Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: wZLktPXECaSQmuFjuVwpsUM2MU8i6HuU5GrZFMaPkH0=
Subject key identifier: 95:9D:8C:02:D8:92:9C:FB:29:A4:E1:9F:2F:54:2E:D1:47:EC:B9:3C
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 019D9A3E27FE5EDE57C6AEBF3DCB97D69BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 1028
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: pIo34+4Sc7jbsdku6GXWZUXqf2kcAPj/u3UZcZ28b9g=)
2: idlOCTZeLer70Tvy8HG_eFHIj_A.roa (hash: OxjINEWNa+j5OovsQN+Iq8z65GnsnPtmn9axTiZoZlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:27:fe:5e:de:57:c6:ae:bf:3d:cb:97:d6:9b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=959d8c02d8929cfb29a4e19f2f542ed147ecb93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:42:47:02:64:a7:08:5b:2c:e8:fc:e8:c3:
a4:2f:57:c7:16:7d:17:af:8d:63:a1:42:ff:66:7f:
d3:45:62:a3:fc:a1:bc:56:6c:fc:67:d9:81:8f:cc:
04:1d:13:65:b3:61:dd:45:33:51:ae:e1:79:8b:a3:
86:5a:f2:41:35:34:f3:24:fc:a9:fe:a9:fc:ea:79:
90:c0:f9:71:f0:a3:b7:d0:a0:ed:95:65:70:a3:c2:
df:c4:4b:6d:da:f6:8e:c7:2d:d5:04:80:15:49:8f:
af:c2:e4:d0:cd:ad:97:89:cc:83:53:82:30:4d:3a:
f0:12:62:2f:87:66:7b:87:5d:3d:51:be:2f:a7:56:
e1:e1:ef:73:7e:78:a9:02:3e:9e:6f:83:d5:2f:e1:
34:d1:05:c3:3f:6e:69:08:01:4d:2e:14:9e:7a:a0:
60:74:20:25:ae:30:b7:73:57:2f:4a:cb:c2:ae:83:
84:ed:da:06:d2:fa:d9:d5:00:d5:51:b6:24:ba:e6:
76:22:04:93:13:81:50:09:01:f3:4c:7c:0d:cd:12:
95:42:fa:08:50:e6:3b:be:81:32:15:5f:0a:39:f2:
63:67:af:e7:11:2d:63:fa:25:d3:89:71:b2:85:a3:
04:fe:a8:4b:8d:6c:50:72:42:fb:14:b1:f5:92:f0:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9D:8C:02:D8:92:9C:FB:29:A4:E1:9F:2F:54:2E:D1:47:EC:B9:3C
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:dd:cb:cd:17:1b:26:69:fa:4b:e5:8b:6f:f1:8a:4f:9a:
8b:10:51:0c:c2:57:4c:11:62:ae:26:63:53:28:1a:a0:48:64:
0b:c0:b2:5b:d3:bb:5a:7c:0f:a1:42:16:44:ac:d7:3e:32:c3:
34:42:1e:ec:14:c9:dc:d3:c4:5c:42:cb:62:9b:c9:32:9d:e5:
e8:e6:13:be:7e:92:0b:4f:f3:39:de:ae:64:40:73:f5:3f:20:
a1:b0:48:24:05:77:d9:39:73:7a:75:29:9d:1a:6b:14:19:7c:
a6:dc:82:ae:8f:08:e9:fd:ad:34:93:67:19:2c:35:ac:b0:df:
a8:c9:49:da:64:45:3f:d9:57:c1:88:5e:45:ab:d9:7d:09:52:
34:66:bd:7c:dc:a1:8f:1c:a9:8f:41:16:a5:fa:48:83:2e:a5:
d1:1e:27:55:cf:22:59:97:b0:63:68:15:41:24:b4:cd:f4:65:
25:5c:73:ce:8d:0c:7f:00:07:43:7a:aa:e2:92:70:95:c8:1a:
77:02:c1:e9:e2:20:6f:91:05:29:79:61:17:3f:f9:98:a1:db:
4b:d8:10:74:89:bf:2c:e7:d5:1f:a3:60:a9:22:73:5e:9a:65:
d5:ed:be:81:82:cc:10:39:e0:82:04:f7:eb:1f:28:24:46:d7:
df:47:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:57 2026 by rpki-client