Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: k6UMSVrmdCX4J/cLdpDkUIOO8d3sSgibQnDkjylCnYw=
Subject key identifier: 06:A7:45:8B:ED:B0:3E:34:D3:71:0A:3F:BA:5E:6E:36:70:5C:F9:D0
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019FACE417462F4336B1C8A02F78C4E448AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 08:00:56 +0000
Manifest this update: Wed 29 Jul 2026 08:00:56 +0000
Manifest next update: Thu 30 Jul 2026 08:00:56 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: YAuTgRK44ndZ2RL4NJw2EgPAWp4nGFi8nsUlKFXmGVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:17:46:2f:43:36:b1:c8:a0:2f:78:c4:e4:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Jul 29 08:00:56 2026 GMT
Not After : Jul 30 08:00:56 2026 GMT
Subject: CN=06a7458bedb03e34d3710a3fba5e6e36705cf9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:12:be:04:ed:df:90:4e:c6:97:05:38:62:
77:8d:f4:bb:97:a1:07:d0:f7:f8:6f:0f:61:52:58:
da:23:a2:74:fb:b5:00:0e:75:fb:47:31:da:de:4b:
4b:08:03:92:c3:7e:6c:fc:2a:e8:91:25:0f:35:ee:
62:ac:9d:71:bd:8f:6b:8b:77:cb:01:f0:11:b6:a1:
49:cd:f1:c7:0d:08:34:56:a6:9f:9c:d3:0f:8d:21:
fb:6c:d7:8c:5c:35:63:5d:2c:52:0b:4d:ca:df:45:
f8:2b:ee:4c:df:2a:e0:60:49:94:20:82:0d:96:29:
76:b1:14:fc:d9:bd:98:b9:b2:54:34:4c:fb:0f:f7:
3f:67:4b:e1:8f:cc:05:4b:6c:cd:14:46:3c:c1:b3:
bc:21:94:a4:8a:b2:d2:89:cb:29:3b:40:e9:4a:40:
18:83:b5:81:cc:3a:02:4d:c0:33:9d:a8:a2:52:0b:
63:9c:d1:d9:3f:3c:86:95:90:27:74:f3:13:59:d7:
5e:ff:18:6f:55:bb:69:1d:60:b3:f6:c7:66:5e:f3:
9e:ab:19:85:9c:44:1f:fe:94:13:52:d1:46:17:30:
dd:af:24:b7:9f:2b:b3:76:f3:2c:60:89:9e:d9:7e:
6e:82:99:12:b5:c8:df:57:c1:27:69:42:ad:83:4c:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:45:8B:ED:B0:3E:34:D3:71:0A:3F:BA:5E:6E:36:70:5C:F9:D0
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:49:c7:69:6f:98:3f:70:8f:6f:a9:7c:c4:09:64:e5:0d:3a:
97:98:aa:66:3f:c0:0f:d7:83:80:f0:cf:de:b4:e2:1c:f3:28:
68:53:cb:62:62:e0:88:6a:ae:bb:1a:08:96:7b:c2:44:f6:c4:
c1:64:a6:b2:55:06:96:02:03:fb:66:3f:b9:44:9e:54:37:09:
eb:27:e5:55:98:13:58:cf:02:fb:93:db:08:f9:24:ae:10:3c:
4c:b7:0d:b0:f3:af:d3:d0:44:56:f5:1e:22:0d:7e:e9:29:53:
93:fc:38:0a:db:6f:20:ae:ff:5b:9d:5b:1d:2c:b9:d5:ea:f1:
ae:76:af:9d:c8:a1:0e:68:a6:fb:f7:94:93:9c:bf:c9:0f:ac:
95:78:ab:f7:cb:40:c6:42:5e:12:dd:44:2f:be:b0:52:8d:4e:
9c:8b:65:fe:51:84:78:b8:89:aa:ed:80:1c:cb:a2:b8:32:e7:
42:3d:50:0c:7b:c9:5f:d7:22:5a:d9:be:8c:1a:af:84:ca:34:
2a:49:76:63:a5:41:06:76:77:fe:3d:30:69:90:49:21:6b:b8:
3a:55:60:4c:c1:a9:26:05:b1:c5:fc:e8:cc:cf:9c:47:d6:51:
f8:62:85:01:32:f5:90:25:39:61:66:4a:74:ce:26:8c:70:35:
24:84:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:59 2026 by rpki-client