Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: 8b12OKnHreclSY8W6WFrb51Rko6YjuVIeQtGdXTOXvU=
Subject key identifier: D7:5E:89:5B:6C:AE:6F:47:92:5F:91:21:E0:12:9F:38:F7:91:30:94
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 019CAA58A69AF3F7637EB981738797EDAFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 13D9
Signing time: Sun 01 Mar 2026 17:01:02 +0000
Manifest this update: Sun 01 Mar 2026 17:01:02 +0000
Manifest next update: Mon 02 Mar 2026 17:01:02 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: DLzDIrvb7HYtQq6bx/hSOjlurrkJ4O+NGIW0P8lCHYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a6:9a:f3:f7:63:7e:b9:81:73:87:97:ed:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Mar 1 17:01:02 2026 GMT
Not After : Mar 2 17:01:02 2026 GMT
Subject: CN=d75e895b6cae6f47925f9121e0129f38f7913094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:2e:53:de:fd:6d:d5:df:85:c5:0d:8e:63:
2e:1d:12:70:26:37:5b:28:ce:a2:d8:58:a3:8d:f1:
89:7c:50:b2:62:3e:a2:e0:e7:cd:33:24:3a:6e:8a:
92:20:54:6e:a8:f6:f6:d4:4b:2e:90:ec:9c:15:90:
e7:e0:29:11:04:d2:c2:ee:10:e3:61:d6:b6:b3:72:
b9:be:e9:af:fb:29:15:64:2e:4a:8b:0c:f3:04:39:
4c:c8:dd:b5:d8:f9:a4:d8:c7:59:39:ab:ab:53:9e:
5f:0e:e3:55:d8:c2:3e:f1:f0:e4:46:2f:b4:f6:d0:
cb:16:47:a3:f0:b8:96:c3:1b:54:60:16:b2:8a:ec:
58:d3:d6:18:ff:66:ab:3f:15:20:1b:03:81:90:c9:
47:91:08:e8:74:ec:63:36:70:bf:e2:1e:01:af:44:
8a:c5:0e:6b:e4:57:6d:a1:11:f7:30:33:c2:6d:55:
98:e2:8d:4d:2c:f9:c3:da:22:51:c4:0d:04:1d:72:
32:7f:27:da:b1:c9:db:0a:77:3b:cf:81:1b:a5:6c:
8a:95:7c:6b:3f:13:df:4c:a9:a7:cc:91:1b:28:be:
25:1d:c9:62:52:b6:6f:8c:11:60:9d:de:1e:a3:1e:
5b:0f:e3:43:1d:af:0d:fe:fc:1d:5e:0a:89:2f:98:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:89:5B:6C:AE:6F:47:92:5F:91:21:E0:12:9F:38:F7:91:30:94
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:21:0d:ed:74:c9:ce:72:f5:7a:9d:f3:12:bd:07:99:17:
e7:d6:4a:26:e7:28:96:15:18:cf:e1:fd:30:53:6d:e3:ff:d4:
93:a8:18:5e:08:7b:2d:76:ee:a5:23:b6:ab:00:14:3b:d4:60:
50:4c:a5:80:c4:b5:17:14:28:3b:5b:fb:34:85:37:50:aa:a1:
86:0b:75:d5:71:d9:24:0c:19:c0:e0:c0:a6:68:a8:6e:04:9e:
23:f0:54:49:01:eb:02:fe:7d:c5:22:64:24:9a:d6:cd:80:1e:
0a:3e:6e:d5:72:ff:c8:bb:4f:d0:8d:ea:e4:42:07:f5:f2:05:
96:17:43:db:82:a1:61:a6:34:33:2d:e1:db:bc:8f:17:fe:5a:
df:ce:89:ea:3f:4e:20:84:b9:aa:c0:a0:d5:8c:d2:35:39:39:
06:f3:c0:65:45:0b:2b:5b:fb:3b:01:1a:7a:f0:84:5a:a6:16:
28:3e:f6:48:f9:81:e8:e1:6b:04:f6:a6:8c:14:74:4b:b1:2a:
8d:6e:b5:37:7e:23:ab:d6:aa:0b:7b:c6:45:fd:9d:2a:12:62:
9e:47:2f:be:fc:47:d6:49:70:26:70:8d:ba:80:c3:b0:8a:32:
fd:94:f2:2f:e5:b1:65:e3:a2:e4:36:a0:ea:06:57:f6:b4:2c:
02:98:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:35 2026 by rpki-client