Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: g4TQ9sKhzah47MJf9DQ9u4/X+IIU4Y+gDd6bf27OFf4=
Subject key identifier: 3B:27:92:CE:E8:5D:31:26:D4:B7:27:B6:38:2F:B6:59:6D:FD:D8:D1
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019CAA58356579DD1C86DF30CA49447FC4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: Gnw2Uv01uwSfUXj0dkCzDZzKxAcw67QWWI3JPvF6Xhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:35:65:79:dd:1c:86:df:30:ca:49:44:7f:c4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=3b2792cee85d3126d4b727b6382fb6596dfdd8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:ee:85:ea:bb:0b:83:ad:49:ca:2c:7a:67:
ad:95:70:25:2f:e0:7b:13:2a:de:da:f7:1e:84:d9:
e5:72:11:5d:23:83:cc:be:8d:7d:a1:6f:e5:c7:ef:
a4:77:22:d6:dd:f1:14:ff:4e:c7:f0:32:66:1d:1e:
43:ef:f4:0b:2f:45:5b:69:d0:51:aa:32:a1:eb:d8:
a2:03:8e:63:19:5e:43:05:3a:9c:26:b5:1d:72:2e:
a5:aa:cd:56:85:f9:12:9e:81:05:e5:40:f4:0a:5d:
f0:ce:f4:3c:1a:a3:f8:11:15:88:5f:0f:05:55:27:
4a:58:84:2d:1f:d7:6b:e8:53:35:4e:5c:cb:80:01:
db:34:ad:70:fe:d6:35:ce:13:98:c5:50:97:67:aa:
06:e4:1e:2c:61:3b:38:b8:ca:4d:cf:c6:e7:8e:39:
06:4e:25:8b:80:4d:95:1f:b9:6b:fb:b7:71:83:fa:
ce:17:74:63:55:ee:10:1f:12:bf:75:08:26:12:74:
1c:64:d7:93:47:51:9b:08:11:b2:7f:59:a5:2f:d5:
b9:49:06:da:a1:48:73:a3:27:08:dd:4e:b1:28:09:
d0:6d:e0:db:11:97:0e:74:6b:49:c3:0b:a5:9b:34:
07:01:e2:e9:a4:32:c9:52:76:4b:ad:b1:34:db:5f:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:92:CE:E8:5D:31:26:D4:B7:27:B6:38:2F:B6:59:6D:FD:D8:D1
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d6:ec:2f:6f:74:11:e6:bd:0e:12:df:3d:ab:51:e0:52:b6:
54:7b:c7:2a:de:64:c3:30:f9:70:8a:fc:e5:ca:24:20:81:5e:
f9:a1:99:73:55:ea:e0:53:5a:4b:26:ab:05:24:3d:c8:10:79:
f9:fd:ec:e4:11:f2:22:b6:54:70:9e:63:78:a2:d4:63:45:23:
d8:4f:85:11:93:38:ee:90:55:a5:08:94:77:bb:0c:86:d4:d3:
d5:a6:b6:2a:c0:a8:54:22:dd:ce:ed:70:f3:15:8f:d8:61:dc:
94:ef:2a:d2:83:26:8e:b3:15:14:96:9c:e0:25:17:76:cc:98:
d8:5d:0f:9f:8b:da:64:6d:82:c0:c8:64:8d:73:ba:09:3e:a1:
f5:9f:a9:ac:ee:32:9f:87:96:6b:d5:a9:90:32:81:0a:ac:94:
6a:75:0b:46:1f:0d:62:28:74:2a:3e:2c:c1:b3:05:b8:dd:08:
2b:1f:fc:46:90:fa:61:f7:7e:d0:d5:ec:60:00:4d:50:14:cf:
f8:b7:02:09:1b:8c:1e:51:cc:dc:9b:d5:f3:d8:2d:76:7c:3c:
3b:17:2f:6c:86:1f:ca:f2:b1:eb:79:8f:67:66:b4:91:a6:e2:
16:17:e6:ac:20:2d:27:0b:d3:93:a5:7e:d8:be:3d:05:0c:b0:
78:5f:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:30 2026 by rpki-client