Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: GP1DJvJZ8Ge9Guwl6X931CBOkcLfmJfSXcnpQWnb6bY=
Subject key identifier: 99:B0:3E:91:09:00:70:D9:06:8B:D0:E2:93:5D:B9:88:A9:22:46:A8
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019FFA23FAFD817C3DA8B2B7E2650A45795B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 19FA
Signing time: Thu 13 Aug 2026 08:01:29 +0000
Manifest this update: Thu 13 Aug 2026 08:01:29 +0000
Manifest next update: Fri 14 Aug 2026 08:01:29 +0000
Files and hashes: 1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: YU0xiWXtMiekPSr4ZjR1l2J2fnmF+z9hjfTDhp3WfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:23:fa:fd:81:7c:3d:a8:b2:b7:e2:65:0a:45:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Aug 13 08:01:29 2026 GMT
Not After : Aug 14 08:01:29 2026 GMT
Subject: CN=99b03e91090070d9068bd0e2935db988a92246a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:70:23:08:6a:9b:d4:0c:74:5b:b9:0a:65:
59:79:44:e1:cb:ea:91:5d:91:87:3c:80:2f:16:5d:
39:04:fa:32:e3:67:37:40:ef:e2:31:25:78:0e:42:
8a:eb:e0:23:55:53:a8:0f:ac:12:de:c3:f1:d1:e6:
b5:60:86:1d:93:e0:48:16:72:bd:39:1b:a5:5c:9e:
f2:c4:4a:f5:78:3f:54:2c:44:a5:7f:0c:0c:6a:88:
b3:bd:97:aa:4d:64:bc:ec:35:58:43:cb:e8:00:53:
94:5a:4e:71:e1:be:31:de:18:55:53:33:8f:cb:ad:
b2:91:e4:2f:62:87:a0:7d:b1:3d:1f:5b:b6:9d:1b:
97:21:9f:fe:85:2e:02:ce:d6:ba:01:fe:ab:43:22:
0b:c6:5e:09:92:5d:cc:bc:41:62:47:68:49:c6:52:
59:66:1c:21:7b:1b:81:6a:da:b6:99:58:56:25:1a:
c2:41:b7:c7:74:1b:c5:ce:0a:00:42:bd:c1:86:03:
8d:c6:00:1a:12:d2:48:95:3d:55:6e:d1:f1:3f:49:
fa:27:fd:5b:5d:34:80:0b:2a:90:27:38:41:7e:e3:
35:92:15:43:90:a0:be:a6:b4:9a:e9:c2:f3:82:f9:
68:df:c3:d0:66:5b:b2:2a:0c:19:9f:8c:26:cb:f0:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B0:3E:91:09:00:70:D9:06:8B:D0:E2:93:5D:B9:88:A9:22:46:A8
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0a:19:38:68:80:3e:73:38:1c:88:6c:89:05:08:ac:1c:1e:
29:50:72:4d:b1:36:21:72:71:66:c7:7b:e8:3b:99:1d:b5:68:
e9:a0:21:17:f0:3f:f3:68:c0:0b:3a:a8:2d:0c:32:aa:8c:52:
57:f1:c8:fa:ae:60:e4:b1:db:96:1c:ab:9e:86:c1:d4:17:bd:
60:4a:fd:1a:ff:13:22:66:07:49:4b:22:48:20:44:90:65:ee:
e1:a0:7d:65:23:c1:c6:34:cf:42:9d:f9:f0:03:fd:aa:d2:62:
13:d4:44:39:38:96:97:43:82:96:1b:78:8c:ca:a8:72:9e:c5:
31:ad:32:af:eb:4d:28:06:0b:18:76:72:3a:b3:f2:0a:4e:c9:
8b:07:f9:af:28:82:6f:d8:7b:6d:2f:0a:ac:2f:2c:77:fa:00:
fb:e0:85:8c:24:10:4f:7d:75:04:8b:57:04:e4:8d:2d:54:b1:
b1:5b:44:e6:08:d4:98:54:4d:8a:b6:66:e5:a0:be:00:64:18:
34:c4:28:d5:ec:fd:14:70:cc:84:93:05:3b:be:f1:74:15:f2:
96:52:cc:c2:9e:13:45:76:cb:e2:17:06:7b:2d:c1:84:a3:20:
9e:3c:a1:21:f2:73:cb:7e:12:19:96:63:a8:82:7d:3d:12:52:
f7:e8:46:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:42:25 2026 by rpki-client