Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: r4U0l7ZSQTqjUcdQxx7htFZG5/yi4CTEJArwghd5ONE=
Subject key identifier: 3B:7F:98:DC:D4:20:0B:F4:23:24:2E:4E:DD:4C:F8:4D:AA:37:AE:D5
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 019D9BBE8C26C8F6D72181F3A512BEE7DD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 1456
Signing time: Fri 17 Apr 2026 14:00:49 +0000
Manifest this update: Fri 17 Apr 2026 14:00:49 +0000
Manifest next update: Sat 18 Apr 2026 14:00:49 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: 8rBGPX76t6gZiEZ5LkIZAm+5EIPP2kYfqtxAwlopiO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:8c:26:c8:f6:d7:21:81:f3:a5:12:be:e7:dd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Apr 17 14:00:49 2026 GMT
Not After : Apr 18 14:00:49 2026 GMT
Subject: CN=3b7f98dcd4200bf423242e4edd4cf84daa37aed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c7:c7:df:96:ce:c1:3c:91:94:5e:4f:ea:15:
f4:32:46:76:bc:5e:61:f3:aa:7c:50:5a:55:df:74:
67:7b:1d:38:e2:7d:d2:f8:3e:d5:10:36:cc:50:29:
b8:99:d2:76:4c:a1:17:10:14:7e:46:bc:55:d8:0c:
9e:39:ce:bb:82:9a:a3:dc:42:af:da:a2:81:49:7d:
4d:8b:1e:b8:01:ce:71:41:a1:0a:8d:4f:13:17:2c:
99:d6:dc:97:75:5e:1e:60:09:79:a3:5a:16:71:4b:
8c:26:c1:f2:b0:d7:4d:5a:e9:81:2a:56:6e:b3:08:
b4:f1:c4:31:39:d4:82:07:de:64:1d:8c:d2:86:2b:
6b:45:d3:01:1f:94:e1:31:43:47:0d:58:d5:46:ce:
35:91:0b:7b:f9:0a:06:e1:22:4c:4a:60:03:a9:59:
c6:d8:8f:af:92:0e:42:d8:6c:d0:fb:ff:81:9d:b8:
e1:72:05:76:48:4e:77:c9:e4:68:3a:7b:87:65:f1:
04:54:7c:58:39:27:81:da:ac:b3:da:bb:5c:d9:81:
7b:af:09:ce:77:4d:b0:f9:bd:08:d6:27:13:a6:23:
e1:7a:ba:b0:88:56:d8:93:c9:6e:df:4e:ee:8b:5c:
87:69:aa:35:65:93:16:39:22:ad:12:cd:e1:a3:6d:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7F:98:DC:D4:20:0B:F4:23:24:2E:4E:DD:4C:F8:4D:AA:37:AE:D5
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:38:5c:01:e0:06:8e:2a:ad:85:40:33:98:e3:70:d8:18:
99:fc:2e:e2:b5:d9:11:da:ba:ea:39:55:e2:b8:f5:2e:f9:c1:
16:16:36:df:0b:5f:01:58:de:0c:e8:e9:ed:9a:c1:96:29:1d:
04:ab:bb:f1:f2:8b:6c:ce:a0:90:5f:ab:46:bd:cb:31:ee:cd:
60:a5:02:2d:72:26:03:a8:bf:12:8b:ba:a8:73:3a:5f:fa:65:
47:6d:52:f2:ff:38:0c:41:25:ad:7f:c4:fe:87:02:4c:1a:47:
3a:4d:e4:ca:a8:4d:3b:47:29:97:bd:70:9b:64:44:f9:69:de:
f0:7a:1d:3f:2f:65:b3:16:c1:f7:02:59:07:23:f4:a7:2c:51:
57:36:85:a4:80:b3:33:14:4e:d2:c6:a3:d1:f9:30:88:89:76:
f0:4d:b0:9f:a4:4c:94:3c:5b:b7:94:93:ca:ac:9a:75:7f:d1:
0e:e5:c0:6b:4b:51:1b:11:6c:10:63:20:0c:f9:51:9d:e0:0e:
4c:85:52:ca:0c:ce:24:cd:c4:20:e2:c8:54:ac:2e:54:57:05:
b8:8a:4f:ff:e4:20:b4:ff:0c:7f:13:0b:ec:e8:0e:67:d2:12:
97:51:bb:7e:e9:4d:75:31:9e:4d:06:04:86:0c:16:d8:93:a8:
cf:3c:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:20 2026 by rpki-client