Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: ov1fNK2CzkAETgTT48act43XiO68ArJfGg+qhEC+Iv0=
Subject key identifier: 92:5F:70:28:4B:CD:52:E0:78:3A:33:D7:90:C7:2E:8A:E5:EF:6C:05
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 01A100C8687BB90844A7B664AEBB8DF2ABDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1A82
Signing time: Sat 03 Oct 2026 08:01:36 +0000
Manifest this update: Sat 03 Oct 2026 08:01:36 +0000
Manifest next update: Sun 04 Oct 2026 08:01:36 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: Uko8DvubnQkUIx4EuM0T1RuKaYbDXcu5u14EsYiEwsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:68:7b:b9:08:44:a7:b6:64:ae:bb:8d:f2:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Oct 3 08:01:36 2026 GMT
Not After : Oct 4 08:01:36 2026 GMT
Subject: CN=925f70284bcd52e0783a33d790c72e8ae5ef6c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:72:d1:9d:35:6d:fb:1b:b9:35:4e:f4:d6:
bd:12:01:c8:cf:9a:6d:a4:c0:52:17:9c:82:8d:f4:
5a:26:16:41:91:bf:2d:7f:83:b7:c9:cc:e3:05:a7:
ef:47:49:14:e5:73:cf:74:d6:67:cc:0c:44:fc:25:
70:0d:29:3b:17:eb:01:4e:25:80:26:ac:53:46:36:
48:ce:0f:fa:6a:8f:d8:17:8c:d1:74:52:fd:03:46:
55:7e:68:8a:48:34:c5:85:b3:41:bc:42:80:77:b1:
de:10:4d:c2:69:c7:bb:f9:de:30:aa:d2:2f:77:86:
67:e2:f8:10:d7:5f:25:e0:90:b2:af:f8:b2:df:aa:
4f:d7:1d:59:01:84:64:19:bb:1d:fb:0b:a3:b4:a6:
4a:25:6f:1e:7c:ea:ed:ad:80:0d:bb:0e:c3:51:58:
81:a7:e1:73:7d:2c:4c:38:13:79:e8:5e:b7:31:90:
33:11:41:30:be:f1:9c:34:cb:bd:47:5b:f2:60:4d:
30:24:76:36:72:91:7a:5c:41:b6:fc:92:03:da:07:
8e:37:52:5b:2e:5d:b8:d1:3c:d1:68:f7:07:a8:4f:
f8:f0:d6:38:b0:13:e6:c0:bc:52:e0:66:f7:3a:b8:
9a:51:2a:d7:4e:97:cd:91:88:90:32:b2:c1:a4:dd:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:70:28:4B:CD:52:E0:78:3A:33:D7:90:C7:2E:8A:E5:EF:6C:05
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3c:84:15:59:82:ca:87:08:3c:10:ae:7d:7e:88:b0:55:61:
01:4d:ba:aa:d7:cb:09:42:07:09:8a:e1:ba:44:d1:ee:67:66:
85:e8:48:7b:70:9f:1a:f4:d1:9a:b6:60:79:42:10:ef:fd:de:
25:64:47:54:14:17:a5:1f:37:fe:9d:d8:91:82:cc:65:d6:09:
c1:a5:18:e0:92:36:1d:b6:cd:b7:51:5a:5c:d1:2c:24:13:4b:
9d:82:fc:a8:f3:07:66:36:3f:15:cd:4b:f9:5d:bb:19:f6:4d:
fe:17:1b:09:c7:df:4a:e8:f5:2e:74:c5:86:3f:0f:da:f6:50:
fa:37:6e:5f:6c:44:e2:da:ea:44:7f:b5:92:72:87:7c:d8:ae:
28:e8:a3:a9:96:de:fa:d6:42:6d:14:df:e2:12:a7:f7:7a:de:
5f:f1:27:9e:09:63:c8:64:66:06:07:b7:83:52:82:f1:76:81:
22:f2:c5:4e:38:6c:c2:58:c9:2f:d9:42:d4:58:67:67:34:5b:
48:95:5d:9c:fb:8f:18:df:0f:ee:e2:8b:bb:9a:47:8c:bf:ea:
e7:1e:34:fb:dd:a2:31:55:7c:8b:e9:ac:de:ec:f0:35:56:48:
5b:7a:95:de:58:a9:78:3b:b1:4a:2f:2a:5f:54:8a:a6:ce:f3:
ea:b3:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:35 2026 by rpki-client