExYmRwM6HcEIrJXGIcc2k=)
3: Yo8vYPryUnuVJotyGpiBSmoKzeY.asa (hash: ZYZGB8hDEmnzNSAscPvCGLkXXklvXiM5op3rNA3iy7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:2f:8d:bd:94:ba:54:03:f3:d9:80:a2:fd:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Sep 22 02:00:51 2026 GMT
Not After : Sep 23 02:00:51 2026 GMT
Subject: CN=b9bfd50fc541a7b4e10b7abb3ccabf10cae5dc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:87:9a:91:50:19:3f:45:2a:ba:83:2b:67:
8a:06:ae:82:99:76:5a:9e:64:89:3e:5e:67:82:b3:
f7:10:bf:f0:f7:3d:e0:f1:4c:c0:ff:16:f8:c5:c9:
82:54:40:9f:e6:5e:52:a8:26:9e:3e:9e:5d:64:57:
b7:f1:48:92:b9:18:75:68:ca:16:11:f6:a0:9d:95:
39:23:a5:d3:e5:23:f4:9b:92:6a:e4:63:e9:43:14:
13:63:d8:de:bf:3d:df:42:5a:c9:96:da:99:99:4b:
1e:a1:be:6b:13:20:53:6a:a4:38:b7:51:8b:5d:20:
e8:6c:38:e5:58:24:a0:06:27:d6:c7:da:08:38:04:
02:5b:45:ac:c7:af:ca:9d:68:24:dc:5e:e5:89:98:
3a:2e:5e:1b:99:1e:c8:92:a8:d1:77:75:98:9d:81:
56:86:f7:b1:df:66:e8:5c:2c:d5:3b:3e:0e:79:7c:
86:31:b1:b2:03:c7:d3:d2:98:45:61:42:b1:49:35:
42:4c:eb:77:2a:94:40:1a:8d:6e:fd:aa:e6:eb:54:
a5:51:86:f9:08:93:16:3e:66:ae:96:a4:4f:64:7c:
79:a4:d8:d2:bc:bc:9d:c1:ba:1f:71:13:a0:91:da:
3d:61:55:a0:95:6e:11:aa:76:db:2f:7b:56:8e:9e:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BF:D5:0F:C5:41:A7:B4:E1:0B:7A:BB:3C:CA:BF:10:CA:E5:DC:1E
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1a:30:f8:19:a9:6b:58:11:82:f3:ba:ec:60:73:74:d3:3a:
58:f8:0d:3c:b3:91:87:29:1a:91:60:76:17:9a:03:5f:82:b5:
84:9f:fe:43:9b:ea:e4:d0:9d:11:65:55:44:07:93:4a:04:b5:
6b:f7:6b:9f:e6:51:93:7c:93:9f:95:17:da:9c:e9:54:68:d6:
a6:b4:bc:57:d0:34:2d:96:fe:0b:7b:1a:c4:e7:e5:b5:6d:0c:
6e:a5:eb:a0:71:2a:a0:d7:8a:38:d1:40:09:28:5a:6c:71:99:
47:e9:9c:2e:6a:97:c1:d4:71:dc:17:53:53:3d:3e:36:ec:dd:
03:2a:b2:a8:2d:7c:ea:2e:b5:b2:5e:86:e7:f4:b2:6b:2e:b9:
99:80:cf:4d:2f:e1:8b:7d:16:36:7a:1f:a2:a1:1d:72:a5:8a:
48:35:c2:98:c4:73:44:99:5a:fa:b1:9b:90:67:a7:53:fb:11:
2a:3e:63:1c:66:96:a9:b3:e0:4d:c3:da:1d:58:90:81:6e:07:
cc:fe:7c:00:d6:1e:46:08:19:cd:56:6f:0e:06:67:db:b1:3c:
99:51:8c:98:25:d9:8e:e9:54:28:e5:93:64:e3:fd:af:01:b5:
6a:b5:23:c4:5c:c5:a8:68:e4:ff:80:5e:19:03:92:4e:1d:67:
63:63:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:08 2026 by rpki-client