Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: FwP5x37dJ44hra+rMlN4WM/otChF3YW3EOa1f4jSW5Y=
Subject key identifier: F0:72:A3:4E:9B:20:30:5E:09:7B:32:EC:8E:91:3B:AE:F4:45:DA:54
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019D29CDE8A69D9638A0065B786BC3DEAED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 11:00:53 +0000
Manifest this update: Thu 26 Mar 2026 11:00:53 +0000
Manifest next update: Fri 27 Mar 2026 11:00:53 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: ugX++bD2do1VIktrn809XYPFouh1+Rz5pBTEkxhp/Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e8:a6:9d:96:38:a0:06:5b:78:6b:c3:de:ae:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Mar 26 11:00:53 2026 GMT
Not After : Mar 27 11:00:53 2026 GMT
Subject: CN=f072a34e9b20305e097b32ec8e913baef445da54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:bf:2b:98:8a:6f:31:ab:bb:fb:de:5b:54:
80:55:0c:e8:63:55:c2:4f:c3:16:da:f3:9e:70:25:
85:e8:9c:cd:72:16:58:67:ba:49:17:b9:78:bd:2a:
2f:0e:45:2a:4b:7c:cc:66:b4:5e:6c:9c:dd:38:2e:
73:00:22:a6:b0:f7:98:9b:be:13:b5:8a:45:94:f1:
f4:48:bb:89:7b:d9:56:3a:d9:b8:43:1b:8b:ef:aa:
ed:35:4c:a6:b3:fb:1e:79:22:cb:c2:3b:37:2c:a0:
e5:6d:42:b0:d8:b4:6d:47:7c:8a:23:55:be:d9:f3:
31:5f:14:5f:4c:39:8e:5d:4c:c6:95:f0:e4:c9:cd:
8f:f4:fb:ff:7d:9e:f5:99:07:cb:70:0d:aa:c8:47:
43:d8:50:22:49:93:b8:bb:57:05:ad:90:f9:eb:cb:
22:61:b6:3e:f3:83:3b:d4:d2:c1:3b:53:50:e8:43:
13:81:93:67:10:aa:e9:10:1c:92:80:2a:6b:8d:4f:
52:17:94:10:40:22:27:3e:d6:c5:a5:a9:82:96:77:
c0:cd:60:dc:54:1b:bc:7f:d5:0f:dd:b7:8b:d2:cf:
a2:a1:c5:7b:bd:d5:9c:2d:72:10:46:50:8e:0a:05:
52:82:e0:fe:58:90:14:93:66:80:cd:f0:b1:75:ea:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:72:A3:4E:9B:20:30:5E:09:7B:32:EC:8E:91:3B:AE:F4:45:DA:54
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:97:44:29:f2:29:47:a7:4d:71:1e:f7:19:7d:63:39:d8:81:
b7:eb:c4:b8:21:44:5e:45:8b:a9:12:aa:f2:b3:9a:4b:52:ad:
ce:5a:f7:64:f1:11:5b:2d:24:d5:8b:e3:ab:dd:5c:28:a8:95:
22:ac:f0:d3:a5:89:af:9f:81:10:82:b0:b6:e0:89:cb:df:f1:
34:4b:2f:e2:c5:25:93:17:dc:85:f0:84:cc:61:9b:b3:75:b1:
88:2a:8c:9a:ca:a1:05:fc:ca:f2:81:d2:24:02:0f:d2:fd:66:
56:86:20:63:cb:b0:f9:23:92:0f:83:d9:7d:cf:97:6c:85:05:
c7:61:54:71:d2:21:63:8f:9d:d8:7f:ef:bd:06:45:0d:0a:5b:
a0:e8:f1:16:83:c6:a1:56:9c:80:d6:c0:af:fa:36:64:f9:1e:
0a:eb:51:be:3f:27:ea:48:76:7d:b6:79:1f:9b:0e:e3:66:e2:
c7:48:4b:52:08:8a:a3:44:bc:e1:e1:2d:e2:a8:77:6d:4e:f3:
be:5f:61:48:ca:00:62:b5:0a:06:38:24:fc:6a:09:b4:e6:63:
97:c3:48:8f:70:83:a9:49:84:2c:54:14:7a:0e:e8:17:03:4a:
78:70:0a:12:f7:11:1e:fe:be:05:f8:34:9f:ff:1f:a8:a6:56:
20:de:e5:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzeimnZY4oAZbeGvD3q7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi
NjdlNDkwHhcNMjYwMzI2MTEwMDUzWhcNMjYwMzI3MTEwMDUzWjAzMTEwLwYDVQQD
EyhmMDcyYTM0ZTliMjAzMDVlMDk3YjMyZWM4ZTkxM2JhZWY0NDVkYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwW/K5iKbzGru/veW1SAVQzoY1XC
T8MW2vOecCWF6JzNchZYZ7pJF7l4vSovDkUqS3zMZrRebJzdOC5zACKmsPeYm74T
tYpFlPH0SLuJe9lWOtm4QxuL76rtNUyms/seeSLLwjs3LKDlbUKw2LRtR3yKI1W+
2fMxXxRfTDmOXUzGlfDkyc2P9Pv/fZ71mQfLcA2qyEdD2FAiSZO4u1cFrZD568si
YbY+84M71NLBO1NQ6EMTgZNnEKrpEBySgCprjU9SF5QQQCInPtbFpamClnfAzWDc
VBu8f9UP3beL0s+iocV7vdWcLXIQRlCOCgVSguD+WJAUk2aAzfCxdertawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPByo06bIDBeCXsy7I6RO670RdpUMB8GA1UdIwQY
MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt
YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3
LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpdEKfIp
R6dNcR73GX1jOdiBt+vEuCFEXkWLqRKq8rOaS1Ktzlr3ZPERWy0k1Yvjq91cKKiV
Iqzw06WJr5+BEIKwtuCJy9/xNEsv4sUlkxfchfCEzGGbs3WxiCqMmsqhBfzK8oHS
JAIP0v1mVoYgY8uw+SOSD4PZfc+XbIUFx2FUcdIhY4+d2H/vvQZFDQpboOjxFoPG
oVacgNbAr/o2ZPkeCutRvj8n6kh2fbZ5H5sO42bix0hLUgiKo0S84eEt4qh3bU7z
vl9hSMoAYrUKBjgk/GoJtOZjl8NIj3CDqUmELFQUeg7oFwNKeHAKEvcRHv6+Bfg0
n/8fqKZWIN7l+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:37 2026 by rpki-client