Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: y9607m92JT0VHKcs+zYukIrlRnep9gl92tUuMTZGv0I=
Subject key identifier: FC:8A:45:64:35:BC:34:E1:70:7F:E2:F6:47:22:F3:9F:77:B3:09:0E
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019D99D0D8AA353A3225F42E632D51AEA5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 05:01:34 +0000
Manifest this update: Fri 17 Apr 2026 05:01:34 +0000
Manifest next update: Sat 18 Apr 2026 05:01:34 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: JH50htc+QZ/jk1E/pwwNX87NsSgnCUxkFEWf3e24f8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d8:aa:35:3a:32:25:f4:2e:63:2d:51:ae:a5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Apr 17 05:01:34 2026 GMT
Not After : Apr 18 05:01:34 2026 GMT
Subject: CN=fc8a456435bc34e1707fe2f64722f39f77b3090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:3e:7a:0a:5f:9b:3a:9d:64:9e:c1:e0:22:
99:b1:06:c3:ae:6d:fb:b0:0f:48:c4:f7:c0:55:56:
64:ce:62:d6:14:15:a5:58:0a:1f:a1:1a:58:bf:6b:
aa:fe:dc:39:05:65:a2:52:89:ad:76:c7:64:17:5c:
44:42:ae:22:10:8a:94:ce:4a:c7:7d:26:bb:f1:67:
c5:b3:3e:2e:28:d8:cd:eb:41:9b:41:da:43:ae:85:
94:be:ff:f1:d5:a8:a0:ee:db:15:96:62:6d:57:ef:
46:4e:ce:5a:21:2f:58:5b:8d:a0:aa:49:83:1e:1e:
e4:91:65:b0:c2:24:54:5a:d1:56:41:77:9a:50:11:
c5:ea:c9:54:6b:61:d5:a6:f3:4e:18:10:ea:22:8d:
7d:2a:09:70:bd:1a:32:74:64:b0:c8:77:fc:6a:7a:
33:01:39:91:e4:bc:9f:12:eb:27:5f:38:9f:95:68:
d7:b2:58:34:a6:a5:55:c8:6d:31:3a:c3:0e:cc:c9:
45:b8:f0:31:b0:ac:5a:8b:49:3a:5a:1a:5b:64:ae:
22:10:a1:e8:6b:18:62:93:0f:79:1e:2e:62:34:eb:
8c:7f:cc:2c:d0:b4:e6:91:d1:ba:32:8f:11:b7:5f:
b2:40:05:a6:fa:fa:fb:11:94:ff:81:b6:5f:d2:4c:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:45:64:35:BC:34:E1:70:7F:E2:F6:47:22:F3:9F:77:B3:09:0E
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:5e:49:d7:5e:da:41:80:c2:69:40:91:78:d6:73:b6:6e:
bf:59:39:40:a3:66:47:1a:c0:32:83:2b:c9:15:5a:b4:57:42:
60:9b:97:23:00:dd:23:96:f2:27:77:c0:f8:d1:31:c2:ed:dd:
38:8d:69:18:34:ad:17:2c:2a:19:6a:9c:95:6b:8b:13:d6:06:
c2:b4:5c:fa:90:67:77:66:a5:e0:9b:75:75:0b:63:96:22:b5:
69:7f:70:17:83:1b:a5:26:e0:94:0f:d4:d0:71:4f:1d:88:c1:
04:7e:f0:56:f4:83:e6:90:41:32:87:8c:a2:19:c1:b9:da:32:
20:d6:8c:de:59:aa:03:95:e3:81:96:0d:0b:4e:73:82:f3:02:
04:f6:79:ae:cc:4b:39:b0:f1:fc:68:f5:29:46:3c:1d:81:e7:
5a:35:50:f5:6a:69:eb:0f:c0:18:04:12:3b:a4:8f:a9:8d:28:
d2:ea:83:75:dd:e4:c3:67:54:90:f2:6f:c8:c2:0d:cf:0e:1d:
4b:45:f9:7a:85:e1:cc:93:c7:a9:3f:29:f2:9e:85:db:77:02:
83:fe:32:ef:1f:f5:40:33:86:ff:50:b2:e0:74:03:20:9e:67:
4b:fa:83:83:70:c3:91:de:88:20:84:63:cb:26:1e:77:4a:6b:
0b:93:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:08 2026 by rpki-client