Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
File: utha9jTxotgFi6n0KI_x63qohvk.mft (raw, json)
Hash identifier: lnurFZYlvQehgrXIf9dliLhFkwFdyiGKNnPhZwmDsbE=
Subject key identifier: A3:AE:FC:5B:BA:43:78:C0:53:02:C4:B9:DF:B4:72:7D:C9:42:0E:4C
Authority key identifier: BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9
Certificate issuer: /CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
Certificate serial: 019FA97527E0825EFCF550F249643EFEC3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
Manifest number: 9B
Signing time: Tue 28 Jul 2026 16:00:55 +0000
Manifest this update: Tue 28 Jul 2026 16:00:55 +0000
Manifest next update: Wed 29 Jul 2026 16:00:55 +0000
Files and hashes: 1: gaSZujKtw_TRe60U8Rnxea0EvBM.asa (hash: Mx72IAP+duu9B/1aglZjeRt4lAwa8z+CCHH5CFrPl8g=)
2: utha9jTxotgFi6n0KI_x63qohvk.crl (hash: oDAgfgIqv2NilYejoFcCiQ4LgT7iTV3GgjiUqP/oJjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:27:e0:82:5e:fc:f5:50:f2:49:64:3e:fe:c3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad85af634f1a2d8058ba9f4288ff1eb7aa886f9
Validity
Not Before: Jul 28 16:00:55 2026 GMT
Not After : Jul 29 16:00:55 2026 GMT
Subject: CN=a3aefc5bba4378c05302c4b9dfb4727dc9420e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:43:58:26:06:f5:fc:09:16:4a:c2:7f:c4:
57:c1:ba:da:77:17:44:99:14:17:99:ac:de:f9:12:
7c:a7:c6:57:67:2e:a9:37:9d:65:d0:f7:12:6e:1e:
76:2a:0f:9c:14:29:07:0b:49:1c:51:12:94:6e:0c:
49:14:30:77:3e:a3:a2:7a:4e:e3:2b:ae:58:7a:f1:
f2:8a:4a:96:80:0a:b3:e1:11:0e:ed:4d:07:4a:2e:
63:82:03:88:65:bc:a5:17:70:59:6b:c8:65:b1:e5:
98:18:53:e9:87:b9:d7:2a:60:1d:94:ee:95:82:1a:
ad:42:42:4b:93:83:aa:16:eb:48:dc:d8:ce:c1:a3:
88:7a:05:b0:92:24:b2:ac:1e:71:4c:e2:c2:d3:be:
b5:5f:96:78:c3:7c:c7:8e:fc:0f:3a:e4:e7:13:98:
55:d8:06:5f:ef:94:5d:33:a4:d0:19:07:b3:f2:64:
c2:eb:97:f0:78:d9:a0:e2:4e:f6:52:11:65:99:d5:
93:db:b3:29:cc:8f:e2:c9:99:54:23:51:5f:af:e9:
c9:49:67:8c:bf:3b:e7:2a:25:34:75:bb:dc:53:6c:
1b:1a:9c:97:78:c0:53:35:51:64:4a:ae:5d:2d:49:
33:2c:c4:f0:d4:b0:36:31:64:7c:ed:dd:56:5f:a0:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:FC:5B:BA:43:78:C0:53:02:C4:B9:DF:B4:72:7D:C9:42:0E:4C
X509v3 Authority Key Identifier:
keyid:BA:D8:5A:F6:34:F1:A2:D8:05:8B:A9:F4:28:8F:F1:EB:7A:A8:86:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utha9jTxotgFi6n0KI_x63qohvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5306b6-547c-49ef-8a64-3901da99fc8a/1/utha9jTxotgFi6n0KI_x63qohvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:21:89:b0:fc:25:3b:32:5a:69:cd:af:e2:e4:51:79:65:c4:
e0:4e:a8:05:5f:1b:43:32:d4:83:ad:d0:89:5c:9e:2b:14:1f:
ad:dd:a6:c4:d4:80:9a:53:86:61:b5:4d:7a:47:92:52:04:68:
c1:f0:18:ec:ec:fd:69:e2:df:9f:17:62:68:05:c9:7e:17:c5:
38:59:62:86:2b:5e:0c:f7:66:77:82:c6:0d:17:66:62:cf:19:
ce:30:56:84:11:52:97:6e:ba:5b:f9:ce:08:c7:62:59:8a:f9:
2d:88:b3:96:53:ac:14:bc:28:f7:8d:66:0a:e8:10:c8:e7:c3:
2e:96:5f:34:db:a3:c4:46:81:87:f3:53:7e:93:1b:1d:ec:c1:
06:7c:e1:56:06:68:45:8e:67:0b:18:d6:88:b4:11:0b:3b:2d:
47:aa:87:17:5a:23:62:de:cb:3a:78:ea:77:dc:72:d0:8b:6b:
11:26:75:d8:48:97:c8:43:cd:ab:ef:54:32:61:ea:9f:5b:b9:
21:1b:0c:6a:6d:4b:7c:fb:a0:2e:1c:ba:31:52:4a:98:cf:14:
a9:b1:64:50:5f:2c:97:0f:1c:f7:95:49:db:a3:2e:f9:2a:7e:
52:fc:bc:5b:d8:22:75:28:1c:04:1a:4b:a9:99:ae:47:0b:2c:
ff:c5:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:16 2026 by rpki-client