Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: R2FgiqLilAiwCdnMDfn63k/NA6O6ynMYcPk0qJCpY9Y=
Subject key identifier: 4C:A4:33:F7:0A:6C:A7:C3:6A:CE:B9:08:5F:B5:70:2B:46:64:23:12
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 01A106939AB68C3E549119BF7494B6E058C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1A85
Signing time: Sun 04 Oct 2026 11:01:38 +0000
Manifest this update: Sun 04 Oct 2026 11:01:38 +0000
Manifest next update: Mon 05 Oct 2026 11:01:38 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: 1gPuoLrTC6z8zrXc7ZInRWYKTLnR2TAmBzS07UhzFR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:9a:b6:8c:3e:54:91:19:bf:74:94:b6:e0:58:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Oct 4 11:01:38 2026 GMT
Not After : Oct 5 11:01:38 2026 GMT
Subject: CN=4ca433f70a6ca7c36aceb9085fb5702b46642312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:24:cf:b7:c7:1e:32:c3:c1:ae:48:16:54:
ec:65:8b:75:c9:21:c5:df:53:9a:2c:d9:bf:1c:96:
f4:c1:cd:c1:d1:15:9b:93:cd:eb:96:48:19:96:c2:
f3:11:79:61:7b:b1:8d:37:58:52:26:cb:af:38:c9:
ca:46:68:d8:e7:08:9f:18:dd:f8:c3:d6:99:b7:24:
bd:0a:fb:47:50:07:b4:17:85:ea:29:6a:38:3a:f3:
77:24:e9:f3:c1:90:7a:56:11:c3:2e:c9:b7:4a:8d:
71:4f:d2:76:b7:9e:3c:45:ce:7d:98:12:a9:74:05:
ea:4e:c6:9e:88:25:02:fd:47:7a:a4:5b:70:e5:94:
fa:b8:03:22:d0:17:93:2f:22:20:a8:65:85:d6:a3:
c1:ca:77:e3:77:6f:cc:81:6e:24:e7:ab:41:5b:c6:
32:43:26:19:e7:98:05:a7:a3:d8:08:11:ef:60:aa:
08:19:d2:0e:4c:2b:aa:e4:60:67:5c:00:12:31:f0:
e2:5d:60:12:29:f3:e6:a2:a6:c8:43:5f:8c:5c:7e:
66:bf:73:0d:fb:e0:63:29:12:7b:92:30:c6:38:79:
37:da:79:8c:05:91:6f:99:f8:02:f1:a9:fc:08:f4:
5b:f3:df:69:c5:43:7f:cb:41:a4:cb:d0:b0:73:a9:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A4:33:F7:0A:6C:A7:C3:6A:CE:B9:08:5F:B5:70:2B:46:64:23:12
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:54:8f:02:5c:8a:2f:cf:28:3c:fc:c8:0a:83:51:ef:a7:1f:
02:17:7f:47:4c:00:21:4c:1d:3c:6e:7e:9d:f3:4e:5a:7a:b2:
65:1e:bc:c2:62:69:0c:a9:3c:9c:6d:44:a3:15:09:08:26:d8:
e3:1c:8f:a9:0d:4f:b9:85:57:2d:a5:e4:0a:a2:27:df:ea:53:
99:8f:52:32:2d:79:b4:46:f7:6c:cb:1f:b1:f5:15:c2:00:70:
09:a5:52:bc:bd:3a:58:18:28:bd:4e:85:17:ea:ea:7d:e3:0a:
7f:5f:55:39:f1:a7:85:0c:b6:af:2d:d3:f1:d8:59:80:64:90:
9a:01:5d:78:54:32:b2:3f:4c:0c:ce:5b:48:91:89:0f:24:45:
23:ad:27:a9:8d:b4:6e:61:6c:7e:c1:38:a4:76:51:ba:6c:e8:
46:df:30:b4:f4:e3:ee:87:1a:b3:cb:7c:a8:37:49:3e:c7:6c:
30:2c:db:7d:4a:46:3e:e9:35:bf:a0:a2:ee:e9:47:66:b7:6e:
c4:7a:d2:e6:71:a6:40:df:49:60:79:34:c4:d5:11:89:3e:01:
a1:0a:83:af:e5:8d:4f:a0:e7:e7:32:03:5b:c5:01:0b:22:0f:
5c:89:27:ed:d3:14:9d:5b:d8:f7:ed:b0:80:69:03:5c:8f:c9:
5d:59:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:04:25 2026 by rpki-client