Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: eCTu9oIwUdWuQcibRdWvHS5CGKDOJFr2AyFyGjHWVN0=
Subject key identifier: 03:25:55:AA:3B:51:8E:C7:24:4C:70:29:F6:EC:98:A9:E6:9A:E9:81
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 01A16EDB6F7959C04DC30014CA7673D19C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1ABB
Signing time: Sat 24 Oct 2026 17:00:36 +0000
Manifest this update: Sat 24 Oct 2026 17:00:36 +0000
Manifest next update: Sun 25 Oct 2026 17:00:36 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: Vh0g/OwNHTuBWZV9rBjfNgYPotNjsq0JRlgQ4mh28UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:db:6f:79:59:c0:4d:c3:00:14:ca:76:73:d1:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Oct 24 17:00:36 2026 GMT
Not After : Oct 25 17:00:36 2026 GMT
Subject: CN=032555aa3b518ec7244c7029f6ec98a9e69ae981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:93:16:40:10:09:fe:ad:49:4d:ca:9a:7a:
98:06:d6:07:3e:64:00:0b:fd:7c:45:7c:28:e7:55:
9b:e1:64:b9:7c:30:b8:70:dc:fe:c3:d1:1a:d8:f4:
46:c3:99:bb:fc:f3:a4:c7:8c:31:ca:bc:21:3c:61:
a6:4f:b7:c7:50:53:ff:49:d4:b8:c6:ae:e6:5a:93:
c8:aa:e2:0f:a4:c0:89:d3:c1:e0:84:90:3e:ef:86:
1a:20:70:0b:c0:05:5f:3b:04:9c:6d:26:15:a0:ca:
b6:d1:65:50:41:a2:9f:a9:74:39:38:86:d2:3e:0b:
37:93:54:a8:5d:07:f5:8a:14:9e:5d:2b:c8:35:74:
e5:ea:f1:11:fe:3e:7e:90:36:87:62:9b:f3:71:9b:
e6:5f:aa:e7:8c:71:35:85:bd:3e:7b:8f:b9:73:21:
ad:05:23:b3:d9:77:94:64:e6:a7:13:49:6b:a6:6a:
48:86:c1:43:4c:32:14:8d:49:a0:35:0c:c5:a1:6d:
02:57:a8:0a:aa:14:55:e6:be:21:d5:1e:c0:04:c1:
ca:4d:9a:11:d3:a5:4d:87:76:e3:3e:06:cb:10:29:
04:d5:ad:00:ee:bc:f8:3f:7f:b4:93:57:05:e4:7a:
11:c7:e2:56:d2:db:ed:41:d2:74:e1:89:07:86:b9:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:25:55:AA:3B:51:8E:C7:24:4C:70:29:F6:EC:98:A9:E6:9A:E9:81
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:50:0b:ee:2a:17:3a:f9:5e:87:1e:a6:55:dd:76:17:3e:
d5:c8:52:e4:4d:3f:7e:e1:2d:51:91:a5:7a:1c:90:72:cf:5e:
d1:05:3a:88:96:bd:fa:ff:da:c5:1f:60:47:29:82:05:b6:25:
45:ae:36:c7:b7:0f:2d:e8:7e:37:29:26:8b:72:9e:7b:8d:b5:
e0:1e:30:66:3b:fb:d8:98:70:d1:27:95:67:85:f2:5c:86:bb:
43:a3:1d:5c:13:1d:1a:da:dd:3f:89:ba:c3:44:65:24:05:7a:
96:c9:53:71:13:eb:5c:10:d5:46:5a:28:2a:2a:e3:95:4d:bf:
ce:7b:49:07:41:54:63:ea:73:24:4c:78:ec:82:98:ca:3a:29:
18:78:30:34:75:45:1b:22:6e:13:fc:9e:75:e9:ff:48:f3:a0:
19:47:9f:fd:ae:57:36:c0:70:61:9c:32:d5:1a:96:58:52:08:
57:d9:3c:65:ba:98:c6:02:9d:10:a2:25:85:64:52:91:39:61:
57:5a:28:28:4b:c5:26:ea:9e:41:5b:df:85:b2:2c:08:ef:14:
42:fb:e1:6f:48:8e:5c:9f:b2:47:c3:bf:88:d2:f0:1b:0f:ed:
f7:97:02:42:27:79:77:c9:0f:eb:16:db:5d:79:13:6e:53:e5:
12:01:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:36 2026 by rpki-client