Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: rMS3NPk10hgH78+39yRZwd+MMLeLP3AEd90YSag3L1o=
Subject key identifier: FE:A5:8A:A7:54:B7:9E:63:30:91:50:8D:91:F7:49:32:AC:B3:B0:3B
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019D9A3E8872CDCFA0A527DF661A97E35B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0F3D
Signing time: Fri 17 Apr 2026 07:01:22 +0000
Manifest this update: Fri 17 Apr 2026 07:01:22 +0000
Manifest next update: Sat 18 Apr 2026 07:01:22 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: ZQX5miLmGIzWmExQ8yjXy4l0DLOLHqAHVE+/9Th2ShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:88:72:cd:cf:a0:a5:27:df:66:1a:97:e3:5b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Apr 17 07:01:22 2026 GMT
Not After : Apr 18 07:01:22 2026 GMT
Subject: CN=fea58aa754b79e633091508d91f74932acb3b03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:77:26:4d:04:07:ed:a7:24:d6:8a:fb:26:
5f:0c:fa:1b:89:f0:dd:87:49:93:6e:c9:1b:55:47:
ee:21:ba:a6:34:0f:d5:38:78:4f:32:77:41:3c:f6:
0a:97:32:2a:a2:69:b1:67:b1:60:b8:0a:a5:14:aa:
32:b9:72:f6:16:3b:84:5a:ef:f5:a0:89:ee:64:c8:
3c:32:f7:bd:e8:dd:ca:fe:1b:b6:48:14:11:37:f1:
9d:bf:b7:bc:6f:ca:3d:3d:a3:07:4b:36:d7:53:5e:
d4:95:00:e1:b8:88:8f:b5:06:0a:01:5b:e2:c5:0d:
71:56:5b:58:f8:95:0c:2d:3e:e9:5a:da:d0:c2:c3:
ea:7a:c5:3c:36:d4:df:8d:7a:67:71:d3:7f:a9:d7:
4a:63:a8:3f:09:ad:eb:58:ae:4e:e2:85:4c:17:a0:
9f:7a:e8:d0:09:05:79:f1:29:9e:c1:70:4a:b9:fd:
a0:92:e9:d8:54:70:50:67:69:9f:9e:ea:26:e9:d4:
18:eb:c3:a1:05:d7:5e:c4:22:f7:fc:fc:b0:97:67:
a3:8c:f5:68:c9:19:63:13:fd:32:c0:cf:37:24:23:
00:68:cf:f2:71:87:0d:6c:a7:c3:19:79:2a:ac:05:
54:5f:7f:c4:f5:0c:93:69:9c:df:2b:75:b3:ea:a0:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:8A:A7:54:B7:9E:63:30:91:50:8D:91:F7:49:32:AC:B3:B0:3B
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:32:32:f4:7d:5b:5c:b5:26:f6:4d:65:92:d9:00:d7:94:f7:
d6:4a:e9:9e:7a:74:cd:1c:0a:88:be:93:eb:cd:eb:f5:60:2a:
36:d3:35:99:35:ab:bf:eb:d1:67:e0:6e:72:39:dd:f3:9d:69:
39:6f:17:b7:48:dd:da:76:cf:c5:ae:42:02:09:2a:01:4b:de:
8f:7b:6e:b8:76:1a:e6:85:df:b5:fc:c2:2c:47:e0:36:f5:05:
0f:21:7e:aa:36:1a:db:ac:10:a2:ad:53:8b:09:9f:17:41:8f:
ce:db:7f:1f:ae:9f:1d:91:df:58:24:5d:9b:7e:2a:76:7d:41:
a9:7d:b4:a9:9a:c3:c9:0c:bb:33:dc:08:1b:d3:e7:81:91:53:
0c:24:9c:50:78:ca:90:90:b0:d0:91:30:ce:fe:0a:3a:fa:73:
89:12:68:a2:bd:dd:a0:7e:6f:94:52:14:0f:31:34:9c:a2:f9:
10:a5:85:76:a7:70:ad:6f:e9:ef:3d:1f:33:0f:bb:70:65:a5:
1e:e2:cf:ca:f3:c8:3f:74:fb:8e:3b:00:35:9b:c0:30:20:6c:
06:38:11:02:9f:b2:cf:d8:4c:6c:c5:74:70:80:9a:a2:8a:1e:
56:11:38:f7:ea:ee:ea:a8:e4:0f:fa:77:5e:6c:78:35:3f:82:
f0:72:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:15 2026 by rpki-client