Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
File: UtIFkjNg-Ly7PG8regneiX4hEuk.mft (raw, json)
Hash identifier: HgX89ifBoCj7rhpKTP9DTZFXGGuEosZksL1ogUhITKo=
Subject key identifier: 2E:13:C5:B0:C9:89:83:E0:52:8D:31:8C:4A:B3:A9:01:3D:F1:72:C6
Authority key identifier: 52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
Certificate issuer: /CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Certificate serial: 01A0DA95F221D062CAF56F5BC58A45F54013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
Manifest number: 4E
Signing time: Fri 25 Sep 2026 22:00:54 +0000
Manifest this update: Fri 25 Sep 2026 22:00:54 +0000
Manifest next update: Sat 26 Sep 2026 22:00:54 +0000
Files and hashes: 1: UtIFkjNg-Ly7PG8regneiX4hEuk.crl (hash: b9m1xBmGIqLhDYdTo6bmlVNdIyymxnvd2Q+epREaj9w=)
2: g6yrvOBeW6EKsF6uPz4qtt_DajI.roa (hash: /eXlPUvaL86WUGYjsxXCQYyeVUT9/VSJoeS28C++a+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:95:f2:21:d0:62:ca:f5:6f:5b:c5:8a:45:f5:40:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Validity
Not Before: Sep 25 22:00:54 2026 GMT
Not After : Sep 26 22:00:54 2026 GMT
Subject: CN=2e13c5b0c98983e0528d318c4ab3a9013df172c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:58:81:6c:5b:56:aa:34:c7:07:05:a7:c0:
0c:44:1d:f1:5b:a4:a0:56:81:cc:77:4c:6e:8f:e3:
79:75:3b:3e:a8:3e:ef:6f:99:2f:c3:18:1a:14:4c:
3f:5e:ef:72:21:71:f3:f5:52:c7:21:4a:d1:2a:3f:
66:63:8a:0f:f4:b0:ba:e9:48:06:b2:bf:4c:ea:98:
04:b6:ff:89:06:18:38:ff:b5:41:30:9e:c9:36:9c:
99:f9:7f:29:5c:b9:0f:a1:2f:57:0d:73:76:17:8d:
27:00:ca:eb:8b:92:96:57:99:71:a4:3e:2a:b8:6f:
78:54:af:7b:f0:3f:63:37:5f:e1:07:52:e8:3b:9b:
f9:d9:66:ea:ab:fc:21:f4:ae:17:c1:f2:6d:31:b5:
1a:59:f2:ed:a5:65:93:e2:04:e5:95:3d:37:41:91:
b6:da:78:69:05:8e:78:0e:38:1b:13:a7:be:7b:7b:
1b:d3:79:aa:a3:d3:cc:b8:37:77:7f:d5:04:15:25:
74:60:a1:ee:d0:77:31:eb:68:d6:84:6c:41:2e:fe:
d3:60:46:54:8b:a8:26:bb:b3:9f:53:53:ad:0a:e3:
fa:2d:9b:b5:3a:e3:7f:3c:93:79:3f:af:1c:13:56:
e1:9f:e9:80:7a:c1:34:c0:9b:43:9f:d0:cf:d3:a1:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:13:C5:B0:C9:89:83:E0:52:8D:31:8C:4A:B3:A9:01:3D:F1:72:C6
X509v3 Authority Key Identifier:
keyid:52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:60:0c:98:17:bf:b1:da:c8:f3:6f:7d:10:06:c9:16:e4:
d7:9a:8a:08:42:8b:ed:08:40:d6:4f:b2:f2:c4:96:75:03:8a:
25:6b:37:4f:b0:89:bb:0a:f1:50:aa:62:0e:27:70:f9:33:46:
a8:29:3c:e6:85:fe:61:29:98:24:16:e7:57:6b:8a:e8:17:54:
8a:cd:75:35:35:31:d7:5a:66:69:8e:ad:05:9d:6a:ed:d8:55:
e4:a8:bf:d3:bb:5a:0f:61:7b:59:45:d2:32:c1:39:fe:10:20:
cf:ff:ed:6a:c6:67:32:19:72:6f:7c:b1:40:cb:79:04:1d:8c:
28:7e:2b:cf:82:00:01:2c:2f:dc:70:38:6c:dd:95:60:4b:d8:
b0:50:87:13:04:23:53:2f:29:b4:6b:2a:30:e3:90:ba:5c:52:
3f:a8:1a:ae:11:c1:53:b6:d2:73:c0:d0:44:77:2e:c4:2a:b5:
07:59:42:06:d4:c8:f6:83:bd:b0:e7:71:d2:21:d4:1f:cf:7a:
3e:ac:2f:63:63:ec:1f:bf:2a:d4:68:74:a5:da:60:82:0a:ff:
c3:ca:29:35:48:e5:0c:cb:54:35:a5:7e:25:b5:a9:3b:1e:c7:
73:03:88:10:cb:66:a2:5d:7e:52:a7:f3:88:64:1a:29:6e:39:
80:ab:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:31:53 2026 by rpki-client