Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: KjJdvjY0xrxG9uW9oT7WMkgphH0p3GYl43EsuRvCEjg=
Subject key identifier: 4E:92:EB:D5:C7:92:CE:6B:24:64:0A:E8:AE:CF:0C:87:84:69:91:48
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 01A0EB8A0D973FC703D7D8231727EB47C302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1A77
Signing time: Tue 29 Sep 2026 05:01:28 +0000
Manifest this update: Tue 29 Sep 2026 05:01:28 +0000
Manifest next update: Wed 30 Sep 2026 05:01:28 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: S8EQecVJXueVeQ7Rcj5/FwGCTDBF22wPsHkMhll6OO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:0d:97:3f:c7:03:d7:d8:23:17:27:eb:47:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Sep 29 05:01:28 2026 GMT
Not After : Sep 30 05:01:28 2026 GMT
Subject: CN=4e92ebd5c792ce6b24640ae8aecf0c8784699148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:b7:68:a2:41:27:f4:89:55:c6:de:3e:30:
89:aa:a8:c3:86:90:a5:7b:cd:bc:01:3c:ca:a3:0e:
6f:62:54:a3:e0:0c:31:3c:0c:39:92:46:7a:d4:a3:
fd:64:4d:23:90:0d:3b:e8:7c:dc:e7:0d:60:5d:e5:
fc:18:7c:12:0f:d8:2b:1a:a9:12:16:97:27:4b:44:
f9:af:98:07:7d:f5:ed:c1:49:dd:1f:14:d8:e5:1d:
25:3b:a5:bc:73:b4:a6:3e:96:87:7d:7c:de:fb:e6:
b3:3e:95:7d:b0:e6:e2:09:85:5a:fb:3a:be:39:26:
70:02:3d:7d:f9:5d:9a:df:9b:72:4d:2e:22:ba:71:
8a:70:59:51:88:43:ab:81:d2:59:c3:bd:d2:9d:c3:
d1:12:cf:d5:4d:27:be:b4:00:0e:f6:8c:d6:7d:cf:
51:e9:a4:28:d1:ea:c1:6f:93:6a:c4:85:3c:fc:f2:
ca:da:1d:a8:77:44:71:d2:2e:24:ef:c9:fc:de:71:
b7:86:06:0b:96:da:8e:02:8c:fc:de:4a:ea:e3:f2:
7b:b2:dc:62:9b:0a:e6:ef:8c:f7:1e:85:2e:68:9b:
ca:33:97:f0:f8:1c:6a:f2:5a:ec:f0:f5:01:2c:f8:
38:9a:3a:6b:78:10:a1:f6:ee:b2:03:b3:83:81:51:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:EB:D5:C7:92:CE:6B:24:64:0A:E8:AE:CF:0C:87:84:69:91:48
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:58:3d:1c:e6:d6:9e:8b:ff:e3:d1:78:73:01:e1:a6:57:
72:7a:e6:2b:cb:5c:61:bc:98:8f:94:64:bb:73:a6:89:6f:02:
b4:f2:13:30:db:65:63:38:5e:9d:e3:59:2f:93:5c:31:30:fc:
55:84:42:46:cb:5e:c0:b1:ad:b9:fc:b7:24:06:9a:b9:68:1a:
1b:ec:b7:14:e1:e2:d7:fe:b3:8c:0f:6a:60:f3:de:bf:e1:e8:
0a:cf:f8:b8:a7:e4:01:3e:94:7c:ab:7a:25:9e:83:58:6c:42:
77:9b:16:a1:23:17:30:c7:79:2e:56:d6:11:6f:e6:77:a7:ec:
d2:0a:bd:c4:32:e3:04:6d:f2:1e:ac:62:fa:1e:77:72:c2:86:
c1:98:a6:fa:97:88:25:ad:cc:79:61:da:ea:36:76:95:8f:f5:
f6:7e:88:49:21:86:93:9e:b2:fe:f8:40:c9:08:45:2d:b5:d0:
fc:bd:95:00:c3:f1:d3:a2:d7:98:36:2e:8f:96:0d:85:65:c2:
c3:c6:3d:89:55:fb:ee:41:8c:0b:fd:7d:23:28:66:23:e2:a5:
0f:e7:5b:33:9b:d2:c0:7a:5c:d5:aa:4f:0a:b9:28:d6:bd:a3:
9a:88:bf:ae:bf:95:e1:07:79:7f:4b:ea:0e:8d:14:f3:fd:a9:
aa:8d:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:03:33 2026 by rpki-client