Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: ZsHSQYo3un4Pq5t29o/14ODkFTxc+g1wMO4acF7rOgw=
Subject key identifier: 98:2A:8F:B2:9C:CE:1A:E3:94:0B:9A:09:5A:90:75:0F:CE:1D:0D:B5
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 019CAC46BD3BEA640E2B3E7CEFF569E05FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: JDSzrdVEBzCJF3K5CjH6O0sxsngB+CNvJUqqjm6dbCE=)
2: RINTWQU8O-dtVLISeiowSUIg1i4.roa (hash: mr0pYPWJuxdErynFbzmieVFUznI70KYCtpeAb0gQwOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bd:3b:ea:64:0e:2b:3e:7c:ef:f5:69:e0:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=982a8fb29cce1ae3940b9a095a90750fce1d0db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:d8:28:03:a8:12:a6:c5:27:f2:22:9f:e7:
73:62:36:37:97:6d:20:c3:fc:63:b8:eb:0b:a3:0a:
4b:1b:54:d9:2d:b3:77:ba:6b:09:72:fd:77:c0:52:
cb:57:f8:92:34:b4:7e:06:ee:1c:fd:11:81:2f:00:
2d:94:71:ca:75:f5:da:6d:aa:8d:19:c9:ef:bf:bc:
59:e0:5f:aa:4d:90:fc:2d:79:be:3d:db:e9:60:34:
e0:12:b9:5c:16:62:5c:b8:90:c9:54:14:7d:df:75:
59:f2:bc:8d:30:0a:58:6c:2a:a5:d9:28:64:ab:e6:
c5:9f:5e:12:fd:63:2a:5a:75:40:11:f2:55:93:47:
8e:3c:de:8b:5e:f5:da:3d:f5:ad:38:92:c7:06:bf:
d8:82:f1:f8:f6:5e:42:80:9c:7f:10:06:4a:9f:57:
74:8a:16:d8:59:8b:4b:7a:46:59:2a:70:ac:3d:27:
76:a7:32:f2:bc:38:01:15:ed:d7:d6:6f:5f:5d:f4:
8b:b7:5e:cb:7b:c9:eb:28:de:8e:99:27:40:bb:fc:
3c:a8:aa:9d:af:95:2f:38:5b:58:18:5c:a0:27:a8:
31:6e:50:d8:92:c4:8f:11:fe:41:8b:1d:9a:df:21:
92:6f:b3:a4:3b:e9:96:9e:ef:67:cb:38:31:d4:d4:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:8F:B2:9C:CE:1A:E3:94:0B:9A:09:5A:90:75:0F:CE:1D:0D:B5
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ba:67:57:7c:37:19:03:29:66:c8:71:6c:8c:77:2d:30:64:
95:1b:6d:ba:5e:0f:5f:13:7d:b4:cd:f6:e8:69:63:4c:bc:49:
e9:0e:8c:3e:f8:db:de:7e:dd:90:72:42:4c:a1:9c:4f:a6:72:
e7:89:13:02:a8:8b:3b:43:05:6c:0c:e3:c6:9e:13:c6:53:58:
6a:30:10:60:57:20:18:66:ea:7a:ea:8e:d2:10:80:67:a1:2d:
77:d8:06:87:7b:c8:f2:19:ed:d7:20:50:c4:a4:ff:1b:99:dd:
ce:ef:c8:1f:25:8e:ae:0a:8a:86:cc:2c:48:c4:93:61:3e:aa:
cf:fd:8a:fc:34:b4:36:f4:2b:21:5f:e2:fd:2c:c3:67:e7:04:
fc:57:68:1f:a5:6e:29:27:b8:0b:8f:96:5c:37:57:c6:87:28:
c1:2d:0b:bb:6b:ef:9b:cb:62:14:ab:79:a5:e5:25:46:ab:7b:
73:a5:f2:db:7c:51:a3:e9:f5:07:06:bb:e5:1a:ef:5f:e0:59:
e9:95:a6:3c:8a:81:a4:82:e7:0c:8b:0b:c1:64:71:ef:54:05:
95:82:6d:2a:fd:da:d3:66:55:6d:e9:51:6f:90:57:e4:05:5e:
4e:83:4e:3d:86:19:d3:a3:3b:d7:21:f6:b1:9a:08:fc:b6:45:
f2:06:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:30 2026 by rpki-client